5972 matches found
CVE-2025-41242
CVE-2025-41242 is a path traversal vulnerability in Spring Framework MVC when deployed on a non‑compliant Servlet container. An app is at risk if it is WAR‑deployed or uses an embedded container, the container does not reject suspicious URI sequences, and the app serves static resources via Sprin...
CVE-2025-55286
z2d is a pure Zig 2D graphics library. z2d v0.7.0 released with a new multi-sample anti-aliasing MSAA method, which uses a new buffering mechanism for storing coverage data. This differs from the standard alpha mask surface used for the previous super-sample anti-aliasing SSAA method. Under certa...
Linux Distros Unpatched Vulnerability : CVE-2022-24999
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - qs before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process hang for an Express application because an proto...
Linux Distros Unpatched Vulnerability : CVE-2020-29571
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xen through 4.14.x. A bounds check common to most operation time functions specific to FIFO event channels depends on the CPU observi...
Linux Distros Unpatched Vulnerability : CVE-2018-6152
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The implementation of the Page.downloadBehavior backend unconditionally marked downloaded files as safe, regardless of file type in Google Chrome prior to...
CVE-2025-8464
The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.9.0 via the wpcf7guestuserid cookie. This makes it possible for unauthenticated attackers to upload and delete files outside of the...
CVE-2025-8464 Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.0 - Directory Traversal via `wpcf7_guest_user_id` Cookie
The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.9.0 via the wpcf7guestuserid cookie. This makes it possible for unauthenticated attackers to upload and delete files outside of the...
CVE-2025-8464 Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.0 - Directory Traversal via `wpcf7_guest_user_id` Cookie
The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.9.0 via the wpcf7guestuserid cookie. This makes it possible for unauthenticated attackers to upload and delete files outside of the...
CVE-2025-8464
CVE-2025-8464 affects the WordPress plugin Drag and Drop Multiple File Upload for Contact Form 7, vulnerable to Directory Traversal through the wpcf7_guest_user_id cookie in all versions up to 1.3.9.0. This could allow unauthenticated attackers to upload and delete files outside the intended dire...
PT-2025-33542 · WordPress · Drag/Drop Multiple File Upload – Contact Form 7
Name of the Vulnerable Software and Affected Versions: Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress versions through 1.3.9.0 Description: The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Directory Traversal via the wpcf7...
Malicious code in dotenv-safe-auriga-cz-conventional-changelog-castor (npm)
The package dotenv-safe-auriga-cz-conventional-changelog-castor was found to contain malicious code...
Malicious code in dotenv-safe-mira-polaris-passport (npm)
The package dotenv-safe-mira-polaris-passport was found to contain malicious code...
Malicious code in bootstrap-jabbah-blackhole-dotenv-safe (npm)
The package bootstrap-jabbah-blackhole-dotenv-safe was found to contain malicious code...
Malicious code in neptune-markdown-pdf-ora-dotenv-safe (npm)
The package neptune-markdown-pdf-ora-dotenv-safe was found to contain malicious code...
Malicious code in iota-biohacking-dotenv-safe-delphinus (npm)
The package iota-biohacking-dotenv-safe-delphinus was found to contain malicious code...
Malicious code in ursa-jsonp-lyra-dotenv-safe (npm)
The package ursa-jsonp-lyra-dotenv-safe was found to contain malicious code...
Malicious code in nightwatch-andromeda-dotenv-safe-figures (npm)
The package nightwatch-andromeda-dotenv-safe-figures was found to contain malicious code...
Malicious code in rate-limiter-joviology-apex-dotenv-safe (npm)
The package rate-limiter-joviology-apex-dotenv-safe was found to contain malicious code...