PT-2025-34006 · Unknown · Tobias Cf7 Wow Styler

Name of the Vulnerable Software and Affected Versions: Saleswonder Team Tobias CF7 WOW Styler versions through 1.7.2 Description: The software contains an Improper Control of Filename for Include/Require Statement issue, also known as a PHP Remote File Inclusion issue. This allows for PHP Local...

Malicious code in project-6wow2-juliet (npm)

The package project-6wow2-juliet was found to contain malicious code...

CVE-2025-53149

Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...

CVE-2025-53149

Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...

Microsoft Kernel Streaming WOW Thunk Service Driver 安全漏洞

Microsoft Kernel Streaming WOW Thunk Service Driver is a kernel mode driver from Microsoft Corporation USA. A security vulnerability exists in Microsoft Kernel Streaming WOW Thunk Service Driver. An attacker could exploit the vulnerability to elevate privileges. The following products and edition...

PT-2025-32815

Name of the Vulnerable Software and Affected Versions Windows Kernel Streaming WOW Thunk Service Driver versions prior to a patch released in September 2025 Description A heap-based buffer overflow exists in the Windows Kernel Streaming WOW Thunk Service Driver ksthunk.sys. This issue allows an...

The vulnerability of the Kernel Streaming WOW Thunk Service Driver (ksthunk.sys) in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Kernel Streaming WOW Thunk Service Driver ksthunk.sys in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Malicious code in airbnb-rootkit-wow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b285bbf0bdd753f0ca1b1fb2c932581dbf6a2c0c285776c587b70aa9de24195e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-53258

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wow-Company Hover Effects hover-effects allows SQL Injection.This issue affects Hover Effects: from n/a through = 2.1.2...

CVE-2025-53258

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wow-Company Hover Effects hover-effects allows SQL Injection.This issue affects Hover Effects: from n/a through = 2.1.2...

CVE-2025-53258

CVE-2025-53258 describes an SQL Injection vulnerability in the WordPress plugin Hover Effects (hover-effects) that allows exploitation due to improper neutralization of inputs. Affected versions are listed as Hover Effects

CVE-2025-53258 WordPress Hover Effects plugin <= 2.1.2 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wow-Company Hover Effects hover-effects allows SQL Injection.This issue affects Hover Effects: from n/a through 2.1.2...

CVE-2025-24716

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Herd Effects mwp-herd-effect allows Cross Site Request Forgery.This issue affects Herd Effects: from n/a through = 6.2.1...

CVE-2025-24711

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Popup Box popup-box allows Cross Site Request Forgery.This issue affects Popup Box: from n/a through = 3.2.4...

CVE-2025-24714

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Bubble Menu – circle floating menu bubble-menu allows Cross Site Request Forgery.This issue affects Bubble Menu – circle floating menu: from n/a through = 4.0.2...

CVE-2025-24717

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Modal Window modal-window allows Cross Site Request Forgery.This issue affects Modal Window: from n/a through = 6.1.4...

CVE-2025-24715

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Counter Box counter-box allows Cross Site Request Forgery.This issue affects Counter Box: from n/a through = 2.0.5...

CVE-2025-24720

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Sticky Buttons sticky-buttons allows Cross Site Request Forgery.This issue affects Sticky Buttons: from n/a through = 4.1.1...

CVE-2025-24713

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Button Generator – easily Button Builder button-generation allows Cross Site Request Forgery.This issue affects Button Generator – easily Button Builder: from n/a through = 3.1.1...

CVE-2024-43346

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wow-Company Modal Window allows Stored XSS.This issue affects Modal Window: from n/a through 6.0.3...