Cross-Site Scripting (XSS)

qwc2 is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper handling of user-supplied input in the attribute table, which allows an authorized attacker to inject and execute arbitrary JavaScript code...

CVE-2025-56401

ZIRA Group WBRM 7.0 is vulnerable to SQL Injection in referenceLookupsByTableNameAndColumnName...

EUVD-2025-199174

Malicious code in @lessondesk/react-table-context npm...

Malicious code in @lessondesk/react-table-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20317dcad4fb59dc30bb24ed5e1305a81ca00e753ffb0432f71dd107636d0516 The package @lessondesk/react-table-context was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191031 Malicious code in @lessondesk/react-table-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20317dcad4fb59dc30bb24ed5e1305a81ca00e753ffb0432f71dd107636d0516 The package @lessondesk/react-table-context was found to contain malicious code. Source: ghsa-malware...

CVE-2025-12800

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 7.4.5 via the sushortcodecsvtable function. This makes it possible for authenticated attackers, with Administrator-level access and above, to make...

EUVD-2025-199056

Malicious code in prime-one-table npm...

Malicious code in prime-one-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 686403bdb86cae7a644dd5bb861eacb91b0437d25b0cf1c367e04ab8a411cebe The package prime-one-table was found to contain malicious code. Source: ghsa-malware 637ced514205a8512ba9f365d6f93fbcbd2d45e2144a5cc076c4d14187da317...

EUVD-2025-199025

Malicious code in tanstack-shadcn-table npm...

MAL-2025-191018 Malicious code in tanstack-shadcn-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd82454ff234aa46b67b1813010ca3e7c45defc2172690c8c94fc74e2e09f6dc The package tanstack-shadcn-table was found to contain malicious code. Source: ghsa-malware...

Malicious code in tanstack-shadcn-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd82454ff234aa46b67b1813010ca3e7c45defc2172690c8c94fc74e2e09f6dc The package tanstack-shadcn-table was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198805

ZIRA Group WBRM 7.0 is vulnerable to SQL Injection in referenceLookupsByTableNameAndColumnName...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

CVE-2025-56401

ZIRA Group WBRM 7.0 is vulnerable to SQL Injection in referenceLookupsByTableNameAndColumnName...

CVE-2025-56401

ZIRA Group WBRM 7.0 is vulnerable to SQL Injection in referenceLookupsByTableNameAndColumnName...

PT-2025-47926

Name of the Vulnerable Software and Affected Versions ZIRA Group WBRM version 7.0 Description ZIRA Group WBRM version 7.0 is susceptible to a SQL Injection issue occurring in the referenceLookupsByTableNameAndColumnName function. The issue allows for potential manipulation of database queries...

Linux Distros Unpatched Vulnerability : CVE-2025-0033

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper access control within AMD SEV-SNP could allow an admin privileged attacker to write to the RMP during SNP initialization, potentially resulting in a lo...

WordPress plugin WP Shortcodes Plugin — Shortcodes Ultimate 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, with the ability to host personal blog sites on PHP and MySQL based servers.WordPress...

PT-2025-47865

Name of the Vulnerable Software and Affected Versions WP Shortcodes Plugin – Shortcodes Ultimate versions prior to 7.4.6 Description The Shortcodes Ultimate plugin for WordPress is susceptible to Server-Side Request Forgery SSRF. This allows authenticated attackers with Administrator-level access...

CVE-2025-66096

Missing Authorization vulnerability in Imtiaz Rayhan Table Block by Tableberg tableberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Table Block by Tableberg: from n/a through = 0.6.9...