1504 matches found
Malicious code in edcm-gui (npm)
The package edcm-gui was found to contain malicious code...
MAL-2025-34185 Malicious code in sunruse-math-vector (npm)
The package sunruse-math-vector was found to contain malicious code...
MAL-2025-28330 Malicious code in openptv (npm)
The package openptv was found to contain malicious code...
MAL-2025-32147 Malicious code in respace-theme-dark (npm)
The package respace-theme-dark was found to contain malicious code...
MAL-2025-32525 Malicious code in ru.rostel (npm)
The package ru.rostel was found to contain malicious code...
Malicious code in jawema (npm)
The package jawema was found to contain malicious code...
Malicious code in algol-atlas-bionics-ultra (npm)
The package algol-atlas-bionics-ultra was found to contain malicious code...
CVE-2025-8314 Software Issue Manager <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter
The Software Issue Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘noaccessmsg parameter in all versions up to, and including, 5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
WordPress plugin Software Issue Manager 跨站脚本漏洞
The WordPress Software Issue Manager plugin is a project-based WordPress plugin for tracking software defects, issues, tasks, and product feature requests, with support for customized reporting. The WordPress Software Issue Manager plugin suffers from a cross-site scripting vulnerability that ste...
PT-2025-32624 · WordPress · Software Issue Manager
Name of the Vulnerable Software and Affected Versions: Software Issue Manager plugin for WordPress versions up to and including 5.0.1 Description: The Software Issue Manager plugin for WordPress is susceptible to Stored Cross-Site Scripting through the noaccess msg parameter due to insufficient...
CVE-2025-8314: Improper Neutralization of Input During Web Page Generation
The Software Issue Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘noaccessmsg parameter in all versions up to, and including, 5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CGA-925R-XP4G-39WR
Bulletin has no description...
MINI-CXRF-822R-3XJJ
Bulletin has no description...
MINI-H66C-2WH7-68H4
Bulletin has no description...
MINI-H6Q6-GRRH-24RG
Bulletin has no description...
MINI-F7GJ-PHFH-RG9P
Bulletin has no description...
MINI-9M25-5XP9-CVGJ
Bulletin has no description...
MINI-7FWC-F2G6-7RCC
Bulletin has no description...