EUVD-2014-3616

Malware in sbrugna...

EUVD-2014-2957

Malware in sbrugna...

EUVD-2007-4116

Malware in sbrugna...

EUVD-2014-2074

Malware in sbrugna...

EUVD-2025-32492

The Ultimate Addons for Elementor Formerly Elementor Header & Footer Builder WordPress plugin before 2.5.0 does not sanitize SVG file contents when uploaded through the xmlrpc.php endpoint using base64 encode, leading to a Cross-Site Scripting vulnerability...

CVE-2025-9703

The Ultimate Addons for Elementor (formerly Elementor Header & Footer Builder) WordPress plugin, specifically versions prior to 2.5.0 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to properly sanitize SVG file contents when they are uploaded through the xmlrpc...

CVE-2025-9703 Ultimate Addons for Elementor Lite < 2.5.0 - Author+ Stored XSS

The Ultimate Addons for Elementor Formerly Elementor Header & Footer Builder WordPress plugin before 2.5.0 does not sanitize SVG file contents when uploaded through the xmlrpc.php endpoint using base64 encode, leading to a Cross-Site Scripting vulnerability...

EUVD-2021-8259

Malicious code in bioql PyPI...

EUVD-2025-30407

Malicious code in bioql PyPI...

EUVD-2022-47577

Malicious code in bioql PyPI...

EUVD-2022-3869

Malicious code in bioql PyPI...

EUVD-2022-5067

Malicious code in bioql PyPI...

CVE-2025-9487

The Admin and Site Enhancements ASE WordPress plugin before 7.9.8 does not sanitise SVG files when uploaded via xmlrpc.php when such uploads are enabled, which could allow users to upload a malicious SVG containing XSS payloads...

CVE-2025-9487

The Admin and Site Enhancements (ASE) WordPress plugin, in versions prior to 7.9.8 , is vulnerable to Authenticated Stored XSS . The root cause is a failure to properly sanitize SVG files when they are uploaded via the xmlrpc.php file, provided that SVG uploads are enabled. An attacker could expl...

CVE-2025-9487 Admin and Site Enhancements < 7.9.8 - Authenticated Stored XSS via SVG

The Admin and Site Enhancements ASE WordPress plugin before 7.9.8 does not sanitise SVG files when uploaded via xmlrpc.php when such uploads are enabled, which could allow users to upload a malicious SVG containing XSS payloads...

Advisory ROSA-SA-2025-2963

Software: xmlrpc-c 1.51.0 OS: ROSA Virtualization 3.0 unaffected versions = xmlrpc-c-1.51.0-11.0.1.rv30 affected versions xmlrpc-c-1.51.0-11.0.1.rv30 CVE-ID: CVE-2024-8176 BDU-ID: 2025-04573 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the libexpat XML file parsing library is related to a...

Advisory ROSA-SA-2025-2958

Software: xmlrpc-c 1.51.0 OS: ROSA Virtualization 2.1 unaffected versions = xmlrpc-c-1.51.0-11.0.1.rv3 affected versions xmlrpc-c-1.51.0-11.0.1.rv3 CVE-ID: CVE-2024-8176 BDU-ID: 2025-04573 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the libexpat XML file parsing library is related to a stack-bas...

CVE-2025-49037

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Federico Rota Authentication and xmlrpc log writer authentication-and-xmlrpc-log-writer allows Reflected XSS.This issue affects Authentication and xmlrpc log writer: from n/a through = 1.2.2...

CVE-2025-49037 WordPress Authentication and xmlrpc log writer plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Federico Rota Authentication and xmlrpc log writer authentication-and-xmlrpc-log-writer allows Reflected XSS.This issue affects Authentication and xmlrpc log writer: from n/a through = 1.2.2...

PT-2025-33177 · Unknown · Xmlrpc Log Writer +1

Name of the Vulnerable Software and Affected Versions: Federico Rota Authentication and xmlrpc log writer versions through 1.2.2 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to Reflected Cross-site Scripting XSS. This allows for...