MAL-2025-37490 Malicious code in udacxvniespwfkqz (npm)

The package udacxvniespwfkqz was found to contain malicious code...

CVE-2024-37490

creationtimestamp| type| source ---|---|--- 2025-01-02 12:19:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2q365ad2e 2025-01-02 17:38:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113759977723218951...

CVE-2024-37490 WordPress Bard theme <= 2.210 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WP Royal Bard allows Cross Site Request Forgery.This issue affects Bard: from n/a through 2.210...

WordPress Bard Theme <= 2.210 is vulnerable to Cross Site Request Forgery (CSRF)

Software Bard Type Theme Vulnerable versions = 2.210 Fixed in 2.211 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37490 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 6993dc4c2f91 Credits Dhabaleshwar Das Required...

CVE-2023-37490

creationtimestamp| type| source ---|---|--- 2023-08-08 07:14:05+00:00| seen| https://t.me/cibsecurity/67947...

CVE-2023-37490 Binary hijack in SAP BusinessObjects Business Intelligence (Installer)

SAP Business Objects Installer - versions 420, 430, allows an authenticated attacker within the network to overwrite an executable file created in a temporary directory during the installation process. On replacing this executable with a malicious file, an attacker can completely compromise the...

CVE-2023-37490

The CVE-2023-37490 entry concerns SAP Business Objects Installer (versions 420, 430). A network-authenticated attacker can overwrite an executable file created in a temporary directory during installation and replace it with a malicious file, enabling a full compromise of confidentiality, integri...

WordPress 4.5.3 - Directory Traversal Denial of Service

WordPress 4.5.3 - Directory Traversal Denial of Service Path traversal vulnerability in WordPress Core Ajax handlers Abstract A path traversal vulnerability was found in the Core Ajax handlers of the WordPress Admin API. This issue can potentially be used by an authenticated user Subscriber to...

WordPress Core 4.5.3 - Directory Traversal / Denial of Service

Path traversal vulnerability in WordPress Core Ajax handlers Abstract A path traversal vulnerability was found in the Core Ajax handlers of the WordPress Admin API. This issue can potentially be used by an authenticated user Subscriber to create a denial of service condition of an affected...