12182 matches found
PT-2025-33989 · Unknown · Simple Business Directory Pro
Name of the Vulnerable Software and Affected Versions: Simple Business Directory Pro affected versions not specified Description: An incorrect privilege assignment issue exists in Simple Business Directory Pro, allowing for privilege escalation. Recommendations: At the moment, there is no...
PT-2025-34003 · Mitchell Bennis · Simple File List
Name of the Vulnerable Software and Affected Versions: Mitchell Bennis Simple File List versions through 6.1.14 Description: An improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in Mitchell Bennis Simple File List, allowing path traversal. Recommendations:...
Linux Distros Unpatched Vulnerability : CVE-2019-12222
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in libSDL2.a in Simple DirectMedia Layer SDL 2.0.9. There is an out-of-bounds read in the function SDLInvalidateMap at video/SDLpixels.c...
Linux Distros Unpatched Vulnerability : CVE-2019-12216
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in libSDL2.a in Simple DirectMedia Layer SDL 2.0.9 when used in conjunction with libSDL2image.a in SDL2image 2.0.4. There is a heap-base...
CVE-2025-9026
A vulnerability was identified in D-Link DIR-860L 2.04.B04. This affects the function ssdpcgimain of the file htdocs/cgibin of the component Simple Service Discovery Protocol. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been...
WordPress Simple Login Log plugin <= 1.1.3 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by mcdruid in WordPress Plugin Simple Login Log versions = 1.1.3...
Announcing Nmap 7.95 Upgrade and More Accurate Simple Network Management Protocol (SNMP) Fingerprinting
At Rapid7, our commitment is to provide you with the most accurate and reliable scan data possible; as such, we are continuously updating our underlying technology. Today we are excited to announce an upcoming enhancement to the InsightVM scan engine, aimed at improving the accuracy of Simple...
CVE-2025-9026
A vulnerability was identified in D-Link DIR-860L 2.04.B04. This affects the function ssdpcgimain of the file htdocs/cgibin of the component Simple Service Discovery Protocol. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2025-9025
The CVE concerns code-projects Simple Cafe Ordering System 1.0. The vulnerability exists in portal.php where the ID parameter is used unsafely, allowing SQL injection. The attack can be launched remotely and the exploit has been publicly disclosed. Connected sources corroborate the same flaw acro...
CVE-2025-9025 code-projects Simple Cafe Ordering System portal.php sql injection
A vulnerability was determined in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /portal.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...
PT-2025-33470 · Unknown · Simple Cafe Ordering System
Name of the Vulnerable Software and Affected Versions: Simple Cafe Ordering System version 1.0 Description: A vulnerability exists in the Simple Cafe Ordering System that allows for SQL injection. The issue is located in an unknown functionality within the /portal.php file. Manipulation of the ID...
Unspecified Vulnerability in WordPress Simple Local Avatars plugin
WordPress Simple Local Avatars plugin is a WordPress plugin mainly used to allow users to upload and manage local avatars, replacing the default Gravatar service. A security vulnerability exists in the WordPress Simple Local Avatars plugin, which stems from a lack of capability checking, and can ...
WordPress Simple Responsive Slider plugin cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. The WordPress Simple Responsive Slider plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of...
Linux Distros Unpatched Vulnerability : CVE-2025-37934
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Fix pointer check in graphutilparselinkdirection Actually check if...
Malicious code in @scdb/simple-http (npm)
The package @scdb/simple-http was found to contain malicious code...
MAL-2025-40950 Malicious code in zero-hot-long-simple-integer (npm)
The package zero-hot-long-simple-integer was found to contain malicious code...
MAL-2025-33268 Malicious code in simple-js-sha3-224 (npm)
The package simple-js-sha3-224 was found to contain malicious code...
MAL-2025-33267 Malicious code in simple-js-sha3 (npm)
The package simple-js-sha3 was found to contain malicious code...