CVE-2020-35139

An issue was discovered in OFPBundleCtrlMsg in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of service DoS infinite loop...

CVE-2020-35141

CVE-2020-35141 affects Faucet SDN Ryu 4.34. The vulnerability is in OFPQueueGetConfigReply (parser.py) and may allow remote attackers to trigger an infinite loop, causing a denial of service. Sources in the collection consistently describe this DoS condition without detailing a specific exploit o...

CVE-2020-35139

The CVE-2020-35139 entry relates to Faucet SDN Ryu 4.34, specifically the OFPBundleCtrlMsg in parser.py. The available connected documents describe a remote DoS (infinite loop) vulnerability in OFPBundleCtrlMsg, affecting Faucet SDN Ryu 4.34. Core details include the vulnerable component (OFPBund...

CVE-2020-35141

An issue was discovered in OFPQueueGetConfigReply in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of service DoS infinite loop...

CVE-2020-35141

An issue was discovered in OFPQueueGetConfigReply in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of service DoS infinite loop...

PT-2023-11791

Name of the Vulnerable Software and Affected Versions Faucet SDN Ryu version 4.34 Description An issue was discovered in OFPBundleCtrlMsg in parser.py, allowing remote attackers to cause a denial of service DoS through an infinite loop. Recommendations For Faucet SDN Ryu version 4.34, consider...

Malicious code in flow-faucet (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0cff9be7c9c3ff28671b9dcf41cf2da25e5f96e860a1c0a8e6d0be715487071b Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

MAL-2023-448 Malicious code in flow-faucet (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0cff9be7c9c3ff28671b9dcf41cf2da25e5f96e860a1c0a8e6d0be715487071b Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

WordPress Bitcoin / Altcoin Faucet Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2022-3025

The Bitcoin / Altcoin Faucet WordPress plugin through 1.6.0 does not have any CSRF check when saving its settings, allowing attacker to make a logged in admin change them via a CSRF attack. Furthermore, due to the lack of sanitisation and escaping, it could also lead to Stored Cross-Site Scriptin...

CVE-2022-3025

The Bitcoin / Altcoin Faucet WordPress plugin through 1.6.0 does not have any CSRF check when saving its settings, allowing attacker to make a logged in admin change them via a CSRF attack. Furthermore, due to the lack of sanitisation and escaping, it could also lead to Stored Cross-Site Scriptin...

CVE-2022-3025

CVE-2022-3025 affects the Bitcoin / Altcoin Faucet WordPress plugin up to version 1.6.0. The issue arises from saving settings without CSRF checks and insufficient sanitisation/escaping, enabling a logged-in attacker to change settings via CSRF and potentially trigger Stored XSS. Public reference...

CVE-2022-3025 Bitcoin / Altcoin Faucet <= 1.6.0 - Settings Update to Stored XSS via CSRF

The Bitcoin / Altcoin Faucet WordPress plugin through 1.6.0 does not have any CSRF check when saving its settings, allowing attacker to make a logged in admin change them via a CSRF attack. Furthermore, due to the lack of sanitisation and escaping, it could also lead to Stored Cross-Site Scriptin...

WordPress plugin Bitcoin / Altcoin Faucet 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2022-20036 · WordPress · Bitcoin / Altcoin Faucet Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Bitcoin / Altcoin Faucet WordPress plugin versions prior to 1.6.1 Description: The issue concerns a lack of CSRF check when saving settings, allowing an attacker to make a logged-in admin change them via a CSRF attack. Additionally, due to th...

Bitcoin / Altcoin Faucet <= 1.6.0 - Settings Update to Stored XSS via CSRF

The plugin does not have any CSRF check when saving its settings, allowing attacker to make a logged in admin change them via a CSRF attack. Furthermore, due to the lack of sanitisation and escaping, it could also lead to Stored Cross-Site Scripting issues PoC Make a logged in admin open a page...

Bitcoin / Altcoin Faucet <= 1.6.0 - Settings Update to Stored XSS via CSRF

The plugin does not have any CSRF check when saving its settings, allowing attacker to make a logged in admin change them via a CSRF attack. Furthermore, due to the lack of sanitisation and escaping, it could also lead to Stored Cross-Site Scripting issues Make a logged in admin open a page...

WordPress Bitcoin / Altcoin Faucet plugin <= 1.6.0 - Settings Update to Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability

Settings Update to Stored Cross-Site Scripting XSS via Cross-Site Request Forgery CSRF vulnerability discovered by Lana Codes in WordPress Bitcoin / Altcoin Faucet plugin versions = 1.6.0. Solution Deactivate and delete. This plugin has been closed as of August 29, 2022 and is not available for...

Malicious Package

Overview eth-faucet is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious code in eth-faucet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d45d0fcc70a2f4b7ac570e7c8b43ed635a5573e134e575405ecc70d94c7588f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...