115080 matches found
@imagina/n8n-nodes-iwhatsapp (>=0.1.0, <=0.2.7), @regis-samurai/n8n (>=0.216.1, <=0.219.1) +15 more potentially affected by CVE-2025-65964 via n8n-nodes-base (>=0.120.1, <=0.225.0)
n8n-nodes-base NPM version =0.120.1, =0.1.0, =0.216.1, =0.123.0, =0.1.0, =0.18.0, =0.1.0, =1.0.0, =0.1.0, =0.2.14, =0.1.0, =1.0.0, =1.0.1 and more Source cves: CVE-2025-65964 Source advisory: SNYK:JS-N8NNODESBASE-14222434...
WordPress WP Email Capture plugin <= 3.12.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin WP Email Capture versions = 3.12.4...
WordPress Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin <= 1.4.6 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms versions = 1.4.6...
WordPress Table Block by Tableberg plugin <= 0.6.9 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Table Block by Tableberg versions = 0.6.9...
WordPress Social Photo Fetcher plugin <= 3.0.4 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Social Photo Fetcher versions = 3.0.4...
@1771technologies/oneplay (>=0.0.1, <=0.0.6), @antonyfaris/prefix-node-builtins (>=1.0.0, <=1.0.1) +34 more potentially affected by CVE-2025-66202 via astro (>=5.0.0-beta.5, <=5.15.6)
astro NPM version =5.0.0-beta.5, =0.0.1, =1.0.0, =0.5.0, =0.0.1, =0.1.0, =0.0.1, =2.18.7, =1.25.426-4, =0.6.2, =0.1.2-alpha.1, =0.0.28, =0.0.28, =0.0.40 and more Source cves: CVE-2025-66202 Source advisory: OSV:GHSA-WHQG-PPGF-WP8C...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 - React2Shell PoC A proof of concept exploit f...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 Demonstration Lab Next.js / React RSC RCE Th...
⚡ Weekly Recap: USB Malware, React2Shell, WhatsApp Worms, AI IDE Bugs & More
It's been a week of chaos in code and calm in headlines. A bug that broke the internet's favorite framework, hackers chasing AI tools, fake apps stealing cash, and record-breaking cyberattacks — all within days. If you blink, you'll miss how fast the threat map is changing. New flaws are being...
WordPress CSV Sumotto plugin <= 1.0 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by Abdulsamad Yusuf 0xVenus - Envorasec in WordPress Plugin CSV Sumotto versions = 1.0...
Exploit for CVE-2025-66478
CVE-2025-66478 Vulnerability Demo This repository contains a...
NTPsec < 1.1.0 DoS Vulnerability
NTPsec is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ntpsec:ntpsec";...
PT-2025-49609
Name of the Vulnerable Software and Affected Versions Tuleap Community Edition versions prior to 17.0.99.1763803709 Tuleap Enterprise Edition versions prior to 17.0-4 and 16.13-9 Description Tuleap, a free and open source suite for software development and collaboration, is affected by missing CS...
PT-2025-49603
Name of the Vulnerable Software and Affected Versions c-ares versions 1.32.3 through 1.34.5 Description c-ares is an asynchronous resolver library. Versions between 1.32.3 and 1.34.5 improperly handle query termination after maximum attempts when utilizing the read answer and process answer...
PT-2026-23861
Name of the Vulnerable Software and Affected Versions ZITADEL versions 4.0.0-rc.1 through 4.7.0 Description ZITADEL is an open source identity management platform. A potential issue exists in ZITADEL’s password reset mechanism in login V2. The platform uses the Forwarded or X-Forwarded-Host heade...
Medium: unbound
Issue Overview: NLnet Labs Unbound up to and including version 1.24.0 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone. Usually...
Medium: cups-filters
Issue Overview: CUPS is a standards-based, open-source printing system, and libcupsfilters contains the code of the filters of the former cups-filters package as library functions to be used for the data format conversion tasks needed in Printer Applications. In CUPS-Filters versions up to and...
WordPress IDonate plugin <= 2.1.15 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Tarcísio LuchesiPoystick in WordPress Plugin IDonate versions = 2.1.15...
WordPress Funnel Builder by FunnelKit plugin <= 3.13.1.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by zaim in WordPress Plugin Funnel Builder by FunnelKit versions = 3.13.1.2...