144 matches found
CVE-2024-9685: Missing Authorization
The Notification for Telegram plugin for WordPress is vulnerable to unauthorized test message sending due to a missing capability check on the 'nftbtestaction' function in versions up to, and including, 3.3.1. This makes it possible for authenticated attackers, with subscriber-level access and...
com.abavilla:fpi-bot-api (>=1.2.0, <=1.5.0), com.abavilla:fpi-bot-api-core (>=1.2.0, <=1.3.1) +138 more potentially affected by CVE-2024-7260 via org.keycloak:keycloak-core (19.0.3)
org.keycloak:keycloak-core MAVEN version 19.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.abavilla:fpi-bot-api =1.2.0, =1.2.0, =1.2.0, =1.3.2, =1.5.0, =1.5.0, =1.2.1, =1.2.1, =1.2.1, =1.3.2,...
Malicious code in telegram-bot_api (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in discordbotapi (PyPI)
--- -= Per source details. Do not edit below this line.=-...
com.abavilla:fpi-bot-api (>=1.4.3, <=1.5.0), com.abavilla:fpi-bot-api-parent (>=1.4.3, <=1.5.0) +72 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common (2.14.3.final)
io.quarkus:quarkus-resteasy-reactive-common MAVEN version 2.14.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common and may be impacted: - com.abavilla:fpi-bot-api =1.4.3, =1.4.3, =1.5.6, =1.5.6, =1.3.4,...
com.abavilla:fpi-bot-api (>=1.6.0, <=1.8.0), com.abavilla:fpi-bot-api-parent (>=1.6.0, <=1.8.0) +181 more potentially affected by CVE-2023-6267 via io.quarkus.resteasy.reactive:resteasy-reactive (>=3.0.0.final, <=3.2.8.final)
io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version =3.0.0.final, =1.6.0, =1.6.0, =1.8.0, =1.8.0, =1.6.0, =1.6.0, =1.8.0, =1.8.0, =1.0.25, =1.0.25, =1.5.0, =1.5.0, =1.3.1, =1.3.1, =1.3.4, =1.3.7 and more Source cves: CVE-2023-6267 Source advisory: GHSA-8J3X-W35R-RW4R...
com.abavilla:fpi-bot-api (>=1.6.0, <=1.8.0), com.abavilla:fpi-bot-api-parent (>=1.6.0, <=1.8.0) +107 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (21.0.2)
org.keycloak:keycloak-core MAVEN version 21.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.abavilla:fpi-bot-api =1.6.0, =1.6.0, =1.8.0, =1.8.0, =1.6.0, =1.6.0, =1.8.0, =1.8.0, =1.0.25, =1.0.25,...
com.abavilla:fpi-bot-api (>=1.2.0, <=1.5.0), com.abavilla:fpi-bot-api-core (>=1.2.0, <=1.3.1) +138 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (19.0.3)
org.keycloak:keycloak-core MAVEN version 19.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.abavilla:fpi-bot-api =1.2.0, =1.2.0, =1.2.0, =1.3.2, =1.5.0, =1.5.0, =1.2.1, =1.2.1, =1.2.1, =1.3.2,...
com.abavilla:fpi-bot-api (>=1.0.2, <=1.1.0), com.abavilla:fpi-bot-api-core (>=1.0.2, <=1.1.0) +62 more potentially affected by CVE-2023-1584 via io.quarkus:quarkus-oidc (>=2.0.0.alpha1, <=2.13.0.cr1)
io.quarkus:quarkus-oidc MAVEN version =2.0.0.alpha1, =1.0.2, =1.0.2, =1.0.2, =1.0.132, =v1.3.1, =v1.3.1, =1.0.42, =1.0.42, =1.0.42, =1.0.22, =1.0.22, =1.0.22, =1.0.15, =1.0.15, =1.0.15, =1.0.17 and more Source cves: CVE-2023-1584 Source advisory: GHSA-6HC9-CF8X-HF83...
com.abavilla:fpi-bot-api (>=1.6.0, <=1.6.2), com.abavilla:fpi-bot-api-parent (>=1.6.0, <=1.6.2) +46 more potentially affected by CVE-2023-1584 via io.quarkus:quarkus-oidc (>=3.0.0.final, <=3.1.0.cr1)
io.quarkus:quarkus-oidc MAVEN version =3.0.0.final, =1.6.0, =1.6.0, =1.8.0, =1.8.0, =1.6.0, =1.6.0, =1.8.0, =1.8.0, =1.0.25, =1.0.25, =1.5.0, =1.5.0, =1.3.1, =1.3.1, =1.3.4, =1.3.6 and more Source cves: CVE-2023-1584 Source advisory: GHSA-6HC9-CF8X-HF83...
com.abavilla:fpi-bot-api (>=1.6.0, <=1.8.0), com.abavilla:fpi-bot-api-parent (>=1.6.0, <=1.8.0) +17 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-keycloak-authorization (>=3.0.0.final, <=3.2.5.final)
io.quarkus:quarkus-keycloak-authorization MAVEN version =3.0.0.final, =1.6.0, =1.6.0, =1.8.0, =1.8.0, =1.6.0, =1.6.0, =1.8.0, =1.8.0, =1.0.25, =1.0.25, =1.5.0, =1.5.0, =1.3.1, =1.3.1, =1.3.4, =1.3.7 and more Source cves: CVE-2023-4853 Source advisory: GHSA-4F4R-WGV2-JJVG...
Analyzing a Facebook Profile Stealer Written in Node.js
We analyze an information stealer written in Node.js, packaged into an executable, exfiltrated stolen data via both Telegram bot API and a C&C server, and employed GraphQL as a channel for C&C communication...
com.abavilla:fpi-bot-api (>=1.2.0, <=1.5.0), com.abavilla:fpi-bot-api-core (>=1.2.0, <=1.3.1) +138 more potentially affected by CVE-2023-1664 via org.keycloak:keycloak-core (19.0.3)
org.keycloak:keycloak-core MAVEN version 19.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.abavilla:fpi-bot-api =1.2.0, =1.2.0, =1.2.0, =1.3.2, =1.5.0, =1.5.0, =1.2.1, =1.2.1, =1.2.1, =1.3.2,...
IBM Robotic Process Automation Access Control Error Vulnerability (CNVD-2022-68277)
IBM Robotic Process Automation is a robotic process automation product from International Business Machines IBM. It helps you automate more business and IT processes at scale with the ease and speed of traditional RPA. An Access Control Error vulnerability exists in IBM Robotic Process Automation...
CVE-2022-41294
IBM Robotic Process Automation 21.0.0, 21.0.1, 21.0.2, 21.0.3, and 21.0.4 is vulnerable to cross origin resource sharing using the bot api. IBM X-Force ID: 236807...
CVE-2022-41294
IBM Robotic Process Automation 21.0.0, 21.0.1, 21.0.2, 21.0.3, and 21.0.4 is vulnerable to cross origin resource sharing using the bot api. IBM X-Force ID: 236807...
CVE-2022-41294
CVE-2022-41294 affects IBM Robotic Process Automation (RPA) products, including IBM RPA for Cloud Pak, Service, and standard RPA, with versions before 21.0.5. The concrete vulnerability is improper access control that enables cross-origin resource sharing via the bot API. The IBM security bulleti...
CVE-2022-41294: Origin Validation Error
IBM Robotic Process Automation 21.0.0, 21.0.1, 21.0.2, 21.0.3, and 21.0.4 is vulnerable to cross origin resource sharing using the bot api. IBM X-Force ID: 236807...