13121 matches found
CVE-2025-41362 Code injection vulnerability in IDF and ZLF
Code injection vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allows an attacker to store malicious payload in software that will run in the victim's browser. Exploiting this vulnerability requires authenticating to the device and executing certain commands that...
RHBA-2024:2518 Red Hat Bug Fix Advisory: expat bug fix and enhancement update
Bulletin has no description...
MAL-2025-4705 Malicious code in launch-darkly-provider (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6696ff99444d08a99f63e53ce846b37cf11486968604779920e29d8ca0185d08 Any computer that has this package installed or running should be considered...
PT-2025-24123 · Unknown · Post Author
Name of the Vulnerable Software and Affected Versions: Post Author versions n/a through 1.1.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, and also...
PT-2025-24024 · Unknown · Arkweb V8 Module
Name of the Vulnerable Software and Affected Versions: arkweb v8 module affected versions not specified Description: The issue is related to a Wasm exception capture vulnerability in the arkweb v8 module. Successful exploitation of this vulnerability may cause the failure to capture specific Wasm...
MINI-FJXV-8C87-FP6H
Bulletin has no description...
WordPress Forminator plugin <= 1.44.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via id and data-size Parameters vulnerability
Authenticated Contributor+ Stored DOM-Based Cross-Site Scripting via id and data-size Parameters vulnerability discovered by Asaf Mozes in WordPress Plugin Forminator versions = 1.44.1...
MINI-P7R3-8RJ6-5488
Bulletin has no description...
MINI-F67J-CQ2W-C7M3
Bulletin has no description...
MINI-HC56-PMHP-686V
Bulletin has no description...
BELL-CVE-2024-12718
Bulletin has no description...
MINI-RC4M-2452-VC27
Bulletin has no description...
MINI-W8CF-M39W-8M59
Bulletin has no description...
BIT-JOOMLA-2025-25226 [20250401] - Joomla Framework - SQL injection vulnerability in quoteNameStr method of Database package
Improper handling of identifiers lead to a SQL injection vulnerability in the quoteNameStr method of the database package. Please note: the affected method is a protected method. It has no usages in the original packages in neither the 2.x nor 3.x branch and therefore the vulnerability in questio...
BIT-JOOMLA-2024-40747 [20250101] - Core - XSS vectors in module chromes
Various module chromes didn't properly process inputs, leading to XSS vectors...
BIT-JOOMLA-2024-40743 [20240805] - Core - XSS vectors in Outputfilter::strip* methods
The stripImages and stripIframes methods didn't properly process inputs, leading to XSS vectors...
WordPress The Events Calendar Countdown Addon plugin <= 1.4.9 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin The Events Calendar Countdown Addon versions = 1.4.9...
WordPress Bellows Accordion Menu plugin <= 1.4.3 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Bellows Accordion Menu versions = 1.4.3...