PT-2025-1891 · WordPress · Chative Live Chat/Chatbot Plugin

Name of the Vulnerable Software and Affected Versions: Chative Live chat and Chatbot plugin for WordPress versions up to, and including, 1.1 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the add chative widget action function. This...

CVE-2024-12541: Cross-Site Request Forgery (CSRF)

The Chative Live chat and Chatbot plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing or incorrect nonce validation on the addchativewidgetaction function. This makes it possible for unauthenticated attackers to change...

Stable Channel Update for Desktop

The Stable channel has been updated to 131.0.6778.264/.265 for Windows, Mac and 131.0.6778.264 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

CVE-2024-5594

OpenVPN before 2.6.11 does not santize PUSHREPLY messages properly which an attacker controlling the server can use to inject unexpected arbitrary data ending up in client logs...

bind: stack exhaustion in control channel code may lead to DoS

A flaw was found in the Bind package. The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size. Depending on the environment, this may cause the packet-parsing code...

CVE-2024-33061

Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process...

GHSA-JH2F-9MVC-3M3P

creationtimestamp| type| source ---|---|--- 2025-01-05 12:39:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/128...

GHSA-C37C-P2GQ-C2G7

creationtimestamp| type| source ---|---|--- 2025-01-05 06:38:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/121...

CVE-2024-38789

Cross-Site Request Forgery CSRF vulnerability in Marco Milesi Telegram Bot & Channel telegram-bot allows Cross Site Request Forgery.This issue affects Telegram Bot & Channel: from n/a through = 3.8.2...

CVE-2024-38789 WordPress Telegram Bot & Channel plugin <= 3.8.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Marco Milesi Telegram Bot & Channel telegram-bot allows Cross Site Request Forgery.This issue affects Telegram Bot & Channel: from n/a through = 3.8.2...

WordPress plugin Telegram Bot & Channel 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2024-38789: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Marco Milesi Telegram Bot & Channel telegram-bot allows Cross Site Request Forgery.This issue affects Telegram Bot & Channel: from n/a through = 3.8.2...

SUSE CVE-2024-56738

GNU GRUB aka GRUB2 through 2.12 does not use a constant-time algorithm for grubcryptomemcmp and thus allows side-channel attacks...

PT-2025-40065

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The adapter-chan stats array within the mwifiex module is not properly initialized to zero, potentially leading to an information leak. The array is allocated using vmalloc, which does n...

PT-2025-40436

Name of the Vulnerable Software and Affected Versions Chromium affected versions not specified Description A side-channel information leakage issue exists in Tab. This issue affects Chromium and, by extension, Microsoft Edge Chromium-based. Recommendations At the moment, there is no information...

PT-2026-8178

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the mmp pdma residue function within the dmaengine subsystem of the Linux kernel. This condition can lead to a use-after-free issue when accessing the descript...

PT-2025-39218

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 140.0.7339.207 Chromium versions prior to 140.0.7339.207 Chromium versions prior to 140.0.7339.207-1deb12u1 Debian bookworm Chromium versions prior to 140.0.7339.207-1deb13u1 Debian trixie Chromium version...

PT-2025-39217

Name of the Vulnerable Software and Affected Versions Chrome versions prior to 140.0.7339.207/208 Description A flaw exists in Google Chrome that could allow attackers to impact the system. The issue is a side-channel information leak within Chrome’s V8 engine. Recommendations Update to Chrome...

PT-2025-36268

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The ppp fill forward path function contained race conditions. Specifically, the ppp-channels list could change between checks for emptiness and accessing its first entry, potentially...

PT-2026-4656

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Tegra ADMA driver when audio streams are terminated, particularly during XRUN conditions. The problem occurs when the DMA buffer is freed before the...