12425 matches found
CVE-2025-8719
CVE-2025-8719 documents a Stored Cross-Site Scripting vulnerability in Translate This gTranslate Shortcode for WordPress, affecting all versions up to 1.0. The issue is triggered via the base_lang parameter and requires authentication at Contributor level or higher to inject scripts that execute ...
CVE-2025-8950
A vulnerability was identified in Campcodes Online Recruitment Management System 1.0. This issue affects some unknown processing of the file /Recruitment/index.php?page=viewvacancy. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has...
CVE-2025-27388
Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens...
PT-2025-33538 · WordPress · Advanced Iframe
Name of the Vulnerable Software and Affected Versions: Advanced iFrame plugin for WordPress versions prior to 2025.7 Description: The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the additional parameter due to insufficient input sanitization and output...
CVE-2025-8924
A vulnerability was identified in Campcodes Online Water Billing System 1.0. This issue affects some unknown processing of the file /viewbill.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may...
CVE-2025-2498
An improper access control in Gitlab EE affecting all versions from 12.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2 that under certain conditions could have allowed users to view assigned issues from restricted groups by bypassing IP restrictions...
CVE-2025-49569
Substance3D - Viewer versions 0.25 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
Malicious code in flickr-view (npm)
The package flickr-view was found to contain malicious code...
Malicious code in view-authorize-alpha-fire-pi (npm)
The package view-authorize-alpha-fire-pi was found to contain malicious code...
Malicious code in static-view-bad-easy-tree (npm)
The package static-view-bad-easy-tree was found to contain malicious code...
MAL-2025-38373 Malicious code in view-epsilon-kernel-boolean-long (npm)
The package view-epsilon-kernel-boolean-long was found to contain malicious code...
MAL-2025-33957 Malicious code in static-view-bad-easy-tree (npm)
The package static-view-bad-easy-tree was found to contain malicious code...
MAL-2025-14537 Malicious code in angularjs-in-view (npm)
The package angularjs-in-view was found to contain malicious code...
MAL-2025-32665 Malicious code in sandbox-encode-string-view-good (npm)
The package sandbox-encode-string-view-good was found to contain malicious code...
MAL-2025-14861 Malicious code in array-hash-view-balance-authenticate (npm)
The package array-hash-view-balance-authenticate was found to contain malicious code...
MAL-2025-22800 Malicious code in huobi-trading-view-hbcloud (npm)
The package huobi-trading-view-hbcloud was found to contain malicious code...
Malicious code in huobi-trading-view-hbcloud (npm)
The package huobi-trading-view-hbcloud was found to contain malicious code...
Malicious code in array-hash-view-balance-authenticate (npm)
The package array-hash-view-balance-authenticate was found to contain malicious code...