961 matches found
CLSA-2025-1766075810 sssd: Fix of CVE-2025-11561
CVE-2025-11561: prevent unexpected Kerberos principal-to-account mappings when SSSD's localauth plugin cannot resolve a principal...
curl: Heap Overflow in cURL AmigaOS Socket Implementation
Buffer Overflow in cURL AmigaOS Socket Implementation Report Metadata - Report ID: H1-CURL-AMIGAOS-001 - Report Title: Heap Buffer Overflow in Curlipv4resolver in AmigaOS Socket Backend - Component: /home/el-ha9/curl/lib/amigaos.c - Curlipv4resolver function - Affected Versions: All cURL versions...
CVE-2025-12966
The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the resolveimportdirectory function in versions 4.5.4 to 4.5.7. This makes it possible for authenticated attackers, with Author-level access and above, to upload...
CVE-2025-12966
The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the resolveimportdirectory function in versions 4.5.4 to 4.5.7. This makes it possible for authenticated attackers, with Author-level access and above, to upload...
CLSA-2025-1764028069 sssd: Fix of CVE-2025-11561
CVE-2025-11561: prevent unexpected Kerberos principal-to-account mappings when SSSD's localauth plugin cannot resolve a principal...
CVE-2025-13085 SiteSEO – SEO Simplified <= 1.3.2 - Insecure Direct Object Reference to Sensitive Post Meta Disclosure
The SiteSEO – SEO Simplified plugin for WordPress is vulnerable to Improper Authorization leading to Sensitive Post Meta Disclosure in versions up to and including 1.3.2. This is due to missing object-level authorization checks in the resolvevariables AJAX handler. This makes it possible for...
CVE-2025-13085
CVE-2025-13085 affects SiteSEO – SEO Simplified for WordPress (versions
WordPress plugin SiteSEO 授权问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. An authorizati...
EUVD-2025-178958
Malicious code in export-resolve-theta-slow-refactor npm...
EUVD-2025-179624
Malicious code in compile-catch-gamma-encode-resolve npm...
EUVD-2025-177627
Malicious code in new-alpha-transpile-air-resolve npm...
EUVD-2025-180121
Malicious code in bash-water-resolve-unix-error npm...
EUVD-2025-179699
Malicious code in cluster-protected-resolve-cloud-refactor npm...
Malicious code in root-resolve-wind-stub-interface (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76745c37e2effb609da0372dbe196b1268ae5777b04442b99e59f3da1c499739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177468
Malicious code in omega-test-benchmark-validate-resolve npm...
EUVD-2025-179592
Malicious code in container-bundle-wind-private-resolve npm...
EUVD-2025-177581
Malicious code in node-awk-resolve-dog-public npm...
EUVD-2025-178903
Malicious code in final-dog-throw-resolve-short npm...