394 matches found
CVE-2024-9821 Bot for Telegram on WooCommerce <= 1.2.7 - Authenticated (Subscriber+) Telegram Bot Token Disclosure to Authentication Bypass
The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to sensitive information disclosure due to missing authorization checks on the 'stmwpcftogetsettings' AJAX action in all versions up to, and including, 1.2.7. This makes it possible for authenticated attackers, with...
PT-2024-39866 · WordPress · The Bot For Telegram On Woocommerce
Name of the Vulnerable Software and Affected Versions: The Bot for Telegram on WooCommerce plugin for WordPress versions up to, and including, 1.2.4 Description: The issue is related to sensitive information disclosure due to missing authorization checks on the 'stm wpcfto get settings' AJAX...
WordPress plugin Bot for Telegram on WooCommerce 信息泄露漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information...
Exploit for CVE-2024-9821
CVE-2024-9821 Bot for Telegram on WooCommerce = 1.2.4 - Au...
WordPress Bot for Telegram on WooCommerce plugin <= 1.2.7 - Authenticated (Subscriber+) Telegram Bot Token Disclosure to Authentication Bypass vulnerability
Authenticated Subscriber+ Telegram Bot Token Disclosure to Authentication Bypass vulnerability discovered by István Márton in WordPress Plugin Bot for Telegram on WooCommerce versions = 1.2.7...
CVE-2024-9685
The CVE-2024-9685 entry concerns the WordPress plugin Notification for Telegram. Technical details in connected sources show a missing capability check in the nftb_test_action function up to and including version 3.3.1, enabling authenticated users with subscriber-level access to send unauthorize...
CVE-2024-9685 Notification for Telegram <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Send Telegram Test Message
The Notification for Telegram plugin for WordPress is vulnerable to unauthorized test message sending due to a missing capability check on the 'nftbtestaction' function in versions up to, and including, 3.3.1. This makes it possible for authenticated attackers, with subscriber-level access and...
CVE-2024-25702
creationtimestamp| type| source ---|---|--- 2024-10-04 21:03:26+00:00| seen| https://t.me/cvedetector/7011...
CVE-2024-9125
creationtimestamp| type| source ---|---|--- 2024-09-26 12:57:25+00:00| seen| https://t.me/cvedetector/6400...
Rage Stealer Rebranded as Angry Stealer, Now Uses Telegram Bot for Data Theft
Beware of "Angry Stealer," a new malware targeting your online accounts. This rebranded version of Rage Stealer steals…...
WordPress Telegram Bot & Channel plugin <= 3.8.2 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Telegram Bot & Channel versions = 3.8.2...
CVE-2024-39729
creationtimestamp| type| source ---|---|--- 2024-07-15 05:58:23+00:00| seen| https://t.me/cvedetector/837...
Malicious code in telegram_bot-ruby (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in telegram_bot-types (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-7039 Malicious code in telegram_bot-types (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-7038 Malicious code in telegram_bot-ruby (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-7035 Malicious code in telegram-bot_ruby (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in telegram-bot_ruby (RubyGems)
--- -= Per source details. Do not edit below this line.=-...