CVE-2024-12384

CVE-2024-12384 affects Binary MLM Woocommerce (WordPress) with Reflected XSS via the 'page' parameter in all versions up to 2.0. Root cause: insufficient input sanitization and output escaping. Impact: unauthenticated attackers can inject scripts into pages executed after a user clicks a crafted ...

CVE-2024-12383

CVE-2024-12383 refers to the Binary MLM Woocommerce WordPress plugin vulnerability. The Wordfence entry confirms a Cross‑Site Request Forgery to Stored Cross‑Site Scripting (CSRF to XSS) flaw in all versions up to 2.0, caused by missing or incorrect nonce validation in the bmw_display_pv_set_page...

CVE-2024-12383 Binary MLM Woocommerce <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The Binary MLM Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0. This is due to missing or incorrect nonce validation on the 'bmwdisplaypvsetpage' function and insufficient input sanitization and output escaping of the...

CVE-2024-12383 Binary MLM Woocommerce <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The Binary MLM Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0. This is due to missing or incorrect nonce validation on the 'bmwdisplaypvsetpage' function and insufficient input sanitization and output escaping of the...

PT-2025-1827 · WordPress · Binary Mlm Woocommerce Plugin

Name of the Vulnerable Software and Affected Versions: Binary MLM Woocommerce plugin for WordPress versions prior to 2.0 Description: The issue arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts in pages through the...

WordPress plugin Binary MLM Woocommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Binary MLM Woocommerce plugin <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by Colin Xu in WordPress Plugin Binary MLM Woocommerce versions = 2.0...

Nessus Agent 2025 Refresh

Binary data nessusagentrefresh2501.nbin...

Host Active Directory Configuration (Linux)

Binary data hostadconfiglinux.nbin...

ProjectSend Detection

Binary data projectsendprojectsenddetect.nbin...

BeyondTrust Privileged Remote Access Detection

Binary data beyondtrustprivilegedremoteaccessdetect.nbin...

BeyondTrust Remote Support Unsupported Version Detection

Binary data beyondtrustremotesupportunsupported.nbin...

Beyondtrust Remote Support Detection

Binary data beyondtrustremotesupportdetect.nbin...

Malicious code in solaraexecutor (npm)

This package uses obfuscation to hide that its downloading a malicious binary from an attacker-controlled domain --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8807e1265b0c39afd3a6507559deb211f67d9a559b8094aecea14d18f30dcf7 Any computer that has this package...

Malicious code in xeno.dll (npm)

This package uses obfuscation to hide that its downloading a malicious binary from an attacker-controlled domain --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8903fab539c0352f278ee3116807f48f52403f7e26b855fe9d68c3328012200d Any computer that has this package...

The vulnerability of the amdtee component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the amdtee component in the Linux operating system’s kernel is related to the assignment of the NULL pointer in the copytabinary function. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-53241

In the Linux kernel, the following vulnerability has been resolved: x86/xen: don't do PV iret hypercall through hypercall page Instead of jumping to the Xen hypercall page for doing the iret hypercall, directly code the required sequence in xen-asm.S. This is done in preparation of no longer usin...

Dell Integrated Remote Access Controller (iDRAC) Hardware Detection

Binary data dellidracdevicedetect.nbin...

Dell Integrated Remote Access Controller (iDRAC) OS Detection

Binary data dellidracdetect.nbin...

CVE-2024-53256 Rizin has a command injection via RzBinInfo bclass due legacy code

Rizin is a UNIX-like reverse engineering framework and command-line toolset. rizin.c still had an old snippet of code which suffered a command injection due the usage of rzcorecmdf to invoke the command m which was removed in v0.1.x. A malicious binary defining bclass part of RzBinInfo is execute...