384 matches found
EUVD-2025-198138
Out-of-bounds Read in Shelly Pro 3EM before v1.4.4 allows Overread Buffers...
CVE-2025-12056
CVE-2025-12056 affects Shelly Pro 3EM (three‑phase energy meter). A specially crafted Modbus request can trigger an illegal data address read, leading to a device reboot and a denial‑of‑service. Vulnerable in versions before 1.4.4; fixed in 1.4.4+. No known public exploitation; CISA notes potenti...
PT-2025-47441
Out-of-bounds Read in Shelly Pro 3EM before v1.4.4 allows Overread Buffers...
PT-2025-47039
Name of the Vulnerable Software and Affected Versions Qi Blocks versions prior to 1.4.4 Description The Qi Blocks plugin for WordPress has a flaw that allows unauthorized access due to a missing capability check on the resize image callback function. This occurs because the plugin does not verify...
CVE-2025-11805
The Skip to Timestamp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'skipto' shortcode in all versions up to, and including, 1.4.4. This is due to insufficient input sanitization and output escaping on the 'time' attribute. This makes it possible for authenticated...
CVE-2025-11805
The CVE CVE-2025-11805 concerns the WordPress plugin Skip to Timestamp (versions
CVE-2025-11805 Skip to Timestamp <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Skip to Timestamp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'skipto' shortcode in all versions up to, and including, 1.4.4. This is due to insufficient input sanitization and output escaping on the 'time' attribute. This makes it possible for authenticated...
WordPress plugin Skip to Timestamp 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
WordPress Qi Blocks plugin <= 1.4.3 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Update vulnerability
Missing Authorization to Authenticated Contributor+ Plugin Settings Update vulnerability discovered by Adrian Lukita in WordPress Plugin Qi Blocks versions = 1.4.3...
EUVD-2020-4926
Malware in sbrugna...
EUVD-2024-0918
Malicious code in bioql PyPI...
EUVD-2023-50831
Malicious code in bioql PyPI...
EUVD-2022-7583
Malicious code in bioql PyPI...
EUVD-2025-27658
Malicious code in bioql PyPI...
EUVD-2022-41285
Malicious code in bioql PyPI...
EUVD-2025-13788
Malicious code in bioql PyPI...
EUVD-2025-30703
Malicious code in bioql PyPI...
EUVD-2025-24719
Malicious code in bioql PyPI...