2025

Cross-Site Request Forgery (CSRF) vulnerability in Yaidier WN Flipbox Pro wn-flipbox-pro allows Reflected XSS.This issue

Cross-Site Request Forgery (CSRF) vulnerability in Dejan Markovic WordPress Buffer – HYPESocial. Social Media Auto Post,

Cross-Site Request Forgery (CSRF) vulnerability in ChrisHurst Bulk Watermark bulk-watermark allows Reflected XSS.This is

Cross-Site Request Forgery (CSRF) vulnerability in Subhash Kumar Database to Excel database-to-excel allows Stored XSS.T

Cross-Site Request Forgery (CSRF) vulnerability in David Merinas Auto Last Youtube Video auto-last-youtube-video allows

Deserialization of Untrusted Data vulnerability in aThemeArt Translations eDS Responsive Menu eds-responsive-menu allows

Cross-Site Request Forgery (CSRF) vulnerability in INVELITY Invelity MyGLS connect invelity-mygls-connect allows Object

Deserialization of Untrusted Data vulnerability in Rubel Miah Aitasi Coming Soon aitasi-coming-soon allows Object Inject

Cross-Site Request Forgery (CSRF) vulnerability in Nick Ciske To Lead For Salesforce salesforce-wordpress-to-lead allows

Cross-Site Request Forgery (CSRF) vulnerability in Dsingh Purge Varnish Cache purge-varnish allows Stored XSS.This issue

Cross-Site Request Forgery (CSRF) vulnerability in Tom Longridge WordPress Error Monitoring by Bugsnag bugsnag allows St

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle WP Full

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal License

Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect funct

Out-of-bounds read vulnerability in the runtime interpreter module. Impact: Successful exploitation of this vulnerabilit

Vulnerability of exposing object heap addresses in the Ark eTS module. Impact: Successful exploitation of this vulnerabi

Uncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited

The WordPress Helpdesk Integration plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and

Hono is a Web application framework that provides support for any JavaScript runtime. Versions 4.8.0 through 4.9.5 conta

Astro is a web framework for content-driven websites. Versions 11.0.3 through 12.6.5 are vulnerable to SSRF when using A

Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability

Promptcraft Forge Studio is a toolkit for evaluating, optimizing, and maintaining LLM-powered applications. All version

In onCreate of MediaProjectionPermissionActivity.java , there is a possible way to grant a malicious app a token enablin

In getComponentName of AccessibilitySettingsUtils.java, there is a possible way to for a malicious Talkback service to b

In setupAccessibilityServices of AccessibilityFragment.java, there is a possible way to hide an enabled accessibility se

In FrpBypassAlertActivity of FrpBypassAlertActivity.java, there is a possible way to bypass FRP due to a missing permiss

In VerifyNoOverlapInSessions of apexd.cpp, there is a possible way to block security updates due to a logic error in the

In onNullBinding of RemoteFillService.java, there is a possible background activity launch due to an insecure default va

In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system app

In multiple methods of NotificationChannel.java, there is a possible desynchronization from persistence due to improper

In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible DoS of a device admin due to a logic er

In saveGlobalProxyLocked of DevicePolicyManagerService.java, there is a possible way to desync from persistence due to a

In multiple locations, there is a possible way to record audio via a background app due to a missing permission check. T

In multiple functions of AppOpsControllerImpl.java, there is a possible way to record audio without displaying the priva

In multiple locations, there is a possible one-time permission bypass due to a logic error in the code. This could lead

In checkPermissions of SafeActivityOptions.java, there is a possible background activity launch due to a logic error in

In isSystemUid of AccountManagerService.java, there is a possible way for an app to access privileged APIs due to a conf

In multiple locations, there is a possible way to read files belonging to other apps due to SQL injection. This could le

In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use aft

In onCreate of FaceSettings.java, there is a possible way to remove biometric unlock across user profiles due to imprope

In processTransactInternal of RpcState.cpp, there is a possible local out of memory write due to a logic error in the co

In SendPacketToPeer of acl_arbiter.cc, there is a possible out of bounds read due to a use after free. This could lead t

In multiple locations, there is a possible way to persistently DoS the device due to improper input validation. This cou

In assertSafeToStartCustomActivity of AppRestrictionsFragment.java , there is a possible way to exploit a parcel mismatc

In getDefaultCBRPackageName of CellBroadcastHandler.java, there is a possible escalation of privilege due to a logic err

In multiple locations, there is a possible way to use apps linked from a context menu of a lockscreen app due to a race

In markMediaAsFavorite of MediaProvider.java, there is a possible way to bypass the WRITE_EXTERNAL_STORAGE permission du

In getCallingPackageName of CredentialStorage, there is a possible permission bypass due to a logic error in the code. T

In multiple locations, there is a possible condition that results in OOB accesses due to an incorrect bounds check. This

In onCreate of SelectAccountActivity.java, there is a possible way to add contacts without permission due to a logic err