CVE-2025-52751

CVE-2025-52751 affects the WordPress Slide Puzzle plugin (versions ≤ 1.0.0). The issue is a Reflected XSS caused by improper input neutralization during web page generation in the slide-puzzle component. Exploitation could allow an attacker to inject and execute scripts in a victim’s browser when...

WordPress plugin Slide Puzzle 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-43238

Name of the Vulnerable Software and Affected Versions colome Slide Puzzle versions through 1.0.0 Description The software contains a flaw related to improper input handling during web page generation, specifically a Reflected Cross-site Scripting XSS issue. This allows for the injection of...

EUVD-2007-5128

Malware in sbrugna...

EUVD-2014-5485

Malware in sbrugna...

EUVD-2023-52345

Malicious code in bioql PyPI...

EUVD-2023-49319

Malicious code in bioql PyPI...

EUVD-2023-52343

Malicious code in bioql PyPI...

EUVD-2022-48693

Malicious code in bioql PyPI...

A Systematic Evaluation of Parameter-Efficient Fine-Tuning Methods for the Security of Code LLMs

Code-generating Large Language Models LLMs significantly accelerate software development. However, their frequent generation of insecure code presents serious risks. We present a comprehensive evaluation of seven parameter-efficient fine-tuning PEFT techniques, demonstrating substantial gains in...

CVE-2025-58621

CVE-2025-58621 affects PuzzleMe for WordPress. Root cause: improper input neutralization during web page generation leading to stored XSS. Affected: PuzzleMe for WordPress versions up to and including 1.2.0. Impact: stored Cross‑Site Scripting as described in the CVE entry. Remediation: upgrade P...

Linux Distros Unpatched Vulnerability : CVE-2023-24287

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - A crafted save file can cause a buffer overrun in the Undead puzzle CVE-2023-24287 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2023-24283

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - A crafted save file can cause a buffer overrun in the Guess puzzle CVE-2023-24283 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2023-24285

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - A crafted save file can cause a buffer overrun in the Netslide puzzle CVE-2023-24285 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2023-24288

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - A crafted save file can cause a buffer overrun in Simon Tatham's Portable Puzzle Collection CVE-2023-24288 Note that Nessus relies on the presenc...

Linux Distros Unpatched Vulnerability : CVE-2023-24286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - A crafted save file can cause a buffer overrun in the Mosaic puzzle CVE-2023-24286 Note that Nessus relies on the presence of the package as...

MAL-2025-41656 Malicious code in ctf-q21-empire-tmp-test125 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

WordPress Slide Puzzle plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Slide Puzzle versions = 1.0.0...

Fedora 42 : crosswords-puzzle-sets-xword-dl (2025-2f7c693519)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-2f7c693519 advisory. Update to 0.4.8; Fixes: RHBZ2237964, RHBZ2282129 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 43 : crosswords-puzzle-sets-xword-dl (2025-5c7374bfdb)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-5c7374bfdb advisory. Automatic update for crosswords-puzzle-sets-xword-dl-0.4.8-1.fc43. Changelog Fri Mar 28 2025 Davide Cavalca - 0.4.8-1 - Update to 0.4.8; Fixes: RHBZ2237964,...