WordPress All in One Music Player plugin path traversal vulnerability

WordPress All in One Music Player plugin is a plugin with integrated music playback functionality, mainly used for WooCommerce, Dokan, WCFM Marketplace and other multi-platform e-commerce systems. A path traversal vulnerability exists in the WordPress All in One Music Player plugin, which stems...

GHSA-J44M-5V8F-GC9C Flowise is vulnerable to arbitrary file exposure through its ReadFileTool

Summary The ReadFileTool in Flowise does not restrict file path access, allowing authenticated attackers to exploit this vulnerability to read arbitrary files from the file system, potentially leading to remote command execution. Details Flowise supports providing ReadFileTool for large models to...

CVE-2025-10494

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation when deleting profile pictures in all versions up to, and including, 1.4.89. This makes it possible for authenticated attackers, with...

EUVD-2020-3035

Malware in sbrugna...

EUVD-2021-14403

Malware in sbrugna...

EUVD-2001-0031

Malware in sbrugna...

EUVD-2019-8876

Malware in sbrugna...

EUVD-2021-32507

Malicious code in bioql PyPI...

EUVD-2024-46443

Malicious code in bioql PyPI...

EUVD-2023-46915

Malicious code in bioql PyPI...

EUVD-2023-29802

Malicious code in bioql PyPI...

EUVD-2025-5038

Malicious code in bioql PyPI...

EUVD-2025-31686

Malicious code in bioql PyPI...

EUVD-2025-27135

Malicious code in bioql PyPI...

EUVD-2025-6017

Malicious code in bioql PyPI...

EUVD-2025-9333

Malicious code in bioql PyPI...

EUVD-2021-27910

Malicious code in bioql PyPI...

EUVD-2023-33774

Malicious code in bioql PyPI...

CVE-2025-60449

An information disclosure vulnerability has been discovered in SeaCMS 13.1. The vulnerability exists in the adminsafe.php component located in the /btcoan/ directory. This security flaw allows authenticated administrators to scan and download not only the application’s source code but also...

PT-2025-40524

Name of the Vulnerable Software and Affected Versions TRUfusion Enterprise versions through 7.10.4.0 Description The application does not properly sanitize input to the /trufusionPortal/getCobrandingData endpoint, allowing path traversal sequences to be included. This can be used to read any loca...