7971 matches found
CVE-2025-11501: Improper Neutralization of Special Elements used in an SQL Command
The Dynamically Display Posts plugin for WordPress is vulnerable to SQL Injection via the 'taxquery' parameter in all versions up to, and including, 1.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...
WordPress plugin Dynamically Display Posts SQL注入漏洞
WordPress Dynamically Display Posts plugin is a WordPress plugin for creating a store locator page in your website that displays information about nearby stores via Google Maps. WordPress Dynamically Display Posts plugin suffers from a SQL injection vulnerability that stems from a lack of...
CVE-2025-24990
creationtimestamp| type| source ---|---|--- 2025-10-14 16:03:45+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0310 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2025-10-14 17:36:18+00:00| seen|...
WordPress Revive Old Posts plugin <= 9.3.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Revive Old Posts versions = 9.3.3...
Signal in the noise: what hashtags reveal about hacktivism in 2025
What do hacktivist campaigns look like in 2025? To answer this question, we analyzed more than 11,000 posts produced by over 120 hacktivist groups circulating across both the surface web and the dark web, with a particular focus on groups targeting MENA countries. The primary goal of our research...
PT-2025-42240
Name of the Vulnerable Software and Affected Versions Dynamically Display Posts plugin for WordPress versions up to and including 1.1 Description The Dynamically Display Posts plugin for WordPress is susceptible to SQL Injection through the tax query parameter. This occurs because of inadequate...
CVE-2025-62176
Mastodon is a free, open-source social network server based on ActivityPub. In Mastodon before 4.4.6, 4.3.14, and 4.2.27, the streaming server accepts serving events for public timelines to clients using any valid authentication token, even if those tokens lack the read:statuses scope. This allow...
CERTFR-2025-ACT-043
creationtimestamp| type| source ---|---|--- 2025-10-13 12:13:08+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3m336sfepqs2y 2025-10-13 12:13:12+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115366794855854060 2025-10-13 12:33:02+00:00| seen|...
Mastodon 安全漏洞
Mastodon is an open source social networking server based on ActivityPub by Mastodon Open Source. A security vulnerability exists in Mastodon versions prior to 4.4.6, prior to 4.3.14, and prior to 4.2.27, which stems from an event where the stream server accepts service for a public timeline usin...
CVE-2025-38477
creationtimestamp| type| source ---|---|--- 2025-10-08 10:17:48+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3m2ofzjtqog25 2025-10-08 10:17:50+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3m2ofzmd6ll2o 2025-10-08 10:26:45+00:00| seen|...
CVE-2025-40649 Múltiples vulnerabilidades en Negotiator de BBMRI-ERIC
Stored Cross-Site Scripting XSS in Biobanking and Biomolecular Resources Negotiator v3.15.2 - European Research Infrastructure BBMRI-ERIC, consisting of a stored XSS due to a lack of proper validation of user input by sending a POST request using parameter text in '/api/v3/negotiations//posts'...
CVE-2025-40649
Stored XSS in BBMRI-ERIC Negotiator v3.15.2 due to insufficient validation of user-supplied data in the text parameter of POST /api/v3/negotiations//posts. A remote attacker could craft input to exfiltrate or steal the cookie session details of an authenticated user. The issue is concrete in the ...
EUVD-2015-1129
Malware in sbrugna...
EUVD-2017-9329
Malware in sbrugna...
EUVD-2005-2601
Malware in sbrugna...
EUVD-2008-6612
Malware in sbrugna...
EUVD-2006-7170
Malware in sbrugna...
EUVD-2006-3416
Malware in sbrugna...