CACredDecoder

C-Ark Credential Decoder Exploit tool for CVE-2021-31796 A Tool for decoding C-Ark Credential files By: Aaron Mizrachi - https://twitter.com/unmanarc/ Enrique Vaamonde - https://twitter.com/ejvm First release: 2/Sep/2019 Disclosure: 11/Oct/2021 References...

Astra Linux – vulnerability in ark

The libarchiveplugin.cpp file in KDE Ark prior to version 24.12.0 can extract files to an absolute path within an archive...

CLEANSTART-2024-IG56715 In kerfuffle/jobs

Security vulnerability affects the ark package. In kerfuffle/jobs...

CLEANSTART-2024-HZ44036 In KDE Ark before 20

Security vulnerability affects the ark package. In KDE Ark before 20...

Malicious code in instantly-ark-survival-primal-pass-generator (npm)

The package instantly-ark-survival-primal-pass-generator was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in ark-survival-ancient-amber-generator (npm)

The package ark-survival-ancient-amber-generator was found to contain malicious code. --- Credit: OpenSSF source...

CVE-2026-8164

Uncontrolled Search Path Element vulnerability in ArkSigner Software and Hardware Industry and Trade Inc. ArkSigner Desktop Client allows Search Order Hijacking. This issue affects ArkSigner Desktop Client: from v2.2.16.10 through 17062026...

CVE-2026-8164

CVE-2026-8164: Uncontrolled Search Path Element affecting ArkSigner Desktop Client (ArkSigner Software and Hardware Industry and Trade Inc.). Affected versions: v2.2.16.10 through 17062026. Impact: high for confidentiality, integrity, and availability. Attack vector: LOCAL; prerequisites: LOW pri...

Malicious code in ark-vmp-reverse (PyPI)

Source: kam193 28ac22df743a6a65eed4d1d25f66c0f3eb42c5235dc749a84162883d313bd415 During installation, a website with the current working dir is being called. It looks like something between spam and pentest as the website is most probably not in the control of the uploader. The package has no othe...

ch.artaios:openchemlib-vaadin (>=2.0.0, <=2.4.1), ch.martinelli.oss:vaadin-jooq (2.1.1) +471 more potentially affected by CVE-2026-41715 via io.projectreactor.netty:reactor-netty (>=1.1.0, <=1.1.31)

io.projectreactor.netty:reactor-netty MAVEN version =1.1.0, =2.0.0, =3.1.0.5, =3.3.0.0, =5.0.0, =5.0.0, =1.1.5, =2.0.0, =4.2.0, =4.2.0, =4.9.0-beta.1, =4.9.0-beta.1, =4.9.0-beta.1, =3.0.0, =3.0.1 and more Source cves: CVE-2026-41715 Source advisory: GHSA-PFC9-2CQG-9WQ6...

CVE-2011-0459

Cross-site scripting XSS vulnerability in Cyber-Ark Password Vault Web Access PVWA 5.0 and earlier, 5.5 through 5.5 patch 4, and 6.0 through 6.0 patch 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

lunarbase-pmm-math (>=0.1.0, <=0.2.6), semaphore-rs-ark-circom (>=0.3.0, <=0.5.1) +3 more potentially affected by unknown CVE via ruint (>=1.13.1, <=1.16.0)

ruint CARGO version =1.13.1, =0.1.0, =0.3.0, =0.3.0, =0.1.0, =0.1.0, =0.5.1 Source cves: unknown CVE Source advisory: GHSA-9FJQ-45QV-PCM7...

lunarbase-pmm-math (>=0.1.0, <=0.2.6), semaphore-rs-ark-circom (>=0.3.0, <=0.5.1) +3 more potentially affected by unknown CVE via ruint (>=1.13.1, <=1.16.0)

ruint CARGO version =1.13.1, =0.1.0, =0.3.0, =0.3.0, =0.1.0, =0.1.0, =0.5.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0137...

CVE-2025-13684

The ARK Related Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 2.19. This is due to missing or incorrect nonce validation on the arkrpoptionspage function. This makes it possible for unauthenticated attackers to modify the plugin's configuration settings via a...

CVE-2025-13684

The ARK Related Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 2.19. This is due to missing or incorrect nonce validation on the arkrpoptionspage function. This makes it possible for unauthenticated attackers to modify the plugin's configuration settings via a...

CVE-2025-13684 ARK Related Posts <= 2.19 - Cross-Site Request Forgery to Settings Update

The ARK Related Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 2.19. This is due to missing or incorrect nonce validation on the arkrpoptionspage function. This makes it possible for unauthenticated attackers to modify the plugin's configuration settings via a...

EUVD-2025-201393

The ARK Related Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 2.19. This is due to missing or incorrect nonce validation on the arkrpoptionspage function. This makes it possible for unauthenticated attackers to modify the plugin's configuration settings via a...

CVE-2025-13684 ARK Related Posts <= 2.19 - Cross-Site Request Forgery to Settings Update

The ARK Related Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 2.19. This is due to missing or incorrect nonce validation on the arkrpoptionspage function. This makes it possible for unauthenticated attackers to modify the plugin's configuration settings via a...

CVE-2025-13684

CVE-2025-13684 concerns the ARK Related Posts WordPress plugin (version

CVE-2025-13684: Cross-Site Request Forgery (CSRF)

The ARK Related Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 2.19. This is due to missing or incorrect nonce validation on the arkrpoptionspage function. This makes it possible for unauthenticated attackers to modify the plugin's configuration settings via a...