13073 matches found
MAL-2025-6448 Malicious code in atlasctf-21-prod-11 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 ece7411f662f1c3b05a8f6bbda7c94099f1e20acc383cefb69bc8195da83e86a On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...
MAL-2025-6451 Malicious code in atlasctf-21-prod-14 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 53e97c9ccd81536ef4d3b1aacb14600cc31b01f8bf00b53326458e485459c7e4 On installation or importing, the package attempts to exfiltrate some basic information, e.g. /etc/passwd --- Category: PROBABLYPENTEST - Packages looking like...
BELL-CVE-2025-38001
Bulletin has no description...
CVE-2025-49619
Skyvern through 0.1.85 is vulnerable to server-side template injection SSTI in the Prompt field of workflow blocks such as the Navigation v2 Block. Improper sanitization of Jinja2 template input allows authenticated users to inject crafted expressions that are evaluated on the server, leading to...
CGA-3QPV-V6GF-PX9X
Bulletin has no description...
CVE-2025-49306
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in catchsquare WP Social Widget wp-social-widget allows Stored XSS.This issue affects WP Social Widget: from n/a through = 2.3...
CVE-2025-49273
Cross-Site Request Forgery CSRF vulnerability in sminozzi WP Tools wptools allows Cross Site Request Forgery.This issue affects WP Tools: from n/a through = 5.24...
CVE-2025-41362 Code injection vulnerability in IDF and ZLF
Code injection vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allows an attacker to store malicious payload in software that will run in the victim's browser. Exploiting this vulnerability requires authenticating to the device and executing certain commands that...
RHBA-2024:2518 Red Hat Bug Fix Advisory: expat bug fix and enhancement update
Bulletin has no description...
MAL-2025-4705 Malicious code in launch-darkly-provider (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6696ff99444d08a99f63e53ce846b37cf11486968604779920e29d8ca0185d08 Any computer that has this package installed or running should be considered...
PT-2025-24024 · Unknown · Arkweb V8 Module
Name of the Vulnerable Software and Affected Versions: arkweb v8 module affected versions not specified Description: The issue is related to a Wasm exception capture vulnerability in the arkweb v8 module. Successful exploitation of this vulnerability may cause the failure to capture specific Wasm...
PT-2025-24123 · Unknown · Post Author
Name of the Vulnerable Software and Affected Versions: Post Author versions n/a through 1.1.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, and also...
MINI-FJXV-8C87-FP6H
Bulletin has no description...
WordPress Forminator plugin <= 1.44.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via id and data-size Parameters vulnerability
Authenticated Contributor+ Stored DOM-Based Cross-Site Scripting via id and data-size Parameters vulnerability discovered by Asaf Mozes in WordPress Plugin Forminator versions = 1.44.1...
MINI-P7R3-8RJ6-5488
Bulletin has no description...
MINI-HC56-PMHP-686V
Bulletin has no description...
MINI-F67J-CQ2W-C7M3
Bulletin has no description...
BELL-CVE-2024-12718
Bulletin has no description...