13092 matches found
PT-2025-30465
Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: A remote code execution issue exists due to an uninitialized variable during AR file parsing. Recommendations: At the moment, there is no information about a newer version that...
WordPress Ebook Store plugin <= 5.8012 - Authenticated (Administrator+) Stored Cross-Site Scripting via Order Details vulnerability
Authenticated Administrator+ Stored Cross-Site Scripting via Order Details vulnerability discovered by Bee in WordPress Plugin Ebook Store versions = 5.8012...
PYSEC-2025-71
Cadwyn creates production-ready community-driven modern Stripe-like API versioning in FastAPI. In versions before 5.4.3, the version parameter of the "/docs" endpoint is vulnerable to a Reflected XSS Cross-Site Scripting attack. This XSS would notably allow an attacker to execute JavaScript code ...
CGA-7CCG-JM7Q-GWXV
Bulletin has no description...
CGA-G92C-J3HF-X9FM
Bulletin has no description...
CGA-RHF3-CGM4-5JCG
Bulletin has no description...
CGA-J3Q7-3JFC-2GHC
Bulletin has no description...
CGA-CQC9-MWRX-WC3F
Bulletin has no description...
CGA-QJF7-4CQ7-9V8J
Bulletin has no description...
CGA-556P-55PV-67V6
Bulletin has no description...
GO-2025-3765 SQL injection vulnerability in github.com/uptrace/bun/driver/pgdriver
SQL injection vulnerability in github.com/uptrace/bun/driver/pgdriver...
MAL-2025-6067 Malicious code in @toptal/picasso-utils (npm)
The package communicates with a domain associated with malicious activity...
CGA-C9JV-VGF2-PXH8
Bulletin has no description...
MINI-38VX-Q2F3-PX54
Bulletin has no description...
CVE-2025-51400
A stored cross-site scripting XSS vulnerability in the Personal Canned Messages of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload...
MAL-2025-6049 Malicious code in @toptal/picasso-grid (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6042 Malicious code in @toptal/picasso-calendar (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6069 Malicious code in @xene/core (npm)
The package communicates with a domain associated with malicious activity...