Critical exposure
CVE-2022-25759 Convert-svg-core Project Convert-svg-core
- CVSS 9.9
New critical disclosure (CVSS 9.9) — high severity with a short public awareness window before exploit material typically surfaces.
Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Critical exposure
New critical disclosure (CVSS 9.9) — high severity with a short public awareness window before exploit material typically surfaces.
Critical exposure
New critical Pypi Code Execution (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Pypi Code Execution (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
Nothing flagged in this category for this digest.
The package convert-svg-core before 0.6.2 are vulnerable to Remote Code Injection via sending an SVG file containing the payload.
Multiple Authenticated (subscriber or higher user role) SQL Injection (SQLi) vulnerabilities in WooPlugins.co's Homepage Product Organize...
An issue in the component /api/plugin/upload of Dataease v1.11.1 allows attackers to execute arbitrary code via a crafted plugin.
DataEase v1.11.1 was discovered to contain a arbitrary file write vulnerability via the parameter dataSourceId.
The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party.
The bin-collection package in PyPI before v0.1 included a code execution backdoor inserted by a third party.
The wikifaces package in PyPI v1.0 included a code execution backdoor inserted by a third party.
The PyCrowdTangle package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party.
The eziod package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party.
The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party.