WordPress plugin Referrer Detector 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

WordPress Referrer Detector plugin <= 4.2.1.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds Patchstack Alliance in WordPress Plugin Referrer Detector versions = 4.2.1.0...

WordPress Referrer Detector Plugin <= 4.2.1.0 is vulnerable to PHP Object Injection

Software Referrer Detector Type Plugin Vulnerable versions = 4.2.1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-52410 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 462ef6116947 Credits Bonds Required privilege Unauthenticat...

PYSEC-2024-191

The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Prior to version 3.12.3, when the logging level was set by the user to DEBUG, the Connector could have logged Duo passcodes when specified...

PT-2024-33662 · Snowflake · Snowflake Connector For Python

Name of the Vulnerable Software and Affected Versions: Snowflake Connector for Python versions prior to 3.12.3 Description: The issue concerns the logging of sensitive information by the Snowflake Connector for Python. When the logging level is set to DEBUG, the Connector may log Duo passcodes,...

Snowflake Connector for Python 日志信息泄露漏洞

Snowflake Connector for Python is an open source interface from Snowflake Computing. It is used to develop Python applications that can connect to Snowflake and perform all standard operations. A logging information disclosure vulnerability exists in Snowflake Connector for Python versions prior ...

CVE-2024-7417

creationtimestamp| type| source ---|---|--- 2024-10-17 07:26:42+00:00| seen| https://t.me/cvedetector/8144...

CVE-2024-9863

creationtimestamp| type| source ---|---|--- 2024-10-17 04:56:08+00:00| seen| https://t.me/cvedetector/8134...

CVE-2024-6983

creationtimestamp| type| source ---|---|--- 2024-09-27 19:14:37+00:00| seen| https://t.me/cvedetector/6549 2025-02-18 12:07:35+00:00| published-proof-of-concept| https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/mudlerlocalaicve20246983 2026-07-25...

CVE-2024-2928

creationtimestamp| type| source ---|---|--- 2024-09-11 17:21:42+00:00| published-proof-of-concept| https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/mlflowcve20242928 2024-11-08 03:57:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8970...

TruffleHog 安全漏洞

TruffleHog is an open source tool from Truffle Security. A security vulnerability exists in versions of TruffleHog prior to v3.81.9. An attacker uses the vulnerability to somehow produce data that, when scanned by a specific detector, sends an unauthorized request to an endpoint of the attacker's...

Exploit for Improper Enforcement of Message Integrity During Transmission in a Communication Channel in Freeradius

RADIUS Vulnerability Detector Limits of the Code: The co...

Ashok - A OSINT Recon Tool, A.K.A Swiss Army Knife

Reconnaissance is the first phase of penetration testing which means gathering information before any real attacks are planned So Ashok is an Incredible fast recon tool for penetration tester which is specially designed for Reconnaissance" title="Reconnaissance"Reconnaissance phase. And in...

CVE-2023-45288 affecting package node-problem-detector for versions less than 0.8.17-3

CVE-2023-45288 affecting package node-problem-detector for versions less than 0.8.17-3. A patched version of the package is available...

CVE-2024-36914 drm/amd/display: Skip on writeback when it's not applicable

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip on writeback when it's not applicable WHY dynamic memory safety error detector KASAN catches and generates error messages "BUG: KASAN: slab-out-of-bounds" as writeback connector does not support certain...

CVE-2024-36914 drm/amd/display: Skip on writeback when it's not applicable

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip on writeback when it's not applicable WHY dynamic memory safety error detector KASAN catches and generates error messages "BUG: KASAN: slab-out-of-bounds" as writeback connector does not support certain...

CVE-2024-22476

creationtimestamp| type| source ---|---|--- 2024-05-17 14:56:14+00:00| published-proof-of-concept| https://t.me/HackingInsights/606 2024-06-11 19:26:40+00:00| published-proof-of-concept|...

Malicious code in @sxmp/detector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d54b24acdfdf427c93c47d6102673a06c407f1cd84e0508d1db4c11a98309a61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1336 Malicious code in @sxmp/detector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d54b24acdfdf427c93c47d6102673a06c407f1cd84e0508d1db4c11a98309a61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CBL Mariner 2.0 Security Update: azcopy / blobfuse2 / cert-manager / cf-cli (CVE-2024-24786)

The version of azcopy / blobfuse2 / cert-manager / cf-cli installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-24786 advisory. - The protojson.Unmarshal function can enter an infinite loop when...