Exploit for CVE-2024-9821

CVE-2024-9821 Bot for Telegram on WooCommerce = 1.2.4 - Au...

WordPress Bot for Telegram on WooCommerce plugin <= 1.2.7 - Authenticated (Subscriber+) Telegram Bot Token Disclosure to Authentication Bypass vulnerability

Authenticated Subscriber+ Telegram Bot Token Disclosure to Authentication Bypass vulnerability discovered by István Márton in WordPress Plugin Bot for Telegram on WooCommerce versions = 1.2.7...

CVE-2024-9685 Notification for Telegram <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Send Telegram Test Message

The Notification for Telegram plugin for WordPress is vulnerable to unauthorized test message sending due to a missing capability check on the 'nftbtestaction' function in versions up to, and including, 3.3.1. This makes it possible for authenticated attackers, with subscriber-level access and...

CVE-2024-9685

The CVE-2024-9685 entry concerns the WordPress plugin Notification for Telegram. Technical details in connected sources show a missing capability check in the nftb_test_action function up to and including version 3.3.1, enabling authenticated users with subscriber-level access to send unauthorize...

CVE-2024-25702

creationtimestamp| type| source ---|---|--- 2024-10-04 21:03:26+00:00| seen| https://t.me/cvedetector/7011...

CVE-2024-9125

creationtimestamp| type| source ---|---|--- 2024-09-26 12:57:25+00:00| seen| https://t.me/cvedetector/6400...

Rage Stealer Rebranded as Angry Stealer, Now Uses Telegram Bot for Data Theft

Beware of "Angry Stealer," a new malware targeting your online accounts. This rebranded version of Rage Stealer steals…...

WordPress Telegram Bot & Channel plugin <= 3.8.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Telegram Bot & Channel versions = 3.8.2...

CVE-2024-39729

creationtimestamp| type| source ---|---|--- 2024-07-15 05:58:23+00:00| seen| https://t.me/cvedetector/837...

Malicious code in telegram_bot-types (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in telegram_bot-ruby (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-7039 Malicious code in telegram_bot-types (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-7038 Malicious code in telegram_bot-ruby (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in telegram-bot_ruby (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-7035 Malicious code in telegram-bot_ruby (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in telegram-bot_middleware (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in telegram-bot_api (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-7034 Malicious code in telegram-bot_middleware (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-7033 Malicious code in telegram-bot_api (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

New Rust-based Fickle Malware Uses PowerShell for UAC Bypass and Data Exfiltration

A new Rust-based information stealer malware called Fickle Stealer has been observed being delivered via multiple attack chains with the goal of harvesting sensitive information from compromised hosts. Fortinet FortiGuard Labs said it's aware of four different distribution methods -- namely VBA...