6169 matches found
EUVD-2022-39887
Malicious code in bioql PyPI...
EUVD-2023-34285
Malicious code in bioql PyPI...
EUVD-2022-3784
Malicious code in bioql PyPI...
EUVD-2024-53445
Malicious code in bioql PyPI...
EUVD-2023-59406
Malicious code in bioql PyPI...
EUVD-2023-12884
Malicious code in bioql PyPI...
EUVD-2024-34300
Malicious code in bioql PyPI...
EUVD-2022-40802
Malicious code in bioql PyPI...
EUVD-2025-32189
Malicious code in bioql PyPI...
EUVD-2011-1471
Malicious code in bioql PyPI...
EUVD-2023-2792
Malicious code in bioql PyPI...
@circleci/agents (2.13.2-canary.8150572), @tessl/cli (>=0.21.0, <=0.21.2) +9 more potentially affected by CVE-2025-59536 via @anthropic-ai/claude-code (>=1.0.8, <=1.0.108)
@anthropic-ai/claude-code NPM version =1.0.8, =0.21.0, =0.2.0, =0.1.34, =1.8.0, =0.1.44, =0.0.22, =0.0.11, =0.0.27, =0.0.31 - locadex 0.0.2-alpha.1 Source cves: CVE-2025-59536 Source advisory: OSV:GHSA-4FGQ-FPQ9-MR3G...
MITRE: CVE-2025-59489 Unity Gaming Engine Editor vulnerability
Unity announced a security vulnerability CVE-2025-59489 that is affecting games or applications built with the Unity Gaming Engine Editor version 2017.1 or later. You may be using a Microsoft app or playing a Microsoft game that should be uninstalled until an update is available. We are working t...
Zyxel < 5.38 Directory Traversal
According to its banner, the version of Zyxel running on the remote host is 5.38. It is, therefore, affected by a Directory Traversal that could allow an attacker to download or upload files via a crafted URL. Note that the scanner has not tested for these issues but has instead relied only on th...
CVE-2025-9697 Ajax WooSearch <= 1.0.0 - Unauthenticated SQL Injection
The Ajax WooSearch WordPress plugin through 1.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...
WordPress AR For WordPress plugin <= 8.34 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Abu Hurayra in WordPress Plugin AR For WordPress versions = 8.34...
CVE-2025-60113
CVE-2025-60113 The provided connected document set confirms a Cross-Site Request Forgery (CSRF) vulnerability affecting the WordPress plugin Groovy Menu (Free), specifically in versions up to 1.4.3. The vulnerability details and affected component align with the CVE entry, which states CSRF expos...
CVE-2025-10747 WP-DownloadManager <= 1.68.11 - Authenticated (Admin+) Arbitrary File Upload
The WP-DownloadManager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the download-add.php file in all versions up to, and including, 1.68.11. This makes it possible for authenticated attackers, with Administrator-level access and above, to...
CVE-2025-58254
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dtbaker StylePress for Elementor full-site-builder-for-elementor allows Stored XSS.This issue affects StylePress for Elementor: from n/a through = 1.2.1...
