CVE-2024-38514

creationtimestamp| type| source ---|---|--- 2025-02-27 21:02:06+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lj6s25smgr2t 2025-03-09 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-03-09 2025-03-29 00:00:00+00:00| exploited| The...

CVE-2025-0767

WP Activity Log 5.3.2 was found to be vulnerable. Unvalidated user input is used directly in an unserialize function in myapp/classes/Writers/class-csv-writer.php...

CVE-2025-0767

CVE-2025-0767 pertains to WP Activity Log 5.3.2, where unvalidated user input is directly fed into PHP’s unserialize function inside myapp/classes/Writers/class-csv-writer.php. This is an insecure deserialization risk with high impact (per the cited metrics: CVSS 3.1 base score 9.8, high confiden...

CVE-2025-0767 WP Activity Log 5.3.2 - Insecure deserialization

WP Activity Log 5.3.2 was found to be vulnerable. Unvalidated user input is used directly in an unserialize function in myapp/classes/Writers/class-csv-writer.php...

CVE-2025-0767 WP Activity Log 5.3.2 - Insecure deserialization

WP Activity Log 5.3.2 was found to be vulnerable. Unvalidated user input is used directly in an unserialize function in myapp/classes/Writers/class-csv-writer.php...

MAL-2025-1556 Malicious code in fluentui-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a946d5d0851f29bedadf8857d3b954ecf93da7aaa8b01cc198063141c739169d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress plugin WP Activity Log 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

PT-2025-8980 · Unknown · Wp Activity Log

Name of the Vulnerable Software and Affected Versions: WP Activity Log version 5.3.2 Description: The issue arises from unvalidated user input being used directly in an unserialize function. This is located in the myapp/classes/Writers/class-csv-writer.php file. Recommendations: For WP Activity L...

Moodle 安全漏洞

Moodle is an open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A permission issue vulnerability exists in Moodle. The vulnerability stems from a permission check that does not properly consider grouping...

Malicious code in erc20-faucet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1318f067a3c4a722bc3d70af3c94d47696dc695c07dafc5cac772db0e1b20fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in miniprogram-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 162ae3d0d0a1a6baf3618206ae9d0a31f403340e2a4bbf9aa7d4e9980eb1d817 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1516 Malicious code in amagi-kanban (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d71615497a724cea51b581b078681fd29f136e4d9338af74fea3692dd35754a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1513 Malicious code in champion-trader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a12ee286d5987c604b6598557a7a9d8ed03564366dccc6227f87d58a9ac5c171 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for Command Injection in Materialsvirtuallab Pymatgen

CVE-2024-23346 This PoC is based on the report/findings of Wil...

Carrier Block Load

RISK EVALUATION Successful exploitation of this vulnerability could allow a malicious actor to execute arbitrary code with escalated privileges. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize...

CVE-2024-37360

Hitachi Vantara Pentaho Business Analytics Server is affected by CVE-2024-37360 (Cross-site Scripting). Versions prior to 10.2.0.0 and 9.3.0.9, including 8.3.x, fail to properly neutralize user-controllable input in web output, allowing a malicious URL to inject content into the Analyzer plugin i...

CVE-2025-24989

creationtimestamp| type| source ---|---|--- 2025-02-19 22:21:30+00:00| seen| https://bsky.app/profile/cti-news.bsky.social/post/3liksqx4pw62m 2025-02-20 01:48:28+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114033695623711760 2025-02-20 02:16:44+00:00| seen|...

CVE-2024-45084

creationtimestamp| type| source ---|---|--- 2025-02-19 17:49:03+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114031810247197260 2025-02-19 18:06:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3likej6jhpq2c 2025-08-25 13:32:05+00:00| seen|...

CVE-2025-0924

The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all versions up to, and including, 5.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2025-26466

creationtimestamp| type| source ---|---|--- 2025-02-18 09:22:25+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3ligwqw2rjw26 2025-02-18 10:09:11+00:00| seen| https://t.me/ctinow/231009 2025-02-18 11:29:07+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3lih5tgnx5k2k...