1080 matches found
MAL-2025-40798 Malicious code in zen-0jp1y-0avqf-throne-project (npm)
The package zen-0jp1y-0avqf-throne-project was found to contain malicious code...
MAL-2025-40799 Malicious code in zen-1i7nw-ivlqb-glow-project (npm)
The package zen-1i7nw-ivlqb-glow-project was found to contain malicious code...
MAL-2025-40588 Malicious code in yonder-lw6pd-3rlyj-zen-project (npm)
The package yonder-lw6pd-3rlyj-zen-project was found to contain malicious code...
Physical Attacks Leading to Bypass of ASP Boot ROM Secure Boot
Summary Researchers shared a report titled “Code Execution on Zen 4 PSP using Voltage Fault Injection.” In the paper, the researchers reported their findings on Voltage Fault Injection VFI attacks targeting AMD “Zen 4” CPUs, specifically the Ryzen™ 8600G model. The researchers claim these types o...
CVE-2012-10039
ZEN Load Balancer versions 2.0 and 3.0-rc1 contain a command injection vulnerability in content2-2.cgi. The filelog parameter is passed directly into a backtick-delimited exec call without sanitation. An authenticated attacker can inject arbitrary shell commands, resulting in remote code executio...
CVE-2012-10039 ZEN Load Balancer Filelog Command Execution
ZEN Load Balancer versions 2.0 and 3.0-rc1 contain a command injection vulnerability in content2-2.cgi. The filelog parameter is passed directly into a backtick-delimited exec call without sanitation. An authenticated attacker can inject arbitrary shell commands, resulting in remote code executio...
CVE-2012-10039
CVE-2012-10039 affects ZEN Load Balancer versions 2.0 and 3.0-rc1. A command injection exists in content2-2.cgi where the filelog parameter is passed directly to a backtick-delimited exec() call without sanitization, allowing an authenticated attacker to execute arbitrary shell commands and achie...
CVE-2012-10039 ZEN Load Balancer Filelog Command Execution
ZEN Load Balancer versions 2.0 and 3.0-rc1 contain a command injection vulnerability in content2-2.cgi. The filelog parameter is passed directly into a backtick-delimited exec call without sanitation. An authenticated attacker can inject arbitrary shell commands, resulting in remote code executio...
PT-2025-32552 · Unknown +1 · Zen Load Balancer +2
Name of the Vulnerable Software and Affected Versions: ZEN Load Balancer versions 2.0 ZEN Load Balancer version 3.0-rc1 Description: ZEN Load Balancer versions 2.0 and 3.0-rc1 contain a command injection issue in the content2-2.cgi file. The filelog parameter is passed directly to an exec call...
Zevenet Zen Load Balancer 安全漏洞
Zevenet Zen Load Balancer is an application delivery controller from Zevenet, Spain. A security vulnerability exists in Zevenet Zen Load Balancer version 2.0 and 3.0-rc1, which stems from an unvalidated filelog parameter being passed directly to the exec function, which could lead to remote code...
Linux Distros Unpatched Vulnerability : CVE-2023-20593
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Zen 2 CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information. CVE-2023-20593 Note...
Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20520)
The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20520 advisory. - perf: Fix perfeventvalidatesize lockdep splat Mark Rutland Orabug: 36261485 CVE-2023-6931 - perf: Fix perfeventvalidatesize Peter Zijlstra Orabu...
CVE-2025-6055
The Zen Sticky Social plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.3. This is due to missing or incorrect nonce validation on the 'zen-social-sticky/zen-sticky-social.php' page. This makes it possible for unauthenticated attackers to...
TencentOS Server 2: linux-firmware (TSSA-2023:0274)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0274 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...
CVE-2025-6055
The Zen Sticky Social plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.3. This is due to missing or incorrect nonce validation on the 'zen-social-sticky/zen-sticky-social.php' page. This makes it possible for unauthenticated attackers to...
CVE-2025-6055 Zen Sticky Social <= 0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The Zen Sticky Social plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.3. This is due to missing or incorrect nonce validation on the 'zen-social-sticky/zen-sticky-social.php' page. This makes it possible for unauthenticated attackers to...
CVE-2025-6055
CVE-2025-6055 affects the Zen Sticky Social WordPress plugin. Public docs state a Cross-Site Request Forgery flaw in versions up to 0.3 caused by missing or incorrect nonce validation on zen-social-sticky/zen-sticky-social.php. This enables unauthenticated attackers to update settings and inject ...
WordPress Zen Sticky Social plugin <= 0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability
Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin Zen Sticky Social versions = 0.3...
WordPress plugin Zen Sticky Social 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
PT-2025-25477 · WordPress · Zen Sticky Social
Name of the Vulnerable Software and Affected Versions: Zen Sticky Social plugin for WordPress versions up to, and including, 0.3 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'zen-social-sticky/zen-sticky-social.php' page. This...