52 matches found
WordPress plugin Nuts security vulnerabilities
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...
PT-2026-23305
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Nuts nuts allows PHP Local File Inclusion.This issue affects Nuts: from n/a through = 1.10...
WordPress Nuts theme <= 1.10 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Nuts versions = 1.10...
CVE-2025-65548
NUT-14 allows cashu tokens to be created with a preimage hash. However, nutshell cashubtc/nuts before 0.18.0 do not validate the size of preimage when the token is spent. The preimage is stored by the mint and attacker can exploit this vulnerability to fill the mint's db nd disk with arbitrary da...
CVE-2025-65548: Improper Validation of Specified Quantity in Input
NUT-14 allows cashu tokens to be created with a preimage hash. However, nutshell cashubtc/nuts before 0.18.0 do not validate the size of preimage when the token is spent. The preimage is stored by the mint and attacker can exploit this vulnerability to fill the mint's db nd disk with arbitrary da...
Cashu NUTs security vulnerabilities
Cashu NUTs is a Cashu protocol specification open-sourced by Cashu. A security vulnerability exists in versions of Cashu NUTs prior to 0.18.0, which stems from an unvalidated preimage size that could lead to an attacker populating a mint's database and disk...
Malicious code in musasik-nuts-bodot (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c199af124bc5e5df447292fba7f058c565fa6faec0a43ef61d56aefc612b28bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in musasik-nuts-buntalin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14dfae38fed28212f5d0804a78084f336437956b75e54c65d7c196eebfd4200d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in musasik-nuts-bu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0f4296e9616498b455cb66aea45e5d52328fd007d79a50acca77d9bde1f8916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-159664 Malicious code in mans-man-nuts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d38953e59a9ec064c451347b051da397f15cb06c01bbaf35d9252e5b58bbbfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-161028 Malicious code in musasik-nuts-buntali (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3098243ef698ab590a9d5fe063efa323d80d73856090722a7815827d851a8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in musasik-nuts-bunta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 766030883f9e656ea67ed5627734ba5c82a9c99bc7e4649cbed7977f34bc1e93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mans-mana-nuts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d262218f4b60d8f1cc3fabcc1ebaaf74069f9324d1edd56616f4cf58aab03958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mans-nufatimant-nuts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a61fe24fe7a82c9ffc6028dc001ad6d839eec51a80ab23d18c6ddfb88da0f2ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mans-man-nuts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d38953e59a9ec064c451347b051da397f15cb06c01bbaf35d9252e5b58bbbfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-164400 Malicious code in polymedarnan-nufatim-nuts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3425ed50ad60629b9d780c7552012275f2dee21bdfd75516e6da729a046873d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
mollysnuts.com Cross Site Scripting vulnerability OBB-3643216
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
SUSE: Security Advisory (SUSE-SU-2012:1077-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Nuts CMS Remote PHP Code Injection / Execution Exploit
Exploit for php platform in category web applications "cli" die$error0; if$argc "; echo"\nExample: php $argv0 localhost /"; die; ifisset$argv1 && isset$argv2 $host = $argv1; $path = $argv2; $pack = "GET $pathnuts/login.php?r= HTTP/1.0\r\n"; $pack.= "Host: $host\r\n"; $pack.= "Cmd: %s\r\n"; $pack....
Nuts CMS - PHP Remote Code Injection Execution
Nuts CMS - PHP Remote Code Injection Execution "cli" die$error0; if$argc "; echo"\nExample: php $argv0 localhost /"; die; ifisset$argv1 && isset$argv2 $host = $argv1; $path = $argv2; $pack = "GET $pathnuts/login.php?r= HTTP/1.0\r\n"; $pack.= "Host: $host\r\n"; $pack.= "Cmd: %s\r\n"; $pack.=...