2326 matches found
CVE-2025-62699
The CVE-2025-62699 issue affects the Wikimedia Foundation MediaWiki Translate Extension (master before 1.39). The root cause is the Translate Extension’s use of jobs to edit translation pages, which causes the CheckUser tool to log the wrong IP and User-Agent, making these edits un-auditable. Thi...
MediaWiki - Translate Extension 安全漏洞
MediaWiki - Translate Extension is an open source translation extension for MediaWiki. A security vulnerability exists in Mediawiki - Translate Extension master version to versions prior to 1.39, which stems from the CheckUser tool logging the wrong IP and User-Agent, which could lead to the...
CVE-2025-35060
Newforma Info Exchange NIX provides a 'Send a File Transfer' feature that allows a remote, authenticated attacker to upload SVG files that contain JavaScript or other content that may be executed or rendered by a web browser using a mobile user agent...
CVE-2025-35060
Newforma Info Exchange NIX provides a 'Send a File Transfer' feature that allows a remote, authenticated attacker to upload SVG files that contain JavaScript or other content that may be executed or rendered by a web browser using a mobile user agent...
CVE-2025-35060 Newforma Info Exchange (NIX) stored XSS via SVG file upload
Newforma Info Exchange NIX provides a 'Send a File Transfer' feature that allows a remote, authenticated attacker to upload SVG files that contain JavaScript or other content that may be executed or rendered by a web browser using a mobile user agent...
CVE-2025-11204 RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.6.2 - Authenticated (Administrator+) SQL Injection
The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 6.0.6.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...
CVE-2025-11204: Improper Neutralization of Special Elements used in an SQL Command
The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 6.0.6.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...
EUVD-2006-0811
Malware in sbrugna...
EUVD-2006-1016
Malware in sbrugna...
EUVD-2002-1944
Malware in sbrugna...
EUVD-2019-11503
Malware in sbrugna...
EUVD-2006-5212
Malware in sbrugna...
EUVD-2015-3011
Malware in sbrugna...
EUVD-2006-4439
Malware in sbrugna...
EUVD-2008-6607
Malware in sbrugna...
EUVD-2019-0379
Malware in sbrugna...
EUVD-2005-2030
Malware in sbrugna...
EUVD-2019-7845
Malware in sbrugna...