Lucene search
+L

555 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/04/23 5:16 a.m.•8 views

Malicious code in gombot-crypto-jetpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba48695fbf778c02bb57cfbc2de9ca50fd3023213aeaa67d6620451bf15d9463 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2025/04/23 5:16 a.m.•7 views

MAL-2025-3287 Malicious code in gombot-crypto-jetpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba48695fbf778c02bb57cfbc2de9ca50fd3023213aeaa67d6620451bf15d9463 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2025/04/23 5:16 a.m.•4 views

Malware in gombot-crypto-jetpack

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/04/11 6:17 p.m.•40 views

CVE-2025-32494

Cross-Site Request Forgery CSRF vulnerability in bozdoz reCAPTCHA Jetpack recaptcha-jetpack allows Cross Site Request Forgery.This issue affects reCAPTCHA Jetpack: from n/a through = 0.2.2...

4.3CVSS7.2AI score0.00209EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/04/09 5:29 p.m.•26 views

WordPress reCAPTCHA Jetpack plugin <= 0.2.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nabil Irawan in WordPress Plugin reCAPTCHA Jetpack versions = 0.2.2...

4.3CVSS8AI score0.00209EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/04/09 5:15 p.m.•38 views

CVE-2025-32494

Cross-Site Request Forgery CSRF vulnerability in bozdoz reCAPTCHA Jetpack recaptcha-jetpack allows Cross Site Request Forgery.This issue affects reCAPTCHA Jetpack: from n/a through = 0.2.2...

4.3CVSS0.00209EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/09 4:09 p.m.•87 views

CVE-2025-32494

CVE-2025-32494 is described as a CSRF flaw in the WordPress reCAPTCHA Jetpack integration (listed as reCAPTCHA Jetpack) affecting versions up to 0.2.2. The connected document notes it can lead to Remote Code Execution via a CSRF path, with CVSS v3.1 base score 4.3 (Medium). The vulnerability appe...

4.3CVSS7.2AI score0.00209EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/09 4:09 p.m.•20 views

CVE-2025-32494 WordPress reCAPTCHA Jetpack plugin <= 0.2.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in bozdoz reCAPTCHA Jetpack recaptcha-jetpack allows Cross Site Request Forgery.This issue affects reCAPTCHA Jetpack: from n/a through = 0.2.2...

4.3CVSS8.5AI score0.00209EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/09 4:09 p.m.•48 views

CVE-2025-32494 WordPress reCAPTCHA Jetpack plugin <= 0.2.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in bozdoz reCAPTCHA Jetpack recaptcha-jetpack allows Cross Site Request Forgery.This issue affects reCAPTCHA Jetpack: from n/a through = 0.2.2...

4.3CVSS0.00209EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/09 12:00 a.m.•19 views

WordPress plugin reCAPTCHA Jetpack 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

4.3CVSS6.1AI score0.00209EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/09 12:00 a.m.•9 views

CVE-2025-32494: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in bozdoz reCAPTCHA Jetpack recaptcha-jetpack allows Cross Site Request Forgery.This issue affects reCAPTCHA Jetpack: from n/a through = 0.2.2...

4.3CVSS5.8AI score0.00209EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/06 5:09 p.m.•33 views

CVE-2025-32251

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in J. Tyler Wiest Jetpack Feedback Exporter jetpack-feedback-exporter allows Retrieve Embedded Sensitive Data.This issue affects Jetpack Feedback Exporter: from n/a through = 1.23...

5.3CVSS7.2AI score0.00545EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/04 4:15 p.m.•31 views

CVE-2025-32251

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in J. Tyler Wiest Jetpack Feedback Exporter jetpack-feedback-exporter allows Retrieve Embedded Sensitive Data.This issue affects Jetpack Feedback Exporter: from n/a through = 1.23...

5.3CVSS0.00545EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/04 3:59 p.m.•10 views

CVE-2025-32251 WordPress Jetpack Feedback Exporter <= 1.23 - Sensitive Data Exposure Vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in J. Tyler Wiest Jetpack Feedback Exporter allows Retrieve Embedded Sensitive Data. This issue affects Jetpack Feedback Exporter: from n/a through 1.23...

5.3CVSS7AI score0.00545EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/04 3:59 p.m.•41 views

CVE-2025-32251 WordPress Jetpack Feedback Exporter plugin <= 1.23 - Sensitive Data Exposure Vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in J. Tyler Wiest Jetpack Feedback Exporter jetpack-feedback-exporter allows Retrieve Embedded Sensitive Data.This issue affects Jetpack Feedback Exporter: from n/a through = 1.23...

5.3CVSS0.00545EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/04 3:59 p.m.•81 views

CVE-2025-32251

CVE-2025-32251 concerns the Jetpack Feedback Exporter WordPress plugin. The entry states an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability that could allow Retrieve Embedded Sensitive Data, affecting Jetpack Feedback Exporter versions up to 1.23. CVSS 3.1...

5.3CVSS7.2AI score0.00545EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/04 12:00 a.m.•26 views

PT-2025-15007 · WordPress · Jetpack Feedback Exporter

Name of the Vulnerable Software and Affected Versions: Jetpack Feedback Exporter versions 1.23 and earlier Description: The issue allows exposure of sensitive system information to an unauthorized control sphere, enabling the retrieval of embedded sensitive data. Recommendations: For Jetpack...

5.3CVSS6.1AI score0.00545EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/04/04 12:00 a.m.•19 views

WordPress plugin Jetpack Feedback Exporter 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS6.3AI score0.00545EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/04 12:00 a.m.•7 views

CVE-2025-32251: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in J. Tyler Wiest Jetpack Feedback Exporter jetpack-feedback-exporter allows Retrieve Embedded Sensitive Data.This issue affects Jetpack Feedback Exporter: from n/a through = 1.23...

5.3CVSS5.8AI score0.00545EPSS
SaveExploits0References1
Nvidia
Nvidia
•added 2025/02/25 12:00 a.m.•28 views

Security Bulletin: NVIDIA Jetson AGX Orin Series and IGX Orin - February 2025

NVIDIA has released a software update for NVIDIA® Jetson AGX Orin Series and IGX Orin. To protect your system, download and install the latest NVIDIA JetPack SDK from NVIDIA DevZone and the new IGX Orin update from IGX Download Center. Go to NVIDIA Product Security. Details This section provides ...

7.6CVSS6.9AI score0.00289EPSS
SaveExploits0Affected Software2
Rows per page
Query Builder