EUVD-2022-37142

Malicious code in bioql PyPI...

EUVD-2022-51885

Malicious code in bioql PyPI...

CVE-2022-4550

The User Activity WordPress plugin through 1.0.1 checks headers such as the X-Forwarded-For to retrieve the IP address of the request, which could lead to IP spoofing...

CVE-2022-34126

The Activity plugin before 3.1.1 for GLPI allows reading local files via directory traversal in the front/cra.send.php file parameter...

CVE-2022-34126

The Activity plugin before 3.1.1 for GLPI allows reading local files via directory traversal in the front/cra.send.php file parameter...

CVE-2022-34126

The Activity plugin before 3.1.1 for GLPI allows reading local files via directory traversal in the front/cra.send.php file parameter...

CVE-2022-34126

The vulnerability CVE-2022-34126 affects the GLPI Activity plugin prior to 3.1.1. Root cause: directory traversal in the front/cra.send.php parameter allows reading local files. Impact: potential exposure of sensitive information due to unauthorized local file access. Affected component: GLPI Act...

PT-2023-13338 · Glpi · Glpi Activity Plugin

Name of the Vulnerable Software and Affected Versions: GLPI Activity plugin versions prior to 3.1.1 Description: The issue allows reading local files via directory traversal in the "front/cra.send.php" file parameter. This can potentially lead to unauthorized access to sensitive information...

GLPI Activity v3.1.0 - Authenticated Local File Inclusion on Activity plugin Vulnerability

Exploit Title: GLPI Activity v3.1.0 - Authenticated Local File Inclusion on Activity plugin Application: GLPI Activity 3.1.0 Author: Nuri Çilengir Vendor Homepage: https://glpi-project.org/ Software Link: https://github.com/InfotelGLPI/activity Advisory:...

CVE-2022-4550

CVE-2022-4550 concerns the WordPress plugin “User Activity” up to version 1.0.1. The vulnerability arises because the plugin checks HTTP headers such as X-Forwarded-For to obtain the request IP address, which can allow IP spoofing. The documented impact (per NVD) indicates a high severity (CVSS v...

WordPress Wbcom Designs – Check-ins for BuddyPress Activity plugin <= 1.9.3 - Arbitrary Plugin Installation, Activation and Deactivation vulnerability

Arbitrary Plugin Installation, Activation and Deactivation vulnerability was discovered by Mary JJ Jay in WordPress Wbcom Designs – Check-ins for BuddyPress Activity plugin versions = 1.9.3. Solution Update the WordPress Wbcom Designs – Check-ins for BuddyPress Activity plugin to the latest...