CVE-2025-10916 FormGent < 1.0.4 - Unauthenticated Arbitrary File Deletion

The FormGent WordPress plugin before 1.0.4 is vulnerable to arbitrary file deletion due to insufficient file path validation. This makes it possible for unauthenticated attackers to delete arbitrary files on the server...

Malicious code in mediapipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57f014791ef493e45eb5be6a2972ae2da1ea71d89b02ad886242a01dd616626d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48527 Malicious code in mediapipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57f014791ef493e45eb5be6a2972ae2da1ea71d89b02ad886242a01dd616626d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Togo theme < 1.0.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by ? in WordPress Theme Togo versions 1.0.4...

EUVD-2001-0072

Malware in sbrugna...

EUVD-2012-3828

Malware in sbrugna...

EUVD-2013-0877

Malware in sbrugna...

EUVD-2021-1861

Malware in sbrugna...

EUVD-2020-0397

Malware in sbrugna...

EUVD-2021-11432

Malware in sbrugna...

EUVD-2016-1091

Malware in sbrugna...

EUVD-2016-1062

Malware in sbrugna...

EUVD-2021-11259

Malware in sbrugna...

CVE-2025-11320

A security vulnerability has been detected in zhuimengshaonian wisdom-education up to 1.0.4. Impacted is the function uploadFile of the file src/main/java/com/education/core/controller/UploadController.java. Such manipulation of the argument File leads to unrestricted upload. It is possible to...

EUVD-2025-32489

A vulnerability was detected in zhuimengshaonian wisdom-education up to 1.0.4. The affected element is an unknown function of the file src/main/java/com/education/api/controller/student/WrongBookController.java. Performing manipulation of the argument subjectId results in authorization bypass. Th...

CVE-2025-11320 zhuimengshaonian wisdom-education UploadController.java uploadFile unrestricted upload

A security vulnerability has been detected in zhuimengshaonian wisdom-education up to 1.0.4. Impacted is the function uploadFile of the file src/main/java/com/education/core/controller/UploadController.java. Such manipulation of the argument File leads to unrestricted upload. It is possible to...

CVE-2025-11320 zhuimengshaonian wisdom-education UploadController.java uploadFile unrestricted upload

A security vulnerability has been detected in zhuimengshaonian wisdom-education up to 1.0.4. Impacted is the function uploadFile of the file src/main/java/com/education/core/controller/UploadController.java. Such manipulation of the argument File leads to unrestricted upload. It is possible to...

EUVD-2025-32485

A security vulnerability has been detected in zhuimengshaonian wisdom-education up to 1.0.4. Impacted is the function uploadFile of the file src/main/java/com/education/core/controller/UploadController.java. Such manipulation of the argument File leads to unrestricted upload. It is possible to...

CVE-2025-11320

CVE-2025-11320 affects zhuimengshaonian wisdom-education up to 1.0.4. The vulnerability lies in the uploadFile function in src/main/java/com/education/core/controller/UploadController.java, where improper handling/manipulation of the File argument enables unrestricted file upload. Remote exploita...

wisdom-education 代码问题漏洞

wisdom-education is a cloud intelligence education platform by zhuimengshaonian individual developer. A code issue vulnerability exists in wisdom-education 1.0.4 and earlier versions, which stems from the incorrect manipulation of the parameter File in the file...