Linux Distros Unpatched Vulnerability : CVE-2018-5179

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A service worker can send the activate event on itself periodically which allows it to run perpetually, allowing it to monitor activity by users. Affects all...

GHSA-432R-9455-7F9X

creationtimestamp| type| source ---|---|--- 2025-07-01 19:10:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114779554157879189...

GHSA-XG8H-J46F-W952

creationtimestamp| type| source ---|---|--- 2025-07-01 19:09:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20075 2025-07-01 19:11:55+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114779561289242286...

GHSA-6R2X-8PQ8-9489

creationtimestamp| type| source ---|---|--- 2025-07-01 03:54:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114775953190071346...

GHSA-7F8R-222P-6F5G

creationtimestamp| type| source ---|---|--- 2025-06-13 20:35:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18339 2025-06-13 21:00:48+00:00| published-proof-of-concept| Telegram/YLjaHgOWqHyGE2pMNrZj7KRcmqTuBmFaJ1673d7IeXnQg 2025-06-13 21:01:34+00:00| seen|...

WordPress History Log by click5 Cross-Site Scripting Vulnerability

WordPress History Log by click5 is a plugin for tracking user activity and logging changes to your website. A cross-site scripting vulnerability exists in WordPress History Log by click5. The vulnerability stems from improper input neutralization and can be exploited by an attacker to execute...

GHSA-PRWH-7838-XF82

creationtimestamp| type| source ---|---|--- 2025-06-12 15:33:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18174 2025-06-13 16:12:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114676933739618253...

CVE-2024-37929

Missing Authorization vulnerability in solwin User Activity Log Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Activity Log Pro: from n/a through 2.3.4...

CVE-2023-37966

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Solwin Infotech User Activity Log user-activity-log allows SQL Injection.This issue affects User Activity Log: from n/a through 1.6.2...

CVE-2023-5167

The User Activity Log Pro WordPress plugin before 2.3.4 does not properly escape recorded User-Agents in the user activity logs dashboard, which may allow visitors to conduct Stored Cross-Site Scripting attacks...

CVE-2023-5133

This user-activity-log-pro WordPress plugin before 2.3.4 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic...

CVE-2023-3435

The User Activity Log WordPress plugin before 1.6.5 does not correctly sanitise and escape several parameters before using it in a SQL statement as part of its exportation feature, allowing unauthenticated attackers to conduct SQL injection attacks...

CVE-2022-4550

The User Activity WordPress plugin through 1.0.1 checks headers such as the X-Forwarded-For to retrieve the IP address of the request, which could lead to IP spoofing...

CVE-2022-24782

Discourse is an open source discussion platform. Versions 2.8.2 and prior in the stable branch, 2.9.0.beta3 and prior in the beta branch, and 2.9.0.beta3 and prior in the tests-passed branch are vulnerable to a data leak. Users can request an export of their own activity. Sometimes, due to catego...

GHSA-P7RR-28XF-3M5W

creationtimestamp| type| source ---|---|--- 2025-05-21 18:17:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114547193543047342...

WordPress User Activity Tracking and Log plugin < 4.1.4 - IP Spoofing vulnerability

IP Spoofing vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin User Activity Tracking and Log versions 4.1.4...

GHSA-C7VQ-M7F8-RX37

creationtimestamp| type| source ---|---|--- 2025-05-16 14:39:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16691 2025-05-16 15:17:25+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114518172966589726...

CVE-2024-0970

This User Activity Tracking and Log WordPress plugin before 4.1.4 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value...

CVE-2024-0970

This User Activity Tracking and Log WordPress plugin before 4.1.4 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value...

CVE-2024-0970 User Activity Tracking and Log < 4.1.4 - IP Spoofing

This User Activity Tracking and Log WordPress plugin before 4.1.4 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value...