22301 matches found
CVE-2025-62866: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Valerio Monti Auto Alt Text auto-alt-text allows Cross Site Request Forgery.This issue affects Auto Alt Text: from n/a through = 2.5.2...
WordPress plugin Social Reviews Recommendations: Cross-site scripting vulnerability
...
WordPress plugin Contact Form 7 Dynamic Text Extension has a security vulnerability
...
PT-2025-50012
Cross-Site Request Forgery CSRF vulnerability in Valerio Monti Auto Alt Text auto-alt-text allows Cross Site Request Forgery.This issue affects Auto Alt Text: from n/a through = 2.5.2...
CVE-2025-65741
Sublime Text 3 Build 3208 or prior for MacOS is vulnerable to Dylib Injection. An attacker could compile a .dylib file and force the execution of this library in the context of the Sublime Text application...
CVE-2025-65741
Sublime Text 3 Build 3208 or prior for MacOS is vulnerable to a Dylib Injection flaw due to an uncontrolled search path element . An attacker can compile a .dylib file and force its execution within the application's context, potentially leading to arbitrary code execution . This issue was addres...
PT-2025-50215
Name of the Vulnerable Software and Affected Versions Sublime Text versions prior to Build 3209 Description Sublime Text 3 is susceptible to a Dylib Injection issue on MacOS. An attacker can compile a dynamic library .dylib file and execute it within the Sublime Text application’s process. This...
CVE-2025-65741
Sublime Text 3 Build 3208 or prior for MacOS is vulnerable to Dylib Injection. An attacker could compile a .dylib file and force the execution of this library in the context of the Sublime Text application...
WordPress plugin Auto Alt Text has a cross-site request forgeing vulnerability
WordPress Auto Alt Text plugin is a tool that uses artificial intelligence technology to automatically generate alternative text AltText for website images. The WordPress Auto Alt Text plugin suffers from a cross-site request forgery vulnerability, which arises from a web application that does no...
Sublime Text security vulnerabilities
Sublime Text is a cross-platform, extensible text editor from Sublime, Inc. A security vulnerability exists in Sublime Text 3 Build 3208 version and prior versions, which originates from Dylib injection and could lead to code execution in the application environment...
CVE-2025-65741: Uncontrolled Search Path Element
Sublime Text 3 Build 3208 or prior for MacOS is vulnerable to Dylib Injection. An attacker could compile a .dylib file and force the execution of this library in the context of the Sublime Text application...
Substitution Cipher Based on The Voynich Manuscript
Here's a fun paper: "The Naibbe cipher: a substitution cipher that encrypts Latin and Italian as Voynich Manuscript-like ciphertext": Abstract: In this article, I investigate the hypothesis that the Voynich Manuscript MS 408, Yale University Beinecke Library is compatible with being a ciphertext ...
UBUNTU-CVE-2025-40304
In the Linux kernel, the following vulnerability has been resolved: fbdev: Add bounds checking in bitputcs to fix vmalloc-out-of-bounds Add bounds checking to prevent writes past framebuffer boundaries when rendering text near screen edges. Return early if the Y position is off-screen and clip...
CVE-2025-40304 fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
In the Linux kernel, the following vulnerability has been resolved: fbdev: Add bounds checking in bitputcs to fix vmalloc-out-of-bounds Add bounds checking to prevent writes past framebuffer boundaries when rendering text near screen edges. Return early if the Y position is off-screen and clip...
CVE-2025-40304
CVE-2025-40304 corresponds to a Linux kernel vulnerability in the fbdev path, where an insufficient bounds check in the function used to render text (bit_putcs) allowed an out-of-bounds write to vmalloc-ed memory when drawing near framebuffer edges. The root cause was a mismatch between the alloc...
CVE-2025-40304
In the Linux kernel, the following vulnerability has been resolved: fbdev: Add bounds checking in bitputcs to fix vmalloc-out-of-bounds Add bounds checking to prevent writes past framebuffer boundaries when rendering text near screen edges. Return early if the Y position is off-screen and clip...
PT-2025-49866
Name of the Vulnerable Software and Affected Versions Social Reviews & Recommendations plugin for WordPress versions prior to 2.6 Description The Social Reviews & Recommendations plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is due to insufficient input sanitization and...
CVE-2025-14199
Verysync up to 2.21.3 is affected in the Web Administration Module via the file path /rest/f/api/resources/f96956469e7be39d/tmp/text.txt?override=false, where manipulation can lead to unrestricted file upload. The vulnerability can be exploited remotely and an exploit has been published. Affected...
Verysync code issue vulnerabilities
Verysync is a private file synchronization and backup software from China-based Weili Synchronization Verysync. A code issue vulnerability exists in Verysync 2.21.3 and prior versions that originates from the file /rest/f/api/resources/f96956469e7be39d/tmp/text.txt?override=false in the component...
