MAL-2025-96599 Malicious code in simple_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b18eb4395ad66014c0af7ab6e7a50530f3979c8291a46052611aeeb4c2f567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-73695

Malicious code in simplecoralrequirement npm...

EUVD-2025-73691

Malicious code in simplestarfishz3n npm...

EUVD-2025-66750

Malicious code in simplegibbonz3n npm...

EUVD-2025-66749

Malicious code in simplesparrowz3n npm...

WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by daroo in WordPress Plugin Seriously Simple Podcasting versions = 3.13.0...

CVE-2025-11882

The Simple Donate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's simpledonate shortcode in versions less than, or equal to, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-11882 Simple Donate <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Simple Donate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's simpledonate shortcode in versions less than, or equal to, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

EUVD-2025-52016

Malicious code in simple-fuchsia-stingray npm...

MAL-2025-70634 Malicious code in simple-purple-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5692a08de852c68c3a0e4375acdcf1665c25b39a9d643b0e191fda06b548f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52015

Malicious code in simple-purple-koala npm...

MAL-2025-70636 Malicious code in simple-violet-caterpillar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3844741ad185579ea95cbb35a062d22ab4ab32d7baa5e7aa6f2463a144faaf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52013

Malicious code in simple-violet-caterpillar npm...

EUVD-2025-52014

Malicious code in simple-tan-wasp npm...

EUVD-2025-50830

An authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS Made Simple Foundation File Manager v2.2.22 allows attackers with Administrator privileges to execute arbitrary code via uploading a crafted PHP file...

EUVD-2025-57345

Malicious code in simplemarmosetz3n npm...

CVE-2025-63678

An authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS Made Simple Foundation File Manager v2.2.22 allows attackers with Administrator privileges to execute arbitrary code via uploading a crafted PHP file...

CVE-2025-63709

A Cross-Site Scripting XSS vulnerability exists in SourceCodester Simple To-Do List System 1.0 in the "Add Tasks" text input. An authenticated user can submit HTML/JavaScript that is not correctly sanitized or encoded on output. The injected script is stored and later rendered in the browser of a...

Advantech iView SQL Injection Vulnerability (CNVD-2025-31064)

Advantech iView is a software developed by Advantech for managing B+BSmartWorx series devices through a simple network management protocol. Advantech iView suffers from a SQL injection vulnerability that originates from an authentication bypass of the ztpconfigid parameter of the NetworkServlet...

PT-2025-46262

Name of the Vulnerable Software and Affected Versions Simple Donate plugin for WordPress versions prior to 1.1 Description The Simple Donate plugin for WordPress is susceptible to Stored Cross-Site Scripting through the simpledonate shortcode. Insufficient input sanitization and output escaping o...