chainMaker 安全漏洞

chainMaker is a Go library in the Go open source. A security vulnerability exists in chainMaker versions prior to 2.4.0, which stems from logger.go mishandling concurrent writes to mappings, which can lead to read/write conflicts and crashes...

Malicious code in cln-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56b9cc716f2f19131b4daf97b6c72c4b58b5b71d337760dc41188971098e4fb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in consolidate-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cabd5f8487415db9bef4d60ff036c16f1390e7d129fa4fbd96045e096eb1e897 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2661 Malicious code in consolidate-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cabd5f8487415db9bef4d60ff036c16f1390e7d129fa4fbd96045e096eb1e897 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2658 Malicious code in cln-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56b9cc716f2f19131b4daf97b6c72c4b58b5b71d337760dc41188971098e4fb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-28866

Cross-Site Request Forgery CSRF vulnerability in smerriman Login Logger login-logger allows Cross Site Request Forgery.This issue affects Login Logger: from n/a through = 1.2.1...

Malicious code in paypal-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49c178990e4d2abbd4e7efb2ade6f3fe47a33939e54842b787848f1be8809ee8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2398 Malicious code in paypal-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49c178990e4d2abbd4e7efb2ade6f3fe47a33939e54842b787848f1be8809ee8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Login Logger plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Login Logger versions = 1.2.1...

CVE-2025-28866

Cross-Site Request Forgery CSRF vulnerability in smerriman Login Logger allows Cross Site Request Forgery. This issue affects Login Logger: from n/a through 1.2.1...

CVE-2025-28866

Cross-Site Request Forgery CSRF vulnerability in smerriman Login Logger login-logger allows Cross Site Request Forgery.This issue affects Login Logger: from n/a through = 1.2.1...

CVE-2025-28866 WordPress Login Logger plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in smerriman Login Logger login-logger allows Cross Site Request Forgery.This issue affects Login Logger: from n/a through = 1.2.1...

CVE-2025-28866

CSRF vulnerability CVE-2025-28866 affects WordPress Login Logger plugin versions up to and including 1.2.1. The issue allows Cross-Site Request Forgery, with an attacker potentially tricking an authenticated user to perform unintended actions. The CVSS details indicate network access, low attack ...

WordPress plugin Login Logger 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

The vulnerability of the Python JSON Logger library, a programming language, stems from the inclusion of functions from an unverified and uncontrolled area. This allows attackers to execute arbitrary code.

The vulnerability of the Python JSON Logger library is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by deploying a specially crafted package...

CVE-2025-27607

A flaw was found in the Python JSON Logger library python-json-logger. In affected versions, python-json-logger was vulnerable to remote code execution RCE due to a missing dependency. This issue occurred because msgspec-python313-pre was deleted by the owner, leaving the name open to being claim...

CVE-2025-27607

Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing dependency. This occurred because msgspec-python313-pre was deleted by the owner leaving the name open to being claimed by a third party...

UBUNTU-CVE-2025-27607

Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing dependency. This occurred because msgspec-python313-pre was deleted by the owner leaving the name open to being claimed by a third party...

backend-ai (=1.4.0), backend-ai-accelerator-cuda-open (>=24.9.5 <=26.4.4rc7) +38 more potentially affected by CVE-2025-27607 via python-json-logger (=3.2.1)

python-json-logger PYPI version =3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-json-logger and may be impacted: - backend-ai =1.4.0 - backend-ai-accelerator-cuda-open =24.9.5, =24.9.5, =24.9.5, =24.9.5, =25.13.0, =25.13.0, =25.13.0,...

CVE-2025-27607 Python JSON Logger has a Potential RCE via missing `msgspec-python313-pre` dependency

Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing dependency. This occurred because msgspec-python313-pre was deleted by the owner leaving the name open to being claimed by a third party...