12165 matches found
EUVD-2025-179053
Malicious code in error-simple-view-public-float npm...
EUVD-2025-175727
Malicious code in view-fire-data-simple-uglify npm...
EUVD-2025-178289
Malicious code in java-simple-void-fork-sudo npm...
EUVD-2025-176376
Malicious code in simple-await-try-book-epsilon npm...
CVE-2025-57310
A Cross-Site Request Forgery CSRF vulnerability in Salmen2/Simple-Faucet-Script v1.07 via crafted POST request to admin.php?p=ads=1 allowing attackers to execute arbitrary code...
SourceCodester Simple E-Banking System 安全漏洞
SourceCodester Simple E-Banking System is a SourceCodester open source simple e-banking system. A security vulnerability exists in SourceCodester Simple E-Banking System version 1.0, which stems from vulnerability to cross-site request forgery attacks...
WordPress Comment Edit Core – Simple Comment Editing plugin <= 3.1.0 - Unauthenticated Sensitive Information Exposure vulnerability
Unauthenticated Sensitive Information Exposure vulnerability discovered by Powpy in WordPress Plugin Comment Edit Core – Simple Comment Editing versions = 3.1.0...
CVE-2025-57310
A Cross-Site Request Forgery CSRF vulnerability in Salmen2/Simple-Faucet-Script v1.07 via crafted POST request to admin.php?p=ads&c=1 allowing attackers to execute arbitrary code...
CVE-2025-11882
The Simple Donate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's simpledonate shortcode in versions less than, or equal to, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
EUVD-2025-117092
Malicious code in simple-black-peacock npm...
CVE-2025-57310
A Cross-Site Request Forgery CSRF vulnerability in Salmen2/Simple-Faucet-Script v1.07 via crafted POST request to admin.php?p=ads&c=1 allowing attackers to execute arbitrary code...
WordPress Simple Downloads List plugin unauthorized data modification vulnerability
WordPress Simple Downloads List plugin is a plugin for managing file downloads that allows users to create and manage file download lists on their website. An unauthorized data modification vulnerability exists in the WordPress Simple Downloads List plugin, which can be exploited by attackers to...
Simple Faucet Script 安全漏洞
Simple Faucet Script is a virtual currency service by Salmen2 Personal Developer. A security vulnerability exists in Simple Faucet Script v1.07, which stems from a cross-site request forgery in the admin.php?p=ads&c=1 endpoint that could lead to the execution of arbitrary code...
EUVD-2025-88840
Malicious code in simplecicadaz3n npm...
EUVD-2025-75629
Malicious code in simpleorangutan-appteadev npm...
EUVD-2025-80552
Malicious code in simpleyak0xrequest npm...
EUVD-2025-80554
Malicious code in simpleporpoise0xrequest npm...
EUVD-2025-60930
The Simple Donate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's simpledonate shortcode in versions less than, or equal to, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
MAL-2025-96595 Malicious code in simple_coral_requirement (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0682ea4e370678d515e6efe08a5a398a0271374562596cb953f9092ec4a37c04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...