CVE-2025-46245

CVE-2025-46245 corresponds to a CSRF vulnerability in CreativeMindsSolutions CM Ad Changer (plugin for WordPress) affecting versions n/a through 2.0.5. The issue, as documented, leads to cross-site requests being forged without proper authorization. The connected patch stack entry recommends upgr...

CVE-2025-46245 WordPress CM Ad Changer plugin <= 2.0.5 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in CreativeMindsSolutions CM Ad Changer cm-ad-changer allows Cross Site Request Forgery.This issue affects CM Ad Changer: from n/a through = 2.0.5...

PT-2025-17510 · Unknown · Cm Ad Changer

Name of the Vulnerable Software and Affected Versions: CM Ad Changer versions n/a through 2.0.5 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For versions n/a through 2.0.5, update to a version later than 2.0.5...

WordPress plugin CM Ad Changer 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

Google Blocked 5.1B Harmful Ads and Suspended 39.2M Advertiser Accounts in 2024

Google on Wednesday revealed that it suspended over 39.2 million advertiser accounts in 2024, with a majority of them identified and blocked by its systems before it could serve harmful ads to users. In all, the tech giant said it stopped 5.1 billion bad ads, restricted 9.1 billion ads, and block...

Enable Azure AD Joined Device Management Functional Limitations

After configuring "Enable Azure AD Joined Device Management" stale machine objects are not automatically removed from AAD. - Made a custom aad role with the following permissions: microsoft.directory/devices/standard/read microsoft.directory/devices/delete - Assigned this role to the spn we use...

Elastic Kibana 资源管理错误漏洞

Elastic Kibana is an available data visualization dashboard software from Elastic, Inc. A resource management error vulnerability exists in Elastic Kibana versions 7.17.0 through 7.17.22 and 8.0.0 through 8.15.0, which stems from a flaw in the handling of ad-hoc requests to the Observability API...

Metasploit Wrap-Up 04/04/2025

New RCEs Metasploit added four new modules this week, including three that leverage vulnerabilities to obtain remote code execution RCE. Among these three, two leverage deserialization, showing that the exploit primitive is still going strong. The Tomcat vulnerability in particular CVE-2025-24813...

Malicious code in vistar-ad-clientxxxxx (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2913 Malicious code in vistar-ad-clientxxxxx (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in vistar-ad-clientxxx (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2912 Malicious code in vistar-ad-clientxxx (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in vistar-ad-clienttestadv67 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2911 Malicious code in vistar-ad-clienttestadv67 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in vistar-ad-client (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2910 Malicious code in vistar-ad-client (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in vistar-ad-clienttestadv3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 998a79c7a6246c56acd40382f70e1cfab273a5002ff94a5242bb0bb12b8dc962 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vistar-ad-clienttestadv4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6138f0fcd3c594b1a6089746986d8ca3b4b090a0cd791af795a4fbacdf44cb58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2717 Malicious code in vistar-ad-clienttestadv4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6138f0fcd3c594b1a6089746986d8ca3b4b090a0cd791af795a4fbacdf44cb58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2715 Malicious code in vistar-ad-clienttestadv2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95bc6733cdd6d9c862e3945c502aafccfc3b7c989211134540005795789d82be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...