409 matches found
CVE-2025-54028: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Saleswonder Team: Tobias CF7 WOW Styler cf7-styler allows PHP Local File Inclusion.This issue affects CF7 WOW Styler: from n/a through = 1.7.2...
Malicious code in project-6wow2-juliet (npm)
The package project-6wow2-juliet was found to contain malicious code...
CVE-2025-53149
Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...
CVE-2025-53149
Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...
Microsoft Kernel Streaming WOW Thunk Service Driver 安全漏洞
Microsoft Kernel Streaming WOW Thunk Service Driver is a kernel mode driver from Microsoft Corporation USA. A security vulnerability exists in Microsoft Kernel Streaming WOW Thunk Service Driver. An attacker could exploit the vulnerability to elevate privileges. The following products and edition...
PT-2025-32815
Name of the Vulnerable Software and Affected Versions Windows Kernel Streaming WOW Thunk Service Driver versions prior to a patch released in September 2025 Description A heap-based buffer overflow exists in the Windows Kernel Streaming WOW Thunk Service Driver ksthunk.sys. This issue allows an...
CVE-2025-53149: Heap-based Buffer Overflow
Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...
Kernel Streaming WOW Thunk Service Driver Privilege Escalation
The vulnerability of the Kernel Streaming WOW Thunk Service Driver ksthunk.sys in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Malicious code in airbnb-rootkit-wow (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b285bbf0bdd753f0ca1b1fb2c932581dbf6a2c0c285776c587b70aa9de24195e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in airbnb-rootkit-wow
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CVE-2025-49675: Use After Free
Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...
CVE-2025-53258
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wow-Company Hover Effects hover-effects allows SQL Injection.This issue affects Hover Effects: from n/a through = 2.1.2...
CVE-2025-53258
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wow-Company Hover Effects hover-effects allows SQL Injection.This issue affects Hover Effects: from n/a through = 2.1.2...
CVE-2025-53258
CVE-2025-53258 describes an SQL Injection vulnerability in the WordPress plugin Hover Effects (hover-effects) that allows exploitation due to improper neutralization of inputs. Affected versions are listed as Hover Effects
CVE-2025-53258 WordPress Hover Effects plugin <= 2.1.2 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wow-Company Hover Effects hover-effects allows SQL Injection.This issue affects Hover Effects: from n/a through 2.1.2...
CVE-2025-53258: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wow-Company Hover Effects hover-effects allows SQL Injection.This issue affects Hover Effects: from n/a through = 2.1.2...
CVE-2025-24716
Cross-Site Request Forgery CSRF vulnerability in Wow-Company Herd Effects mwp-herd-effect allows Cross Site Request Forgery.This issue affects Herd Effects: from n/a through = 6.2.1...
CVE-2025-24711
Cross-Site Request Forgery CSRF vulnerability in Wow-Company Popup Box popup-box allows Cross Site Request Forgery.This issue affects Popup Box: from n/a through = 3.2.4...
CVE-2025-24714
Cross-Site Request Forgery CSRF vulnerability in Wow-Company Bubble Menu – circle floating menu bubble-menu allows Cross Site Request Forgery.This issue affects Bubble Menu – circle floating menu: from n/a through = 4.0.2...