6459 matches found
MAL-2025-13988 Malicious code in accretion-puppeteer-pegasus-sync (npm)
The package accretion-puppeteer-pegasus-sync was found to contain malicious code...
MAL-2025-16355 Malicious code in bunyan-sync-css-loader-quasarjet (npm)
The package bunyan-sync-css-loader-quasarjet was found to contain malicious code...
MAL-2025-37883 Malicious code in unuk-morgan-mini-css-extract-plugin-sync (npm)
The package unuk-morgan-mini-css-extract-plugin-sync was found to contain malicious code...
MAL-2025-34634 Malicious code in technosignature-higgs-selenology-sync (npm)
The package technosignature-higgs-selenology-sync was found to contain malicious code...
MAL-2025-34334 Malicious code in sync-yaml-command-ganymede (npm)
The package sync-yaml-command-ganymede was found to contain malicious code...
MAL-2025-34333 Malicious code in sync-superagent-forever-singularitarianism (npm)
The package sync-superagent-forever-singularitarianism was found to contain malicious code...
MAL-2025-34330 Malicious code in sync-color (npm)
The package sync-color was found to contain malicious code...
CVE-2025-53729
Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally...
CVE-2025-49047
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in keeross DigitalOcean Spaces Sync do-spaces-sync allows Stored XSS.This issue affects DigitalOcean Spaces Sync: from n/a through = 2.2.1...
CVE-2025-49047 WordPress DigitalOcean Spaces Sync plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in keeross DigitalOcean Spaces Sync allows Stored XSS. This issue affects DigitalOcean Spaces Sync: from n/a through 2.2.1...
CVE-2025-49047
CVE-2025-49047 is a stored Cross-Site Scripting vulnerability in the WordPress plugin DigitalOcean Spaces Sync (versions
CVE-2025-49047: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in keeross DigitalOcean Spaces Sync do-spaces-sync allows Stored XSS.This issue affects DigitalOcean Spaces Sync: from n/a through = 2.2.1...
WordPress plugin DigitalOcean Spaces Sync 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2025-54672: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Jordy Meow Photo Engine wplr-sync allows Cross Site Request Forgery.This issue affects Photo Engine: from n/a through = 6.4.3...
PT-2025-33180 · Digitalocean · Digitalocean Spaces Sync
Name of the Vulnerable Software and Affected Versions: DigitalOcean Spaces Sync versions through 2.2.1 Description: The software contains an improper neutralization of input during web page generation, leading to a stored cross-site scripting issue. Recommendations: Update to a version later than...
Vulnerabilities fixed in Azure products
Microsoft has fixed vulnerabilities in Azure products. The vulnerabilities are related to improper access control mechanisms, allowing authorized attackers to perform local spoofing attacks, obtain elevated privileges, reveal sensitive information and compromise the integrity of systems. This can...
CVE-2025-53729
Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally...
CVE-2025-53729
Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally...
CVE-2025-53729
The CVE-2025-53729 entry concerns an Elevation of Privilege in Microsoft Azure File Sync. The vulnerability affects the Azure File Sync Agent on Windows Server installations prior to the 18.3 release (v18.3.0.0 fixes the issue; versions up to 18.2 and earlier are affected). The underlying problem...