MINI-99R8-HJ73-V5CJ

Bulletin has no description...

WordPress Media Folder plugin <= 1.0.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Media Folder versions = 1.0.0...

CVE-2025-6210 Hardlink-Based Path Traversal in run-llama/llama_index

A vulnerability in the ObsidianReader class of the run-llama/llamaindex repository, specifically in version 0.12.27, allows for hardlink-based path traversal. This flaw permits attackers to bypass path restrictions and access sensitive system files, such as /etc/passwd, by exploiting hardlinks. T...

MINI-RP39-2Q76-54QM

Bulletin has no description...

BELL-CVE-2025-38194

Bulletin has no description...

BELL-CVE-2025-38206

Bulletin has no description...

BELL-CVE-2025-38213

Bulletin has no description...

BELL-CVE-2025-38212

Bulletin has no description...

BELL-CVE-2025-38232

Bulletin has no description...

MINI-4M9P-QRVM-CR7M

Bulletin has no description...

MINI-275M-PX9M-RM3F

Bulletin has no description...

WordPress Electrician - Electrical Service WordPress Theme <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Electrician - Electrical Service WordPress Type Theme Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-31055 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c51b2442e459 Credits Tran Nguye...

MINI-9HC9-2FP5-GRRQ

Bulletin has no description...

MINI-9FMJ-4G6V-HJHW

Bulletin has no description...

MINI-3M2G-RH76-6767

Bulletin has no description...

MAL-2025-5636 Malicious code in ass-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d9179dab2c24e4e6a26ba920c58d4c057745bfaf4cf851a377864974a3fdfd1a The OpenSSF Package Analysis project identified 'ass-frontend' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6565 Malicious code in pipmodule83 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 95b01ea01a7fd1ff5e52491e6b143aa98f45a6f331814222fe38e76ad3ac0863 If run as a module, the package downloads and executes a remote script. At the time of check, the remote script was just opening a popup; thus it's not...

BELL-CVE-2025-38193

Bulletin has no description...

BELL-CVE-2025-38202

Bulletin has no description...

GHSA-287X-9RFF-QVCG Rust Web Push is vulnerable to a DoS attack via a large integer in a Content-Length header

The web-push crate before 0.10.4 for Rust allows a denial of service memory consumption in the built-in clients via a large integer in a Content-Length header. The patch was initially made available in version 0.10.3, but version 0.10.3 has since been yanked...