MAL-2025-9267 Malicious code in @react-native-website/update-redirects (npm)

The package @react-native-website/update-redirects was found to contain malicious code...

MAL-2025-27462 Malicious code in ng-website (npm)

The package ng-website was found to contain malicious code...

Malicious code in manifold-website (npm)

The package manifold-website was found to contain malicious code...

MAL-2025-31831 Malicious code in react-native-website (npm)

The package react-native-website was found to contain malicious code...

MAL-2025-25895 Malicious code in manifold-website (npm)

The package manifold-website was found to contain malicious code...

MAL-2025-29693 Malicious code in proctor-website (npm)

The package proctor-website was found to contain malicious code...

Malicious code in ng-website (npm)

The package ng-website was found to contain malicious code...

Malicious code in risc-zero-developer-website (npm)

The package risc-zero-developer-website was found to contain malicious code...

Malicious code in website-bundle (npm)

The package website-bundle was found to contain malicious code...

Malicious code in monitor-website (npm)

The package monitor-website was found to contain malicious code...

Malicious code in test-website-hashroute (npm)

The package test-website-hashroute was found to contain malicious code...

MAL-2025-36703 Malicious code in test-website-hashroute (npm)

The package test-website-hashroute was found to contain malicious code...

MAL-2025-26652 Malicious code in monitor-website (npm)

The package monitor-website was found to contain malicious code...

MAL-2025-32271 Malicious code in risc-zero-developer-website (npm)

The package risc-zero-developer-website was found to contain malicious code...

CVE-2025-55709 WordPress Visual Composer Website Builder Plugin < 45.15.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Stored XSS.This issue affects Visual Composer Website Builder: from n/a through 45.15.0...

CVE-2025-55709

CVE-2025-55709 is a storage XSS flaw in the Visual Composer Website Builder plugin. The vulnerability arises from improper input neutralization during web page generation, enabling stored XSS in the affected plugin. Evidence from multiple sources indicates the vulnerability affects the Visual Com...

WordPress Visual Composer Website Builder Plugin < 45.15.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Visual Composer Website Builder versions 45.15.0...

Exploit for CVE-2020-11989

使用说明 首页 所见即所得，点击对应的按钮会跳转到相应的模块 渗透测试 网站扫描 网站扫描功能缝了afrog项目地址，基本就是差不多把该扫描器的功能UI化，且内置反连无需再配置ceye或jndi已将jndi有关poc全部替换成反连地址，主动探测的漏洞或者指纹会写入到report目录下的html文件中，并没有将afrog命令的输出进行删除（所以你在go run main.go运行工具时，依然能看到命令行存在afrog的输出内容） 目标格式支持 URL 或者 IP:PORT 仅指纹扫描/指纹POC扫描/主动指纹探测 - 仅指纹扫描：只对当前网页发送两个数据包进行探测指纹 - 主动指纹探测：...

WordPress plugin AI Tools 安全漏洞

WordPress AI Tools plugin is a WordPress plugin based on Artificial Intelligence technology, which is mainly used to optimize website content generation, automate task processing and improve website performance. WordPress AI Tools plugin suffers from a lack of authorization vulnerability, no...

WordPress plugin Visual Composer Website Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...