13074 matches found
WordPress Beacon Lead Magnets and Lead Capture plugin <= 1.5.8 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Beacon Lead Magnets and Lead Capture versions = 1.5.8...
WordPress Logo Showcase plugin <= 3.0.4 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Logo Showcase versions = 3.0.4...
WordPress Blockspare plugin <= 3.2.9 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by zaim in WordPress Plugin Blockspare versions = 3.2.9...
WordPress Gutenberg & Elementor Templates Importer For Responsive plugin <= 3.1.9 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by Marek Mikita in WordPress Plugin Responsive Plus versions = 3.1.9...
WordPress GS Testimonial Slider plugin <= 3.3.0 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by domiee13 in WordPress Plugin GS Testimonial Slider versions = 3.3.0...
MAL-2025-3664 Malicious code in @ai-document-translation/ui-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8c94ea05205ad6ac8c809be2fa22e18fae368f27f1f8bd34048528dc25daa90 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CGA-P2J3-8RCH-X3QM
Bulletin has no description...
DLA-4154-1 mariadb-10.5 - security update
Bulletin has no description...
PT-2025-20074 · Lemesconsultoria · Lemesconsultoria Hcm Galera.App
Name of the Vulnerable Software and Affected Versions: lemesconsultoria HCM galera.app version 4.58.0 Description: The issue allows an attacker to execute arbitrary code via multiple API endpoints, including "/ted/solicitacao treinamento/", "/rh/metas/perspectiva estrategica/edicao/",...
CGA-9VQC-X2R3-PQJF
Bulletin has no description...
CGA-559J-WF84-9GQX
Bulletin has no description...
GO-2025-3662 Hashicorp Vault Community vulnerable to Incorrect Authorization in github.com/hashicorp/vault
Hashicorp Vault Community vulnerable to Incorrect Authorization in github.com/hashicorp/vault...
CGA-QR3H-MPVC-P58V
Bulletin has no description...
RUSTSEC-2025-0039 Lack of sufficient checks in public API
The following functions in the anon-vec crate are unsound due to insufficient checks on their arguments:: - AnonVec::getref - AnonVec::getmut - AnonVec::removeget The crate was built as a learning project and is not being maintained...
RHSA-2025:4497 Red Hat Security Advisory: kpatch-patch-5_14_0-427_13_1, kpatch-patch-5_14_0-427_31_1, kpatch-patch-5_14_0-427_44_1, and kpatch-patch-5_14_0-427_55_1 security update
Bulletin has no description...
RHSA-2025:4493 Red Hat Security Advisory: ruby:3.3 security update
Bulletin has no description...
MAL-2025-3603 Malicious code in testveriftest1asdlaaaaa (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 ff36b3e2ad882727ed964a43d4599f3713d2bada89b6cec169d727127c21c2fa During installation, the package attempts to exfiltrate cloud tokens --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
MAL-2025-4252 Malicious code in veriftest1asdlaa (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 84fe70a8f5e34c8334d7284bcc9b71826210f029708a53a6ec4b9bb90a33054b During installation, the package attempts to exfiltrate cloud tokens --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...