CVE-2024-38789

CVE-2024-38789 corresponds to a CSRF vulnerability in the WordPress Telegram Bot & Channel plugin, affecting versions n/a through 3.8.2. The vulnerability allows unauthorized actions via CSRF; exploitation details are not provided in the documents. A remediation is mentioned: update to a version ...

CVE-2024-38789 WordPress Telegram Bot & Channel plugin <= 3.8.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Marco Milesi Telegram Bot & Channel allows Cross Site Request Forgery.This issue affects Telegram Bot & Channel: from n/a through 3.8.2...

CVE-2024-38789 WordPress Telegram Bot & Channel plugin <= 3.8.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Marco Milesi Telegram Bot & Channel telegram-bot allows Cross Site Request Forgery.This issue affects Telegram Bot & Channel: from n/a through = 3.8.2...

WordPress plugin Telegram Bot & Channel 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2024-38789: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Marco Milesi Telegram Bot & Channel telegram-bot allows Cross Site Request Forgery.This issue affects Telegram Bot & Channel: from n/a through = 3.8.2...

PT-2025-2530 · Unknown · Marco Milesi Telegram Bot & Channel

Name of the Vulnerable Software and Affected Versions: Marco Milesi Telegram Bot & Channel versions n/a through 3.8.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. This means an attacker can trick a user into performing...

DEBIAN-CVE-2024-53212

In the Linux kernel, the following vulnerability has been resolved: netlink: fix false positive warning in extack during dumps Commit under fixes extended extack reporting to dumps. It works under normal conditions, because extack errors are usually reported during -start or the first -dump, it's...

Navigating the New Era of AI Traffic: How to Identify and Block AI Scrapers

In the not-so-distant past, webmasters faced challenges from bots like Google's search spiders, which diligently scanned websites to index content and provide the best search results for users. Fast forward to today, and we are witnessing a new breed of bot: Large Language Models LLMs like ChatGP...

Malicious code in discordbotstatus (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2dbd628d2baf4f55c8f9c9dcd441ae7deeee86379f73dd79beb48e41d4bfbe8f Package clones another package and hides a code to download and run a malicious exe file an infostealer with high VT detection --- Category: MALICIOUS - The...

Malicious code in discordbotpresence (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 feb07b6deb53d133f7121c755a98920d1753dd75c4099e51e4dcb84d650d84fa Package clones another package and hides a code to download and run a malicious exe file an infostealer with high VT detection --- Category: MALICIOUS - The...

MAL-2025-920 Malicious code in discordbotstatus (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2dbd628d2baf4f55c8f9c9dcd441ae7deeee86379f73dd79beb48e41d4bfbe8f Package clones another package and hides a code to download and run a malicious exe file an infostealer with high VT detection --- Category: MALICIOUS - The...

WordPress plugin WP 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

Top Tool Capabilities to Prevent AI-Powered Attacks

Recent advances in AI technologies have granted organizations and individuals alike unprecedented productivity, efficiency, and operational benefits. AI is, without question, the single most exciting emerging technology in the world. However, it also brings enormous risks. While the dystopian,...

Bot Reporting: 4 Key Differences to Consider

Get a detailed look at Akamai’s bot reporting and the important advantages it offers to organizations that are looking to improve their bot defenses...

Anatomy of Celestial Stealer: Malware-as-a-Service Revealed

Anatomy of Celestial Stealer: Malware-as-a-Service Revealed By Niranjan Hegde, Adarsh S and Shashikala Piddannavar · December 3, 2024 Introduction During proactive hunting, Trellix Advanced Research Center found samples belonging to Celestial Stealer, a JavaScript-based infostealer which is...

CVE-2024-53992

CVE-2024-53992 affects unzip-bot, a Telegram bot that extracts archives. The vulnerability arises from unsanitized inputs (archive name, password, or video name) that can be crafted to trigger command execution via subprocess.Popen with shell=True. Documented impact includes potential remote code...

CVE-2024-53992 unzip-bot Allows Remote Code Execution (RCE) via archive extraction, password prompt, or video upload

unzip-bot is a Telegram bot to extract various types of archives. Users could exploit unsanitized inputs to inject malicious commands that are executed through subprocess.Popen with shell=True. Attackers can exploit this vulnerability using a crafted archive name, password, or video name. This...

CVE-2024-53992 unzip-bot Allows Remote Code Execution (RCE) via archive extraction, password prompt, or video upload

unzip-bot is a Telegram bot to extract various types of archives. Users could exploit unsanitized inputs to inject malicious commands that are executed through subprocess.Popen with shell=True. Attackers can exploit this vulnerability using a crafted archive name, password, or video name. This...

CVE-2024-53992 unzip-bot Allows Remote Code Execution (RCE) via archive extraction, password prompt, or video upload

unzip-bot is a Telegram bot to extract various types of archives. Users could exploit unsanitized inputs to inject malicious commands that are executed through subprocess.Popen with shell=True. Attackers can exploit this vulnerability using a crafted archive name, password, or video name. This...

unzip-bot 操作系统命令注入漏洞

unzip-bot is a Telegram bot used by EDM115 to extract various types of archives. An operating system command injection vulnerability exists in versions prior to unzip-bot 7.0.3a, which stems from improper input cleanup and allows a user to inject malicious commands via constructed zip file names,...