275 matches found
PT-2025-45270
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in owenr88 Simple Contact Forms simple-contact-forms allows PHP Local File Inclusion.This issue affects Simple Contact Forms: from n/a through = 1.6.4...
WordPress plugin Cookie Notice & Consent 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2025-62782
InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions 1.6.3-SNAPSHOT and earlier contain a vulnerability where GUIs using GuiStorageElement can allow item duplication when the experimental Bundle item feature is enabled on the server. The vulnerability is resolved ...
CVE-2025-62782
Summary: InventoryGui (a Bukkit/Spigot plug‑in library) contains a vulnerability in versions 1.6.3-SNAPSHOT and earlier where GUIs using GuiStorageElement can cause item duplication when the experimental Bundle item feature is enabled. The issue is resolved in version 1.6.4-SNAPSHOT. What is affe...
CVE-2025-62782 InventoryGUI vulnerable to item duplication via Bundle items when using GuiStorageElement
InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions 1.6.3-SNAPSHOT and earlier contain a vulnerability where GUIs using GuiStorageElement can allow item duplication when the experimental Bundle item feature is enabled on the server. The vulnerability is resolved ...
CVE-2025-62782 InventoryGUI vulnerable to item duplication via Bundle items when using GuiStorageElement
InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions 1.6.3-SNAPSHOT and earlier contain a vulnerability where GUIs using GuiStorageElement can allow item duplication when the experimental Bundle item feature is enabled on the server. The vulnerability is resolved ...
GHSA-RGVH-4M82-FVJQ InventoryGui allows item duplication with experimental "Bundle" item in GUIs which use GuiStorageElement
Impact Any plugin using the GuiStorageElement is impacted when used on a server which allows the currently experimental Bundle items. Patches Patched with https://github.com/Phoenix616/InventoryGui/commit/00e684bd689ebc60bcb5b83ce4ef3c5a01778494 "backported" to 1.6.3-SNAPSHOT Update to...
EUVD-2025-36358
InventoryGui allows item duplication with experimental "Bundle" item in GUIs which use GuiStorageElement...
EUVD-2020-11174
Malware in sbrugna...
EUVD-2018-20920
Malware in sbrugna...
EUVD-2011-5246
Malware in sbrugna...
EUVD-2024-35091
Malicious code in bioql PyPI...
EUVD-2025-30582
Malicious code in bioql PyPI...
EUVD-2022-4256
Malicious code in bioql PyPI...
EUVD-2024-35028
Malicious code in bioql PyPI...
EUVD-2024-29946
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2025-59420
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.4, Authlib's JWS verification accepts tokens that declare unknow...
CVE-2025-57908
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ProWCPlugins Product Time Countdown for WooCommerce product-countdown-for-woocommerce allows Stored XSS.This issue affects Product Time Countdown for WooCommerce: from n/a through = 1.6.5...
CVE-2025-57908
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ProWCPlugins Product Time Countdown for WooCommerce product-countdown-for-woocommerce allows Stored XSS.This issue affects Product Time Countdown for WooCommerce: from n/a through = 1.6.5...
CVE-2025-58259
CVE-2025-58259 is a CSRF in the Nokri WordPress theme (ScriptsBundle) that affects Nokri: from n/a through 1.6.4. The CVSS 3.1 base score is 7.1 (HIGH) with AV:N/AC:L/PR:N/UI:R/S:U/I:L/A:H. The Connected Documents confirm the vulnerability in Nokri but do not provide a patch or remediation detail...