6819 matches found
Linux Distros Unpatched Vulnerability : CVE-2022-24999
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - qs before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process hang for an Express application because an proto...
Linux Distros Unpatched Vulnerability : CVE-2020-29571
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xen through 4.14.x. A bounds check common to most operation time functions specific to FIFO event channels depends on the CPU observi...
Linux Distros Unpatched Vulnerability : CVE-2018-6152
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The implementation of the Page.downloadBehavior backend unconditionally marked downloaded files as safe, regardless of file type in Google Chrome prior to...
CVE-2025-8464
The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.9.0 via the wpcf7guestuserid cookie. This makes it possible for unauthenticated attackers to upload and delete files outside of the...
CVE-2025-8464 Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.0 - Directory Traversal via `wpcf7_guest_user_id` Cookie
The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.9.0 via the wpcf7guestuserid cookie. This makes it possible for unauthenticated attackers to upload and delete files outside of the...
CVE-2025-8464 Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.0 - Directory Traversal via `wpcf7_guest_user_id` Cookie
The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.9.0 via the wpcf7guestuserid cookie. This makes it possible for unauthenticated attackers to upload and delete files outside of the...
CVE-2025-8464
CVE-2025-8464 affects the WordPress plugin Drag and Drop Multiple File Upload for Contact Form 7, vulnerable to Directory Traversal through the wpcf7_guest_user_id cookie in all versions up to 1.3.9.0. This could allow unauthenticated attackers to upload and delete files outside the intended dire...
PT-2025-33542 · WordPress · Drag/Drop Multiple File Upload – Contact Form 7
Name of the Vulnerable Software and Affected Versions: Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress versions through 1.3.9.0 Description: The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Directory Traversal via the wpcf7...
Malicious code in decoherence-astroinformatics-subduction-dotenv-safe (npm)
The package decoherence-astroinformatics-subduction-dotenv-safe was found to contain malicious code...
Malicious code in nightwatch-andromeda-dotenv-safe-figures (npm)
The package nightwatch-andromeda-dotenv-safe-figures was found to contain malicious code...
Malicious code in safe-chain-test (npm)
The package safe-chain-test was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
Malicious code in dotenv-safe-mira-polaris-passport (npm)
The package dotenv-safe-mira-polaris-passport was found to contain malicious code...
Malicious code in ethology-bootes-dotenv-safe-xerxes (npm)
The package ethology-bootes-dotenv-safe-xerxes was found to contain malicious code...
Malicious code in dotenv-safe-firebase-uninstall-innercore (npm)
The package dotenv-safe-firebase-uninstall-innercore was found to contain malicious code...
Malicious code in neptune-markdown-pdf-ora-dotenv-safe (npm)
The package neptune-markdown-pdf-ora-dotenv-safe was found to contain malicious code...
MAL-2025-13955 Malicious code in ablation-dotenv-safe-coronalmassejection-non-blocking (npm)
The package ablation-dotenv-safe-coronalmassejection-non-blocking was found to contain malicious code...
Malicious code in iota-biohacking-dotenv-safe-delphinus (npm)
The package iota-biohacking-dotenv-safe-delphinus was found to contain malicious code...
MAL-2025-18458 Malicious code in dione-electron-dotenv-safe-elara (npm)
The package dione-electron-dotenv-safe-elara was found to contain malicious code...