CVE-2025-49946 WordPress Auto Login After Registration plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cynob IT Consultancy Auto Login After Registration auto-login-after-registration allows Reflected XSS.This issue affects Auto Login After Registration: from n/a through = 1.0.0...

CVE-2025-11878

CVE-2025-11878 affects the ST Categories Widget WordPress plugin. The vulnerability is a Stored Cross-Site Scripting flaw in the st-categories shortcode for versions

PT-2025-43238

Name of the Vulnerable Software and Affected Versions colome Slide Puzzle versions through 1.0.0 Description The software contains a flaw related to improper input handling during web page generation, specifically a Reflected Cross-site Scripting XSS issue. This allows for the injection of...

MAL-2025-48549 Malicious code in test-all1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b9b13c552c50461f4b3a7a423bf9fc79e3a5ea1c36d107ecd7536223789616aa The OpenSSF Package Analysis project identified 'test-all1' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-48454 Malicious code in rainbowkit-next-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ff743f93c28893b1c82c2cd54b33b75109f10302a296c9340d8fa3a610c63dfa The OpenSSF Package Analysis project identified 'rainbowkit-next-app' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...

MongoDB Atlas SQL ODBC driver installation via MSI may leave ACLs unset on custom installation directories

Incorrect Default Permissions vulnerability in MongoDB Atlas SQL ODBC driver on Windows allows Privilege Escalation.This issue affects MongoDB Atlas SQL ODBC driver: from 1.0.0 through 2.0.0...

Arbitrary Code Execution in Grafana Image Renderer Plugin

Grafana Image Renderer is vulnerable to remote code execution due to an arbitrary file write vulnerability. This is due to the fact that the /render/csv endpoint lacked validation of the filePath parameter that allowed an attacker to save a shared object to an arbitrary location that is then load...

MAL-2025-48013 Malicious code in hari-zxcv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8053e230209808749a0b31858ef9f92a4450e2292da8e8fe2e961557d6ab2e48 The OpenSSF Package Analysis project identified 'hari-zxcv' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

EUVD-2021-1975

Malware in sbrugna...

EUVD-2016-1094

Malware in sbrugna...

EUVD-2020-26478

Malware in sbrugna...

EUVD-2020-16957

Malware in sbrugna...

CVE-2025-61766

Bucket is a MediaWiki extension to store and retrieve structured data on articles. Prior to version 1.0.0, infinite recursion can occur if a user queries a bucket using the != comparator. This will result in PHP's call stack limit exceeding, and/or increased memory consumption, potentially leadin...

UBUNTU-CVE-2025-61766

Bucket is a MediaWiki extension to store and retrieve structured data on articles. Prior to version 1.0.0, infinite recursion can occur if a user queries a bucket using the != comparator. This will result in PHP's call stack limit exceeding, and/or increased memory consumption, potentially leadin...

CVE-2025-61766 Bucket vulnerable to infinite recursion when querying a bucket using the != operator

Bucket is a MediaWiki extension to store and retrieve structured data on articles. Prior to version 1.0.0, infinite recursion can occur if a user queries a bucket using the != comparator. This will result in PHP's call stack limit exceeding, and/or increased memory consumption, potentially leadin...

CVE-2025-61766 Bucket vulnerable to infinite recursion when querying a bucket using the != operator

Bucket is a MediaWiki extension to store and retrieve structured data on articles. Prior to version 1.0.0, infinite recursion can occur if a user queries a bucket using the != comparator. This will result in PHP's call stack limit exceeding, and/or increased memory consumption, potentially leadin...

EUVD-2025-32546

Bucket is a MediaWiki extension to store and retrieve structured data on articles. Prior to version 1.0.0, infinite recursion can occur if a user queries a bucket using the != comparator. This will result in PHP's call stack limit exceeding, and/or increased memory consumption, potentially leadin...

CVE-2025-61766 Bucket vulnerable to infinite recursion when querying a bucket using the != operator

Bucket is a MediaWiki extension to store and retrieve structured data on articles. Prior to version 1.0.0, infinite recursion can occur if a user queries a bucket using the != comparator. This will result in PHP's call stack limit exceeding, and/or increased memory consumption, potentially leadin...

Malicious code in niletestpkg2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a39ba896a63b265112c85ccbc844af38c7163958acf56a31f9f6983b914eaad7 The OpenSSF Package Analysis project identified 'niletestpkg2' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

PT-2025-40910

Name of the Vulnerable Software and Affected Versions Bucket versions prior to 1.0.0 Description The Bucket MediaWiki extension has an issue where infinite recursion can occur when querying a bucket using the != comparator. This can lead to PHP exceeding its call stack limit and increased memory...