373 matches found
WordPress AP Background plugin cross-site request forgery vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress AP Background plugin that stems from missing or incorrect random number validation in the...
The vulnerability of TOTOLINK X6000R router microprogramming software, related to insufficient validation of input data, allows attackers to execute arbitrary commands.
The vulnerability of TOTOLINK X6000R router microprogramming software is related to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...
EUVD-2020-29341
Malware in sbrugna...
EUVD-2020-29342
Malware in sbrugna...
EUVD-2018-0884
Malware in sbrugna...
EUVD-2024-54519
Malicious code in bioql PyPI...
EUVD-2024-49065
Malicious code in bioql PyPI...
EUVD-2025-24849
Malicious code in bioql PyPI...
EUVD-2025-25391
Malicious code in bioql PyPI...
WordPress plugin Block For Mailchimp 代码问题漏洞
WordPress Block For Mailchimp plugin is a plugin designed for WordPress to integrate Mailchimp's email subscription feature into a website. The WordPress Block For Mailchimp plugin suffers from a server-side request forgery vulnerability that stems from the mcbSubmitFormData function not...
Perfex CRM 跨站脚本漏洞
Perfex CRM is a customer relationship management software from Perfex CRM open source. It is used to manage customers, projects and create invoices in the cloud. A cross-site scripting vulnerability exists in Perfex CRM version 3.2.1, which stems from insufficient validation of user input for the...
The vulnerability of the AMD Display kernel component in the Linux operating system, which allows a hacker to cause a service failure.
The vulnerability of the AMD Display kernel component in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2025-10307 Backuply – Backup, Restore, Migrate and Clone <= 1.4.8 - Authenticated (Admin+) Arbitrary File Deletion
The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete backup functionality in all versions up to, and including, 1.4.8. This makes it possible for authenticated attackers, with...
osCommerce 安全漏洞
osCommerce is an open source online shopping e-commerce solution based on the GNUGPL license from osCommerce, Inc. A security vulnerability exists in osCommerce 2.2 RC2a and earlier versions, which stems from a lack of input validation and access control in the Manage File Manager tool, and could...
Exploit for CVE-2025-46408
CVE-2025-46408 Improper Hostname Verification in EagleEyes...
Cisco Integrated Management Controller Cross-Site Scripting Vulnerability
Cisco Integrated Management Controller IMC is a set of software used by Cisco to manage UCS Unified Computing System, which supports HTTP, SSH access, etc., and allows operations such as powering up, shutting down and restarting the server. A cross-site scripting vulnerability exists in Cisco...
CVE-2025-58361
Promptcraft Forge Studio is a toolkit for evaluating, optimizing, and maintaining LLM-powered applications. All versions contain an non-exhaustive URL scheme check that does not protect against XSS. User-controlled URLs pass through src/utils/validation.ts, but the check only strips javascript: a...
CVE-2025-48538
In setApplicationHiddenSettingAsUser of PackageManagerService.java, there is a possible way to hide a system critical package due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitatio...
CVE-2025-58361 Promptcraft Forge Studio's incomplete URL check is vulnerable to XSS via SVG
Promptcraft Forge Studio is a toolkit for evaluating, optimizing, and maintaining LLM-powered applications. All versions contain an non-exhaustive URL scheme check that does not protect against XSS. User-controlled URLs pass through src/utils/validation.ts, but the check only strips javascript: a...