42678 matches found
GHSA-2JCR-4R89-72R6 vulnerabilities
Vulnerabilities for packages: gitlab-operator-fips...
GHSA-VWXF-55XH-P3XF vulnerabilities
Vulnerabilities for packages: gitlab-operator-fips...
Enjin: Unauthenticated GraphQL access by prepending __schema to private operations
A security vulnerability was identified in the GraphQL schema of the Enjin Platform. The vulnerability allowed unauthorized access to the GraphQL schema by prepending "schema" to private operations. The vulnerability was discovered and reported by a security researcher. The specific location of t...
EUVD-2025-200715
Malicious code in @hand-talk/yotta-icons npm...
Wordfence Intelligence Weekly WordPress Vulnerability Report (November 17, 2025 to November 23, 2025)
Last week, there were 167 vulnerabilities disclosed in 152 WordPress Plugins and 2 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 69 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities...
EUVD-2025-198678
Malicious code in @posthog/rrdom npm...
EUVD-2025-198545
Malicious code in airbnb-phoenix npm...
Structured Extraction of Vulnerabilities in OpenVAS and Tenable WAS Reports Using LLMs
This paper proposes an automated LLM-based method to extract and structure vulnerabilities from OpenVAS and Tenable WAS scanner reports, converting unstructured data into a standardized format for risk management. In an evaluation using a report with 34 vulnerabilities, GPT-4.1 and DeepSeek...
CVE-2024-44652
The Kashipara Ecommerce Website version 1.0 is vulnerable to SQL Injection due to a lack of input validation and sanitization for specific parameters in the user_register.php file. Specifically, the user_email, username, user_firstname, user_lastname, and user_address parameters are improperly ha...
EUVD-2025-175349
A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1FW102B02 within the prog.cgi and rc binaries. The sub433188 function in prog.cgi stores user-supplied email configuration parameters EmailFrom, EmailTo, SMTPServerAddress, SMTPServerPort, AccountName in NVRAM v...
EUVD-2025-179185
Malicious code in elara-triton-quasar-async npm...
EUVD-2025-180510
Malicious code in accretion-kastra-nightmare-module npm...
EUVD-2025-179222
Malicious code in dysonswarm-joviology-node-sass-troposphere npm...
EUVD-2025-178982
Malicious code in exobiology-chalk-xml-atlas npm...
EUVD-2025-176908
Malicious code in pulsar-crust-acamar-technosignature npm...
EUVD-2025-136228
Malicious code in itale-adci-gnyagibhygyu npm...
EUVD-2025-137770
Malicious code in gocay-uga-agidugafufyi npm...
EUVD-2025-138076
Malicious code in flight-ilutag-zilauma npm...