804 matches found
CVE-2025-13373
Advantech iView versions 5.7.05.7057 and prior do not properly sanitize SNMP v1 trap Port 162 requests, which could allow an attacker to inject SQL commands...
CVE-2025-13373: Improper Neutralization of Special Elements used in an SQL Command
Advantech iView versions 5.7.05.7057 and prior do not properly sanitize SNMP v1 trap Port 162 requests, which could allow an attacker to inject SQL commands...
Advantech iView SQL injection vulnerability
Advantech iView is a software developed by Advantech for managing B+BSmartWorx series devices through a simple network management protocol. Advantech iView suffers from a SQL injection vulnerability that stems from improper SNMP v1 trap request cleanup, which can be exploited by attackers to obta...
Nagios XI SNMP Trap Arbitrary Command Execution
The vulnerability of the SNMP Trap Interface in Nagios XI monitoring tools is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
CVE-2025-12406 Project Honey Pot Spam Trap <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The Project Honey Pot Spam Trap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the printAdminPage function. This makes it possible for unauthenticated attackers to update setting...
CVE-2025-12406 Project Honey Pot Spam Trap <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The Project Honey Pot Spam Trap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the printAdminPage function. This makes it possible for unauthenticated attackers to update setting...
Nagios XI SNMP Trap Arbitrary Command Execution
The vulnerability of the SNMP Trap Interface in Nagios XI monitoring tools is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
WordPress plugin Project Honey Pot Spam Trap has a cross-site request forgeing vulnerability
WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin i...
CVE-2025-12406: Cross-Site Request Forgery (CSRF)
The Project Honey Pot Spam Trap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the printAdminPage function. This makes it possible for unauthenticated attackers to update setting...
WordPress Project Honey Pot Spam Trap plugin <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability
Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin Project Honey Pot Spam Trap versions = 1.0.1...
ManageEngine OpManager Stored XSS (CVE-2025-9227)
The version of ManageEngine OpManager running on the remote web server is prior to 128466, 128509 prior or equal to 128542, 128551 prior or equal to 128598, 128607 prior or equal to 128610. It is, therefore, affected by an stored xSS vulnerability in SNMP Trap Processor. Note that Nessus has not...
Malicious code in polymer-tran-trap (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74c369ec238a56a66bc02bf77cc1e43a978afae1e987cb6dda65a52987ea593d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-135237
Malicious code in trui-tran-trap npm...
EUVD-2025-135232
Malicious code in truw-tran-trap npm...
MAL-2025-179259 Malicious code in trui-tran-trap (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc5fb9b0523ce77ef0043ad638f7ebd6844a56085bb34a20f4eb5e63a416264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in truesi-tran-trap (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b837097574f45e6121c69337bb7eaea2f1d0e68c38cf886960fa048dccf3ba21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-135238
Malicious code in truesi-tran-trap npm...
EUVD-2025-135236
Malicious code in trui-tran-trap npm...