Malicious code in test-mlw2-gists-boyar-track-blood (npm)

The package test-mlw2-gists-boyar-track-blood was found to contain malicious code...

MAL-2025-35800 Malicious code in test-mlw2-mooch-track (npm)

The package test-mlw2-mooch-track was found to contain malicious code...

MAL-2025-35415 Malicious code in test-mlw2-gists-boyar-track-blood (npm)

The package test-mlw2-gists-boyar-track-blood was found to contain malicious code...

CVE-2025-7962 vulnerabilities

Vulnerabilities for packages: jenkins, apache-nifi, keycloak, wildfly, thingsboard, keycloak-config-cli, dependency-track, apicurio-registry...

GHSA-9342-92GG-6V29 vulnerabilities

Vulnerabilities for packages: jenkins, apache-nifi, keycloak, wildfly, thingsboard, keycloak-config-cli, dependency-track, apicurio-registry...

GHSA-9342-92GG-6V29 vulnerabilities

Vulnerabilities for packages: keycloak, elasticsearch-fips, apicurio-registry, wildfly, geoserver, keycloak-config-cli, jenkins, dependency-track, thingsboard, elasticsearch, apache-nifi...

CVE-2025-7962 vulnerabilities

Vulnerabilities for packages: keycloak, elasticsearch-fips, apicurio-registry, wildfly, geoserver, keycloak-config-cli, jenkins, dependency-track, thingsboard, elasticsearch, apache-nifi...

Use After Free

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free via MediaStreamTrackImpl. An attacker can cause heap corruption by enticing a user to visit a specially...

CVE-2025-53332

Cross-Site Request Forgery CSRF vulnerability in ethoseo Track Everything track-everything allows Stored XSS.This issue affects Track Everything: from n/a through = 2.0.1...

CVE-2025-53332

Cross-Site Request Forgery CSRF vulnerability in ethoseo Track Everything track-everything allows Stored XSS.This issue affects Track Everything: from n/a through = 2.0.1...

CVE-2025-53332

CVE-2025-53332 : A CSRF vulnerability in the WordPress Track Everything plugin can enable Stored XSS. Affected versions are listed as n/a through 2.0.1. The CVSS v3.1 base score is 7.1 (High) with network attack vector, low attack complexity, no privileges required, user interaction required, and...

CVE-2025-53332 WordPress Track Everything plugin <= 2.0.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in ethoseo Track Everything track-everything allows Stored XSS.This issue affects Track Everything: from n/a through = 2.0.1...

CVE-2025-53332 WordPress Track Everything plugin <= 2.0.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in ethoseo Track Everything allows Stored XSS. This issue affects Track Everything: from n/a through 2.0.1...

WordPress plugin Track Everything 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2025-095 (ALASKERNEL-5.10-2025-095)

The version of kernel installed on the remote host is prior to 5.10.238-231.953. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2025-095 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix WRITESAME No Data...

CVE-2025-48145

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michal Jaworski Track, Analyze & Optimize by WP Tao wp-tao allows Reflected XSS.This issue affects Track, Analyze & Optimize by WP Tao: from n/a through = 1.3...

CVE-2025-48145

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michal Jaworski Track, Analyze & Optimize by WP Tao wp-tao allows Reflected XSS.This issue affects Track, Analyze & Optimize by WP Tao: from n/a through = 1.3...

WordPress plugin Track, Analyze & Optimize by WP Tao 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

CISA Releases Four Industrial Control Systems Advisories

CISA released four Industrial Control Systems ICS advisories on June 10, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-160-01 SinoTrack GPS Receiver ICSA-25-160-02 Hitachi Energy Relion 670, 650, SAM600-IO...

CVE-2024-24155

Bento4 v1.5.1-628 contains a Memory leak on AP4Movie::AP4Movie, parsing tracks and added into mTracks list, but mp42aac cannot correctly delete when we got an no audio track found error. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted mp4 file...