Malicious code in bnpl-blocks-atom-desktop-bnpl-dangerously-html (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d67ae3d6b9d42c80691f5be62d2b59d087b9457657a5fa12d4881c2db7c1aa5d On require of the package, index.js loads./ext.js, which reassembles C2 hostnames from split string fragments e.g. 'oob-worker.cf10x-.workers.dev'...

Malicious code in devplatform-nx-svelte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a9e164d3a912ce2cb11abb935eb46fdfa9bb7ef12acbe4a305867cb8942306 On require of the package, compat.js constructs C2 hostnames by joining split string fragments to evade static inspection, downloads a...

EUVD-2026-48548

The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'vbfX' parameter in all versions up to, and including, 1.8.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

PYSEC-2026-796 Cobbler XSS Vulnerability

Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Cross Site Scripting XSS vulnerability in cobbler-web that can result in Privilege escalation to admin.. This attack appear to...

Schneider Electric Modicon M241, M251, and M262 Improper Resource Shutdown or Release (CVE-2025-13901)

CWE-404 Improper Resource Shutdown or Release vulnerability exists that could cause partial Denial of Service on Machine Expert protocol when an unauthenticated attacker sends malicious payload to occupy active communication channels. This plugin only works with Tenable.ot. Please visit...

Exploit for CVE-2025-11262

CVE Lab: CVE-2025-11262 - Link Whisper Free Unauthenticated St...

CVE-2023-40271

In Trusted Firmware-M through TF-Mv1.8.0, for platforms that integrate the CryptoCell accelerator, when the CryptoCell PSA Driver software Interface is selected, and the Authenticated Encryption with Associated Data Chacha20-Poly1305 algorithm is used, with the single-part verification function...

PT-2018-9392

Name of the Vulnerable Software and Affected Versions Cobbler versions 2.0.0 through 2.6.11+ Description The issue concerns a Cross Site Scripting XSS vulnerability in cobbler-web, which can lead to Privilege escalation to admin. This can be exploited via network connectivity by sending an...