13073 matches found
CGA-FV4M-4GC8-8268
Bulletin has no description...
CGA-F36Q-PXQ2-FCRC
Bulletin has no description...
MAL-2025-6483 Malicious code in cpan (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e70433969aea3c8283f99098b25b8a598f427b5fd451e9bfd5bc46098704bfb2 Installing the package starts a revshell and download and starts a remote script depending on version, different malicious functionality. The name seems to...
MINI-FHP2-389Q-2CXM
Bulletin has no description...
BELL-CVE-2025-4878
Bulletin has no description...
BELL-CVE-2025-5351
Bulletin has no description...
CGA-PCG9-4MRR-WQMG
Bulletin has no description...
CVE-2024-11739
CVE-2024-11739 describes an SQL injection in Case ERP prior to v2.0.1 due to improper neutralization of special elements in SQL commands. Affected product: Case ERP (Case Informatics). Impact per sources: potential for high confidentiality, integrity, and availability impact. The issue is mitigat...
WordPress Pre-Publish Post Checklist plugin <= 3.1 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by Nguyen Ngoc Quang Bach maysbachs in WordPress Plugin Pre-Publish Post Checklist versions = 3.1...
WordPress OnionBuzz plugin <= 1.0.7 - Cross Site Request Forgery (CSRF) Vulnerability
Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin OnionBuzz versions = 1.0.7...
WordPress JetEngine plugin <= 3.7.0 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by stealthcopter in WordPress Plugin JetEngine versions = 3.7.0...
CVE-2025-53273
Cross-Site Request Forgery CSRF vulnerability in Slickstream Slickstream slick-engagement allows Cross Site Request Forgery.This issue affects Slickstream: from n/a through = 2.0.3...
CVE-2025-53193
Cross-Site Request Forgery CSRF vulnerability in Burst Statistics B.V. Burst Statistics burst-statistics allows Cross Site Request Forgery.This issue affects Burst Statistics: from n/a through = 2.0.6...
CGA-W6G4-5W3R-HVGW
Bulletin has no description...
Security Bulletin: IBM Maximo Application Suite - Manage Component uses braces-3.0.2.tgz which is vulnerable to CVE-2024-4068
Summary Security Bulletin: IBM Maximo Application Suite - Manage Component uses braces-3.0.2.tgz which is vulnerable to CVE-2024-4068. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2024-4068 DESCRIPTION: The NPM package braces,...
PT-2025-27277 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: Marvell QConvergeConsole affected versions not specified Description: The issue is related to the deserialization of untrusted data in the readNICParametersFromFile function, which can lead to remote code execution. Recommendations: At the...
PT-2025-27160 · WordPress · Wp Edit
Name of the Vulnerable Software and Affected Versions: WP Edit versions 4.0.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject malicious...
CVE-2025-6734
creationtimestamp| type| source ---|---|--- 2025-06-26 23:53:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19660 2025-06-30 20:27:00+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114774193882630947 2026-01-08 20:16:37+00:00| published-proof-of-concept|...
MAL-2025-6596 Malicious code in sqiul83 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 67d309c2d4c740426c07cc17768f6313eebd765242e7e4a63aa04213d21358ea During installation of the source package, it attempts to silently download and start a remote executable. At the time of analysis, the downloading link did no...