19031 matches found
MAL-2025-3659 Malicious code in your-published-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cffcefb87ba1dfcfc4089b98727de2186cb5179c69a0f7630c359ff62ba3546 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Black artifacts on published apps once they resize the window or plugout -plug in external monitors
Black artifacts appear within published applications...
GHSA-C5VG-26P8-Q8CR
creationtimestamp| type| source ---|---|--- 2025-05-05 20:20:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14981...
CVE-2020-25020
creationtimestamp| type| source ---|---|--- 2025-05-05 17:20:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14934...
WordPress BuddyBoss Platform Pro plugin <= 2.7.01 - Authentication Bypass via Apple OAuth provider vulnerability
Authentication Bypass via Apple OAuth provider vulnerability discovered by István Márton in WordPress Plugin BuddyPress Platform Pro versions = 2.7.01...
WordPress Envolve plugin <= 1.0 - Unauthenticated Language File Deletion vulnerability
Unauthenticated Language File Deletion vulnerability discovered by István Márton in WordPress Plugin Envolve Plugin versions = 1.0...
CVE-2024-35885
creationtimestamp| type| source ---|---|--- 2025-05-04 09:17:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14738...
CVE-2024-35891
creationtimestamp| type| source ---|---|--- 2025-05-04 09:17:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14737...
CVE-2021-47340
creationtimestamp| type| source ---|---|--- 2025-05-04 07:18:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14728...
CVE-2021-47343
creationtimestamp| type| source ---|---|--- 2025-05-04 07:18:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14727...
CVE-2021-47351
creationtimestamp| type| source ---|---|--- 2025-05-04 07:17:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14720...
CVE-2021-47353
creationtimestamp| type| source ---|---|--- 2025-05-04 07:17:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14718...
CVE-2021-47356
creationtimestamp| type| source ---|---|--- 2025-05-04 07:17:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14715...
WordPress Subpage List plugin <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by muhammad yudha in WordPress Plugin Subpage List versions = 1.3.3...
WordPress Nomupay Payment Processing Gateway plugin <= 7.1.7 - Arbitrary File Download Vulnerability
Arbitrary File Download Vulnerability discovered by astra.r3verii in WordPress Plugin Nomupay Payment Processing Gateway versions = 7.1.7...
WordPress Visual Builder plugin <= 1.2.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by astra.r3verii Patchstack Alliance in WordPress Plugin Visual Builder versions = 1.2.2...
CVE-2025-37792
creationtimestamp| type| source ---|---|--- 2025-05-02 07:16:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14452...
WordPress MStore API plugin <= 4.17.4 - Unauthenticated Limited Privilege Escalation vulnerability
Unauthenticated Limited Privilege Escalation vulnerability discovered by Brian Sans-Souci liardom in WordPress Plugin MStore API versions = 4.17.4...
WordPress KiwiChat NextClient plugin <= 6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via url Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin KiwiChat NextClient versions = 6.2...