1504 matches found
Malicious code in kccenter (npm)
The package kccenter was found to contain malicious code...
MAL-2025-28330 Malicious code in openptv (npm)
The package openptv was found to contain malicious code...
MAL-2025-33599 Malicious code in socketmp (npm)
The package socketmp was found to contain malicious code...
Malicious code in xbjifzkaknptyluq (npm)
The package xbjifzkaknptyluq was found to contain malicious code...
Malicious code in ug-deep-alt (npm)
The package ug-deep-alt was found to contain malicious code...
Malicious code in react-atomic-css (npm)
The package react-atomic-css was found to contain malicious code...
Malicious code in hercules-build-metalsmith-graviton (npm)
The package hercules-build-metalsmith-graviton was found to contain malicious code...
CVE-2025-8314 Software Issue Manager <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter
The Software Issue Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘noaccessmsg parameter in all versions up to, and including, 5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
PT-2025-32624 · WordPress · Software Issue Manager
Name of the Vulnerable Software and Affected Versions: Software Issue Manager plugin for WordPress versions up to and including 5.0.1 Description: The Software Issue Manager plugin for WordPress is susceptible to Stored Cross-Site Scripting through the noaccess msg parameter due to insufficient...
WordPress Plugin Software Issue Manager Cross-Site Script Vulnerability
The WordPress Software Issue Manager plugin is a project-based WordPress plugin for tracking software defects, issues, tasks, and product feature requests, with support for customized reporting. The WordPress Software Issue Manager plugin suffers from a cross-site scripting vulnerability that ste...
CVE-2025-8314: Improper Neutralization of Input During Web Page Generation
The Software Issue Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘noaccessmsg parameter in all versions up to, and including, 5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CGA-925R-XP4G-39WR
Bulletin has no description...
MINI-CXRF-822R-3XJJ
Bulletin has no description...
MINI-H66C-2WH7-68H4
Bulletin has no description...
MINI-H6Q6-GRRH-24RG
Bulletin has no description...
MINI-F7GJ-PHFH-RG9P
Bulletin has no description...
MINI-9M25-5XP9-CVGJ
Bulletin has no description...
MINI-7FWC-F2G6-7RCC
Bulletin has no description...