CVE-2025-39468 WordPress Modal Survey plugin <= 2.0.2.0.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in pantherius Modal Survey modal-survey.This issue affects Modal Survey: from n/a through = 2.0.2.0.1...

CVE-2025-39468

CVE-2025-39468 refers to a Local File Inclusion vulnerability in the WordPress Modal Survey plugin (modal-survey) affecting versions up to 2.0.2.0.1. The issue arises from improper control of filenames used in include/require, enabling an attacker to read local files via crafted input. The connec...

EUVD-2025-38026

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in pantherius Modal Survey modal-survey.This issue affects Modal Survey: from n/a through = 2.0.2.0.1...

WordPress plugin Modal Survey 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A security vulnerabili...

PT-2025-45195

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in pantherius Modal Survey modal-survey.This issue affects Modal Survey: from n/a through = 2.0.2.0.1...

CVE-2025-39468: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in pantherius Modal Survey modal-survey.This issue affects Modal Survey: from n/a through = 2.0.2.0.1...

Prevalence of Security and Privacy Risk-Inducing Usage of AI-Based Conversational Agents

Recent improvement gains in large language models LLMs have lead to everyday usage of AI-based Conversational Agents CAs. At the same time, LLMs are vulnerable to an array of threats, including jailbreaks and, for example, causing remote code execution when fed specific inputs. As a result, users...

MAL-2025-49185 Malicious code in epic-react-survey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 066d82a07678789c4daff49994f4d589e8a44a864c34d3116dd48064301bb2e1 The package epic-react-survey was found to contain malicious code...

Malicious code in epic-react-survey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 066d82a07678789c4daff49994f4d589e8a44a864c34d3116dd48064301bb2e1 The package epic-react-survey was found to contain malicious code...

EUVD-2025-37108

Malicious code in epic-react-survey npm...

How CISOs Should Plan Security Budgets for 2026

Build a defensible 2026 security budget with data, not guesswork. We share practical tips, ROI levers, and fresh insights from our survey of 300+ CISOs and security leaders...

CVE-2025-60562

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formWlSiteSurvey...

CVE-2025-60562

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formWlSiteSurvey...

CVE-2025-60562

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formWlSiteSurvey...

CVE-2025-60562

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formWlSiteSurvey...

CVE-2025-60562

The D-Link DIR600L wireless router, specifically running firmware version FW116WWb01 , is vulnerable to a stack-based buffer overflow (CWE-121). The flaw exists in the formWlSiteSurvey() function because it fails to properly validate the length of input data provided via the curTime parameter. An...

CVE-2025-48095

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Survey Maker survey-maker allows Stored XSS.This issue affects Survey Maker: from n/a through = 5.1.8.8...

CVE-2025-48098

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Survey Maker survey-maker allows Stored XSS.This issue affects Survey Maker: from n/a through = 5.1.8.8...

CVE-2025-53426

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bob Likert Survey Master likert-survey-master allows Reflected XSS.This issue affects Likert Survey Master: from n/a through = 0.8.0.1...

EUVD-2025-35457

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bob Likert Survey Master likert-survey-master allows Reflected XSS.This issue affects Likert Survey Master: from n/a through = 0.8.0.1...