CVE-2025-59304

A directory traversal issue in Swetrix Web Analytics API 3.1.1 before 7d8b972 allows a remote attacker to achieve Remote Code Execution via a crafted HTTP request...

CVE-2025-59304

Summary: CVE-2025-59304 describes a directory traversal in Swetrix Web Analytics API 3.1.1 before 7d8b972 that enables a remote attacker to achieve Remote Code Execution via a crafted HTTP request. The issue stems from a path traversal vulnerability in the API, with an impact described as high ac...

CVE-2025-59304

A directory traversal issue in Swetrix Web Analytics API 3.1.1 before 7d8b972 allows a remote attacker to achieve Remote Code Execution via a crafted HTTP request...

Malicious code in @pc-analytics-filter/core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdfc2209384455df77ab889ef6aa71c136ff6c7c2f43bb529d93568e71917d2f Any computer that has this package installed or running should be considered...

Open Web Analytics Server is vulnerable to SQL Injection

Open Web Analytics OWA before 1.8.1 allows SQL injection...

GHSA-6W8R-XGQQ-QG6G Open Web Analytics Server is vulnerable to SQL Injection

Open Web Analytics OWA before 1.8.1 allows SQL injection...

SQL Injection

Overview open-web-analytics/open-web-analytics is an open source analytics framework. Affected versions of this package are vulnerable to SQL Injection via the query process. An attacker can access sensitive information from the database by injecting crafted SQL statements. Remediation Upgrade...

CVE-2025-59397

Open Web Analytics OWA before 1.8.1 allows owadb.php vvalue SQL injection...

CVE-2025-59397

Open Web Analytics OWA before 1.8.1 allows owadb.php vvalue SQL injection...

PT-2025-37722

Name of the Vulnerable Software and Affected Versions Open Web Analytics versions prior to 1.8.1 Description Open Web Analytics OWA before version 1.8.1 is susceptible to SQL injection. Recommendations Update to version 1.8.1 or later...

CVE-2025-59397

CVE-2025-59397 concerns Open Web Analytics (OWA) prior to 1.8.1. The vulnerability is a SQL injection in the owa_db.php component via a v[value] input, impacting potentially data confidentiality as per the CVSS metrics (Confidentiality Impact: Low; no other impacts). Affected product/version: Ope...

Cyber Threat Hunting: Non-Parametric Mining of Attack Patterns from Cyber Threat Intelligence for Precise Threats Attribution

With the ever-changing landscape of cyber threats, identifying their origin has become paramount, surpassing the simple task of attack classification. Cyber threat attribution gives security analysts the insights they need to device effective threat mitigation strategies. Such strategies empower...

CVE-2025-59397

Open Web Analytics OWA before 1.8.1 allows owadb.php vvalue SQL injection...

Open Web Analytics Server SQL注入漏洞

Open Web Analytics Server is Open Web Analytics open source alternative for commercial web analytics tools such as Google Analytics. A SQL injection vulnerability exists in versions of Open Web Analytics Server prior to 1.8.1 that stems from vulnerability to SQL injection attacks...

CVE-2025-59397

Open Web Analytics OWA before 1.8.1 allows owadb.php vvalue SQL injection...

CVE-2025-9635

The Analytics Reduce Bounce Rate plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3. This is due to missing or incorrect nonce validation on the unbounceoptions function. This makes it possible for unauthenticated attackers to modify Google...

security-analytics

This repository is a community-driven set of security analytics for auditing cloud usage and detecting threats to data & workloads in Google Cloud. It provides a list of sample security analytics for auditing cloud usage and detecting threats, which may assist detection engineers, threat hunters,...

threat-detection-as-code

This repository is a community-driven set of security analytics for auditing cloud usage and detecting threats to data & workloads in Google Cloud. It provides a list of sample security analytics for auditing cloud usage and for detecting threats to your data & workloads in Google Cloud. The...

CVE-2025-9635

The Analytics Reduce Bounce Rate plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3. This is due to missing or incorrect nonce validation on the unbounceoptions function. This makes it possible for unauthenticated attackers to modify Google...

CVE-2025-9635 Analytics Reduce Bounce Rate <= 2.3 - Cross-Site Request Forgery

The Analytics Reduce Bounce Rate plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3. This is due to missing or incorrect nonce validation on the unbounceoptions function. This makes it possible for unauthenticated attackers to modify Google...