639 matches found
EUVD-2024-45573
Malicious code in bioql PyPI...
EUVD-2024-21460
Malicious code in bioql PyPI...
EUVD-2023-36845
Malicious code in bioql PyPI...
EUVD-2025-24236
Malicious code in bioql PyPI...
CVE-2025-60155
Missing Authorization vulnerability in loopus WP Virtual Assistant VirtualAssistant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Virtual Assistant: from n/a through = 3.0...
CVE-2025-60155 WordPress WP Virtual Assistant Plugin <= 3.0 - Broken Access Control Vulnerability
Missing Authorization vulnerability in loopus WP Virtual Assistant VirtualAssistant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Virtual Assistant: from n/a through = 3.0...
CVE-2025-60155
CVE-2025-60155 refers to a missing-authorization vulnerability in WP Virtual Assistant. Connected sources confirm affected software: WP Virtual Assistant (≤3.0). The CVE lists a CVSS v3.1 base score of 5.3 (Medium) with network attack vector, no privileges required, and potential low integrity im...
CVE-2025-60155 WordPress WP Virtual Assistant Plugin <= 3.0 - Broken Access Control Vulnerability
Missing Authorization vulnerability in loopus WP Virtual Assistant VirtualAssistant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Virtual Assistant: from n/a through = 3.0...
PT-2025-39610
Name of the Vulnerable Software and Affected Versions W3SCloud Contact Form 7 to Zoho CRM versions through 3.0 Description A Cross-Site Request Forgery CSRF issue exists in W3SCloud Contact Form 7 to Zoho CRM, which may also lead to Stored Cross-Site Scripting XSS. The issue allows attackers to...
PT-2025-39597
Name of the Vulnerable Software and Affected Versions WP Virtual Assistant versions through 3.0 Description An authorization issue exists in WP Virtual Assistant, allowing exploitation of incorrectly configured access control security levels. Recommendations Update WP Virtual Assistant to a versi...
PT-2025-37985
Name of the Vulnerable Software and Affected Versions: Online Library Management System version 3.0 Description: An issue allows an attacker to escalate privileges via the adminlogin.php component and the Login function. Recommendations: Apply updates to address the issue in version 3.0. As a...
CVE-2025-57118
An issue in PHPGurukul Online-Library-Management-System v3.0 allows an attacker to escalate privileges via the index.php...
Lenovo Dispatcher 安全漏洞
Lenovo Dispatcher is a software with task scheduling and update distribution from Lenovo China. A security vulnerability exists in Lenovo Dispatcher versions 3.0 and 3.1, which stems from insufficient access control and could lead to a locally authenticated user executing code with elevated...
CVE-2025-58805 WordPress Widgetize Pages Light Plugin <= 3.0 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OTWthemes Widgetize Pages Light widgetize-pages-light allows Stored XSS.This issue affects Widgetize Pages Light: from n/a through = 3.0...
WordPress Widgetize Pages Light Plugin <= 3.0 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Que Thanh Tuan Blue Rock in WordPress Plugin Widgetize Pages Light versions = 3.0...
Linux Distros Unpatched Vulnerability : CVE-2022-38725
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a Denial of Service via crafted syslog inp...
Linux Distros Unpatched Vulnerability : CVE-2022-1473
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The OPENSSLLHflush function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entries. This functi...
📄 phpMyAdmin 3.0 Bruteforce Login Bypass
phpMyAdmin version 3.0 suffers from a brute force login bypass vulnerability. """ Exploit-Title: PHPMyAdmin 3.0 - Bruteforce Login Bypass Author: Nikola Markovic [email protected] Date: 2023 Google-Dork: intext: phpMyAdmin Vendor: https://www.phpmyadmin.net/ Version: 3.0 & 4.3.x before 4.3.13...
CVE-2025-32992
CVE-2025-32992 affects Thermo Fisher Scientific ePort up to version 3.0.0. The issue is an Incorrect Access Control vulnerability in the ePort component/file/feature (root cause not detailed in all sources) leading to a high-severity impact (CVSS v3.1: AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N; base sc...
