Oracle Analytics 安全漏洞

Oracle Analytics is an enterprise analytics solution from Oracle Corporation USA. A security vulnerability exists in Oracle Analytics Desktop prior to version 8.1.0 for Oracle Analytics. An attacker exploiting this vulnerability could cause Oracle Analytics Desktop to be taken over...

PT-2025-4254 · Oracle · Oracle Analytics Desktop

Name of the Vulnerable Software and Affected Versions: Oracle Analytics Desktop versions prior to 8.1.0 Description: The issue is related to a vulnerability in the Oracle Analytics Desktop product, specifically in the Install component. This vulnerability can be easily exploited by a low-privileg...

Malicious code in wc-skroutz-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 438709bf1de713b9fab756841aa4cba87bbfc22133ff796cb5ee46dcc8776d44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-259 Malicious code in wc-skroutz-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 438709bf1de713b9fab756841aa4cba87bbfc22133ff796cb5ee46dcc8776d44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Hitachi Ops Center Analyzer software for data analysis and the Hitachi Infrastructure Analytics Advisor software for data processing systems lies in the lack of authentication for critical functions. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Hitachi Ops Center Analyzer software for data analysis and the Hitachi Infrastructure Analytics Advisor software for data processing infrastructure lies in the lack of authentication for critical functions. Exploiting this vulnerability could allow an attacker operating...

CVE-2025-23848

Cross-Site Request Forgery CSRF vulnerability in dpowney Hotspots Analytics hotspots allows Stored XSS.This issue affects Hotspots Analytics: from n/a through = 4.0.12...

CVE-2025-23743

Cross-Site Request Forgery CSRF vulnerability in MartijnScheijbeler Social Analytics social-analytics allows Stored XSS.This issue affects Social Analytics: from n/a through = 0.2...

CVE-2025-23483

Cross-Site Request Forgery CSRF vulnerability in hoyce Universal Analytics Injector universal-analytics-injector allows Stored XSS.This issue affects Universal Analytics Injector: from n/a through = 1.0.3...

CVE-2025-23848

CVE-2025-23848 affects Hotspots Analytics (Daniel Powney) on WordPress. The issue is a CSRF that can lead to Stored XSS, affecting Hotspots Analytics versions n/a–4.0.12. Red Hat’s advisory and Patchstack-linked references corroborate CSRF with potential stored XSS; the documents do not provide e...

CVE-2025-23743

CVE-2025-23743 refers to a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Social Analytics (Martijn Scheybeler) that enables Stored XSS. The CVE description and the Red Hat entry both confirm the issue and its association with Social Analytics; affected version scope is S...

CVE-2025-23743 WordPress Social Analytics plugin <= 0.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in MartijnScheijbeler Social Analytics social-analytics allows Stored XSS.This issue affects Social Analytics: from n/a through = 0.2...

CVE-2025-23483

CVE-2025-23483 — The connected Red Hat/ENISA records confirm a Cross-Site Request Forgery (CSRF) vulnerability in Niklas Olsson’s Universal Analytics Injector plugin that enables Stored XSS. Affected: Universal Analytics Injector versions from 0? through 1.0.3 (per description: “from n/a through ...

CVE-2025-23483 WordPress Universal Analytics Injector plugin <= 1.0.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Niklas Olsson Universal Analytics Injector allows Stored XSS.This issue affects Universal Analytics Injector: from n/a through 1.0.3...

CVE-2025-23483 WordPress Universal Analytics Injector plugin <= 1.0.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in hoyce Universal Analytics Injector universal-analytics-injector allows Stored XSS.This issue affects Universal Analytics Injector: from n/a through = 1.0.3...

WordPress Hotspots Analytics plugin <= 4.0.12 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin Hotspots Analytics versions = 4.0.12...

WordPress Social Analytics plugin <= 0.2 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin Social Analytics versions = 0.2...

WordPress Universal Analytics Injector plugin <= 1.0.3 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin Universal Analytics Injector versions = 1.0.3...

WordPress plugin Hotspots Analytics 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress plugin Universal Analytics Injector 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress plugin Social Analytics 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...