Company Name: Malwarebytes Company HackerOne URL: https://hackerone.com/malwarebytes Submitted By:sijojohnsonLink to Submitters Profile:https://hackerone.com/sijojohnson Report Title:Email Verification Bypass via Race ConditionReport Link:https://hackerone.com/reports/3020733Date...
Vulnerability Summary: CVE-2025-54739 Missing Authorization vulnerability in POSIMYTH Nexter Blocks allows Exploiting Incorrectly Configured Access Control Security Levels. This issue...
Vulnerability Summary: CVE-2025-54740 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Nelson Print My Blog...
Vulnerability Summary: CVE-2025-54736 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NordicMade Savoy allows Retrieve Embedded...
Vulnerability Summary: CVE-2025-54727 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CreativeMindsSolutions CM On Demand Search...
Vulnerability Summary: CVE-2025-54732 Cross-Site Request Forgery (CSRF) vulnerability in Shahjada WPDM – Premium Packages allows Cross Site Request Forgery. This...
Vulnerability Summary: CVE-2025-54747 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpbakery Templatera allows DOM-Based XSS....
Vulnerability Summary: CVE-2025-55708 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ExpressTech Systems Quiz...
Vulnerability Summary: CVE-2025-55709 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual Composer Website...
Vulnerability Summary: CVE-2025-54749 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetProductGallery allows Stored XSS....
Vulnerability Summary: CVE-2025-54746 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cartpauj Shortcode Redirect allows Stored...
The Information provided at the time of posting was detected as "Brute Ratel C4". Depending on when you are viewing...
Vulnerability Summary: CVE-2025-55711 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Table Builder WP Table...
Vulnerability Summary: CVE-2025-55710 Insertion of Sensitive Information Into Sent Data vulnerability in Steve Burge TaxoPress allows Retrieve Embedded Sensitive Data....
Vulnerability Summary: CVE-2025-55712 Missing Authorization vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite allows Exploiting Incorrectly Configured...
Vulnerability Summary: CVE-2025-55716 Missing Authorization vulnerability in VeronaLabs WP Statistics allows Exploiting Incorrectly Configured Access Control Security Levels. This issue...
Vulnerability Summary: CVE-2025-55714 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor allows...
Vulnerability Summary: CVE-2025-55713 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CreativeThemes Blocksy allows Stored XSS....
Vulnerability Summary: CVE-2025-8978 A vulnerability was determined in D-Link DIR-619L 6.02CN02. Affected is the function FirmwareUpgrade of the component boa....
Vulnerability Summary: CVE-2025-8979 A vulnerability was identified in Tenda AC15 15.13.07.13. Affected by this vulnerability is the function check_fw_type/split_fireware/check_fw of...
Vulnerability Summary: CVE-2025-8976 A vulnerability has been found in givanz Vvveb up to 1.0.5. This vulnerability affects unknown code of...
Vulnerability Summary: CVE-2025-8975 A vulnerability was identified in givanz Vvveb up to 1.0.5. This affects an unknown part of the...
Vulnerability Summary: CVE-2025-8983 A vulnerability was identified in itsourcecode Online Tour and Travel Management System 1.0. This issue affects some...
Vulnerability Summary: CVE-2025-8982 A vulnerability was determined in itsourcecode Online Tour and Travel Management System 1.0. This vulnerability affects unknown...
