315 matches found
China-Linked Hackers Have Used the PeckBirdy JavaScript C2 Framework Since 2023
Cybersecurity researchers have discovered a JScript-based command-and-control C2 framework called PeckBirdy that has been put to use by China-aligned APT actors since 2023 to target multiple environments. The flexible framework has been put to use against Chinese gambling industries and malicious...
CVE-2023-54109 media: rcar_fdp1: Fix refcount leak in probe and remove function
In the Linux kernel, the following vulnerability has been resolved: media: rcarfdp1: Fix refcount leak in probe and remove function rcarfcpget take reference, which should be balanced with rcarfcpput. Add missing rcarfcpput in fdp1remove and the error paths of fdp1probe to fix this. hverkuil:...
PT-2025-53262
Name of the Vulnerable Software and Affected Versions WPBakery Visual Composer WHMCS Elements versions through 1.0.4.3 Description The software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-site Scripting issue. This allows for the...
CVE-2025-62094
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in voidthemes Void Elementor WHMCS Elements For Elementor Page Builder void-elementor-whmcs-elements.This issue affects Void Elementor WHMCS Elements For Elementor Page Builder: from n/a through =...
CVE-2025-62094 WordPress Void Elementor WHMCS Elements For Elementor Page Builder plugin <= 2.0.1.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in voidthemes Void Elementor WHMCS Elements For Elementor Page Builder void-elementor-whmcs-elements.This issue affects Void Elementor WHMCS Elements For Elementor Page Builder: from n/a through =...
EUVD-2025-204704
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Voidthemes Void Elementor WHMCS Elements For Elementor Page Builder.This issue affects Void Elementor WHMCS Elements For Elementor Page Builder: from n/a through 2.0.1.2...
CVE-2025-62094 WordPress Void Elementor WHMCS Elements For Elementor Page Builder plugin <= 2.0.1.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Voidthemes Void Elementor WHMCS Elements For Elementor Page Builder.This issue affects Void Elementor WHMCS Elements For Elementor Page Builder: from n/a through 2.0.1.2...
CVE-2025-62094
CVE-2025-62094 describes a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Void Elementor WHMCS Elements For Elementor Page Builder (Voidthemes) up to version 2.0.1.2 . The issue stems from improper input neutralization during web page generation, allowing injected input to be ex...
WordPress plugin Void Elementor WHMCS Elements For Elementor Page Builder 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...
EUVD-2025-179588
Malicious code in container-void-virtualize-transpile-try npm...
EUVD-2025-179848
Malicious code in cat-void-bash-cache-bundle npm...
EUVD-2025-177777
Malicious code in module-void-fast-thread-double npm...
EUVD-2025-178961
Malicious code in export-decompress-integer-encrypt-void npm...
EUVD-2025-175693
Malicious code in void-uglify-warn-export-zero npm...
Malicious code in parse-kappa-void-proxy-scale (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3590151b0daf282a28b49f4a481548cae0c6a1f81a39e16698dcd0c0d72bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179109
Malicious code in envconfig-fornax-void-duplex npm...
EUVD-2025-175698
Malicious code in void-exoplanet-ganymede-geodynamo npm...
EUVD-2025-177154
Malicious code in pipe-oortcloud-void-volcanology npm...
MAL-2025-187754 Malicious code in less-loader-grus-void-biosignature (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99eb889dc1cf69b2085a517f688f0af0a888445aef6063056bcdef36537a018d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...