Lucene search
+L

104 matches found

Cvelist
Cvelist
•added 2026/01/22 4:52 p.m.•31 views

CVE-2025-68035 WordPress Tabby Checkout plugin <= 5.8.4 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in tabbyai Tabby Checkout tabby-checkout allows Retrieve Embedded Sensitive Data.This issue affects Tabby Checkout: from n/a through = 5.8.4...

7.5CVSS0.00351EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/22 4:52 p.m.•6 views

CVE-2025-68035 WordPress Tabby Checkout plugin <= 5.8.4 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in tabbyai Tabby Checkout tabby-checkout allows Retrieve Embedded Sensitive Data.This issue affects Tabby Checkout: from n/a through = 5.8.4...

5.8AI score0.00351EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/22 4:52 p.m.•6 views

CVE-2025-68035

Insertion of Sensitive Information Into Sent Data vulnerability in tabbyai Tabby Checkout tabby-checkout allows Retrieve Embedded Sensitive Data.This issue affects Tabby Checkout: from n/a through = 5.8.4...

7.5CVSS5.3AI score0.00351EPSS
SaveExploits0References2
CVE
CVE
•added 2026/01/22 4:52 p.m.•29 views

CVE-2025-68035

CVE-2025-68035 is a concrete vulnerability affecting the WordPress plugin Tabby Checkout (tabby-checkout) up to version 5.8.4. It is described as an insertion of sensitive information into sent data, which can allow retrieval of embedded sensitive data from Tabby Checkout. The CVSS vector (AV:N/A...

7.5CVSS5.8AI score0.00351EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/22 12:00 a.m.•6 views

CVE-2025-68035: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in tabbyai Tabby Checkout tabby-checkout allows Retrieve Embedded Sensitive Data.This issue affects Tabby Checkout: from n/a through = 5.8.4...

7.5CVSS5.8AI score0.00351EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/22 12:00 a.m.•18 views

PT-2026-4067

Name of the Vulnerable Software and Affected Versions Tabby Checkout versions through 5.8.4 Description A flaw exists in Tabby Checkout that allows retrieval of embedded sensitive data due to insertion of sensitive information into sent data. Recommendations Update Tabby Checkout to a version lat...

5.2AI score0.00351EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/01/22 12:00 a.m.•21 views

WordPress plugin Tabby Checkout has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

7.5CVSS5.8AI score0.00351EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/01/21 10:47 a.m.•19 views

WordPress Tabby Checkout plugin <= 5.8.4 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by benzdeus in WordPress Plugin Tabby Checkout versions = 5.8.4...

7.5CVSS5.4AI score0.00351EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-2655

Malicious code in bioql PyPI...

8.6CVSS6.6AI score0.00358EPSS
SaveExploits0References2
OSV
OSV
•added 2025/08/14 6:52 p.m.•9 views

MAL-2025-8986 Malicious code in @malware-test-tabby-umiak-repos-aurum/test-mlw3-tabby-umiak-repos-aurum (npm)

The package @malware-test-tabby-umiak-repos-aurum/test-mlw3-tabby-umiak-repos-aurum was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•8 views

Malicious code in @malware-test-tabby-umiak-repos-aurum/test-mlw3-tabby-umiak-repos-aurum (npm)

The package @malware-test-tabby-umiak-repos-aurum/test-mlw3-tabby-umiak-repos-aurum was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•8 views

MAL-2025-8872 Malicious code in @malware-test-quite-tabby-sider-rabis/test-mlw3-quite-tabby-sider-rabis (npm)

The package @malware-test-quite-tabby-sider-rabis/test-mlw3-quite-tabby-sider-rabis was found to contain malicious code...

7.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 11:59 a.m.•24 views

CVE-2025-22136

Tabby formerly Terminus is a highly configurable terminal emulator. Prior to 1.0.217 , Tabby enables several high-risk Electron Fuses, including RunAsNode, EnableNodeCliInspectArguments, and EnableNodeOptionsEnvironmentVariable. These fuses create potential code injection vectors even though the...

8.6CVSS7.1AI score0.00358EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 7:40 a.m.•20 views

CVE-2024-55950

Tabby formerly Terminus is a highly configurable terminal emulator. Prior to 1.0.216, Tabby terminal emulator contains overly permissive entitlements that are unnecessary for its core functionality and plugin system, creating potential security vulnerabilities. The application currently holds...

8.6CVSS7.5AI score0.00306EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2025/01/17 12:30 a.m.•23 views

Eugeny Tabby Sends Password Despite Host Key Verification Failure

An issue in Eugeny Tabby 1.0.213 allows a remote attacker to obtain sensitive information via the server and sends the SSH username and password even when the host key verification fails...

4.3CVSS6.5AI score0.00359EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2025/01/17 12:30 a.m.•42 views

GHSA-8VQ4-8HFP-29XH Eugeny Tabby Sends Password Despite Host Key Verification Failure

An issue in Eugeny Tabby 1.0.213 allows a remote attacker to obtain sensitive information via the server and sends the SSH username and password even when the host key verification fails...

8.7CVSS4.5AI score0.00359EPSS
SaveExploits0References4
NVD
NVD
•added 2025/01/16 10:15 p.m.•44 views

CVE-2024-48460

An issue in Eugeny Tabby 1.0.213 allows a remote attacker to obtain sensitive information via the server and sends the SSH username and password even when the host key verification fails...

4.3CVSS0.00359EPSS
SaveExploits0References1
OSV
OSV
•added 2025/01/16 10:15 p.m.•15 views

CVE-2024-48460

An issue in Eugeny Tabby 1.0.213 allows a remote attacker to obtain sensitive information via the server and sends the SSH username and password even when the host key verification fails...

4.3CVSS5.8AI score0.00359EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/16 12:00 a.m.•74 views

CVE-2024-48460

An issue in Eugeny Tabby version 1.0.213 allows a remote attacker to obtain sensitive information because the application transmits the SSH username and password even when host key verification fails . This vulnerability stems from improper certificate validation (CWE-295 ). As of the current doc...

4.3CVSS6.7AI score0.00359EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/16 12:00 a.m.•8 views

CVE-2024-48460

An issue in Eugeny Tabby 1.0.213 allows a remote attacker to obtain sensitive information via the server and sends the SSH username and password even when the host key verification fails...

4.6AI score0.00359EPSS
SaveExploits0References1
Rows per page
Query Builder