21691 matches found
CVE-2024-24892
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection', Improper Privilege Management vulnerability in openEuler migration-tools on Linux allows Command Injection, Restful Privilege Elevation. This vulnerability is associated with program files...
CVE-2024-26022
Improper access control in some IntelR UEFI Integrator Tools on Aptio V for IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-53999
Mobile Security Framework MobSF is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. The application allows users to upload files with scripts in the filename parameter. As a result, a malicious user can upload a script file to th...
Who’s Behind the Seized Forums ‘Cracked’ & ‘Nulled’?
The FBI joined authorities across Europe last week in seizing domain names for Cracked and Nulled , English-language cybercrime forums with millions of users that trafficked in stolen data, hacking tools and malware. An investigation into the history of these communities shows their apparent...
MAL-2025-1017 Malicious code in apple-tools (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2f8d50e25be52acfad87c6ab2773fc06c789b7508f351f21a071b29f897292a Any computer that has this package installed or running should be considered...
Malicious code in apple-tools (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2f8d50e25be52acfad87c6ab2773fc06c789b7508f351f21a071b29f897292a Any computer that has this package installed or running should be considered...
MAL-2025-836 Malicious code in hubspottoolsmenu (npm)
--- -= Per source details. Do not edit below this line.=-...
Security update for SUSE Manager Client Tools and Salt Bundle
This update for SUSE Manager Client Tools and Salt Bundle the following issues: uyuni-tools: venv-salt-minion: Security fixes on Python 3.11 interpreter: CVE-2024-7592: Fixed quadratic complexity in parsing -quoted cookie values with backslashes bsc1229873, bsc1230059 CVE-2024-8088: Prevent...
Malicious code in model-viewer-render-fidelity-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1109626e5ba207b2f14c0b5c9081c8b4dd49932d296464a13921731b5749a51c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Cybercrime gets a few punches on the nose
It’s not often that we get to share good news, so we wanted to grab this opportunity and showcase some progress made by law enforcement actions against cybercrime with you. Europol notified us about the take-down of two of the largest cybercrime forums in the world. With over 10 million users,...
CVE-2025-23759
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gavin Affiliate Tools Việt Nam affiliate-tools-viet-nam allows Reflected XSS.This issue affects Affiliate Tools Việt Nam: from n/a through = 0.3.17...
CVE-2025-23759 WordPress Affiliate Tools Việt Nam plugin <= 0.3.17 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gavin Affiliate Tools Việt Nam affiliate-tools-viet-nam allows Reflected XSS.This issue affects Affiliate Tools Việt Nam: from n/a through = 0.3.17...
CVE-2025-23759
CVE-2025-23759 is a reflected XSS vulnerability in the WordPress plugin Affiliate Tools Việt Nam (Leduchuy89VN) affecting versions up to 0.3.17. The issue stems from improper neutralization of input during web page generation. CVSS 3.1 base score 7.1 (HIGH) with network access, no privileges, and...
[SECURITY] Fedora 40 Update: phpMyAdmin-5.2.2-1.fc40
phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently it can create and drop databases, create/drop/alter tables, delete/edit/add fields, execute any SQL statement, manage keys on fields, manage privileges,export data into various formats and i...
MAL-2025-729 Malicious code in @wongapl/offer-ui-tools (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in offer-ui-tools (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-746 Malicious code in offer-ui-tools (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
WordPress plugin Affiliate Tools Việt Nam 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...
PT-2025-5070 · Unknown · Leduchuy89Vn Affiliate Tools Việt Nam
Name of the Vulnerable Software and Affected Versions: leduchuy89vn Affiliate Tools Việt Nam versions 0.3.17 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This means...