798 matches found
PT-2025-47770
Missing Authorization vulnerability in Merlot Digital by TNC TNC Toolbox: Web Performance tnc-toolbox allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TNC Toolbox: Web Performance: from n/a through = 2.0.4...
Unspecified Vulnerability in WordPress Plugin TNC Toolbox Web Performance
WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress plugin TNC Toolbox Web Performance, which stem...
CVE-2025-12539
The TNC Toolbox: Web Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2. This is due to the plugin storing cPanel API credentials hostname, username, and API key in files within the web-accessible wp-content directory witho...
EUVD-2025-84363
The TNC Toolbox: Web Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2. This is due to the plugin storing cPanel API credentials hostname, username, and API key in files within the web-accessible wp-content directory witho...
CVE-2025-12539 TNC Toolbox: Web Performance <= 1.4.2 - Unauthenticated Sensitive Information Exposure to Privilege Escalation/cPanel Account Takeover
The TNC Toolbox: Web Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2. This is due to the plugin storing cPanel API credentials hostname, username, and API key in files within the web-accessible wp-content directory witho...
CVE-2025-12539
The CVE-2025-12539 entry concerns the WordPress plugin TNC Toolbox: Web Performance (versions up to 1.4.2). The vulnerability, described across multiple connected sources, is a Sensitive Information Exposure flaw caused by storing cPanel credentials (hostname, username, API key) in files under th...
WordPress TNC Toolbox: Web Performance plugin <= 1.4.2 - Unauthenticated Sensitive Information Exposure to Privilege Escalation/cPanel Account Takeover vulnerability
Unauthenticated Sensitive Information Exposure to Privilege Escalation/cPanel Account Takeover vulnerability discovered by kr0d in WordPress Plugin TNC Toolbox: Web Performance versions = 1.4.2...
WordPress plugin TNC Toolbox Web Performance 安全漏洞
WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress plugin TNC Toolbox Web Performance, which stem...
CLSA-2025-1762422500 toolbox: Fix of CVE-2022-3064
CVE-2022-3064: prevent excessive CPU and memory consumption when parsing YAML documents...
CVE-2025-11928
The CSS & JavaScript Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 12.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...
CVE-2025-11928 CSS & JavaScript Toolbox <= 12.0.5 - Authenticated (Admin+) Stored Cross-Site Scripting
The CSS & JavaScript Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 12.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...
PT-2025-44701
Name of the Vulnerable Software and Affected Versions CSS & JavaScript Toolbox versions prior to 12.0.6 Description The CSS & JavaScript Toolbox plugin for WordPress is susceptible to Stored Cross-Site Scripting through admin settings. Insufficient input sanitization and output escaping allows...
EUVD-2018-8519
Malware in sbrugna...
EUVD-2020-17897
Malware in sbrugna...
EUVD-2018-8518
Malware in sbrugna...
EUVD-2007-1118
Malware in sbrugna...
EUVD-2021-16135
Malware in sbrugna...
EUVD-2019-3921
Malware in sbrugna...