CACredDecoder

C-Ark 凭证解码器 针对 CVE-2021-31796 的漏洞利用工具 用于解码 C-Ark 凭证文件的工具 作者：Aaron Mizrachi - https://twitter.com/unmanarc/ Enrique Vaamonde - https://twitter.com/ejvm 首次发布：2019年9月2日 公开披露：2021年10月11日 参考资料 https://packetstormsecurity.com/files/164023/CyberArk-Credential-File-Insufficient-Effective-Key-Space.html...

Astra Linux – Vulnerability in ARK

The libarchiveplugin.cpp file in the KDE archive prior to version 24.12.0 can extract to an absolute path from an archive...

CVE-2026-8164

Uncontrolled Search Path Element vulnerability in ArkSigner Software and Hardware Industry and Trade Inc. ArkSigner Desktop Client allows Search Order Hijacking. This issue affects ArkSigner Desktop Client: from v2.2.16.10 through 17062026...

CVE-2026-8164

CVE-2026-8164: Uncontrolled Search Path Element affecting ArkSigner Desktop Client (ArkSigner Software and Hardware Industry and Trade Inc.). Affected versions: v2.2.16.10 through 17062026. Impact: high for confidentiality, integrity, and availability. Attack vector: LOCAL; prerequisites: LOW pri...

CVE-2011-0459

Cross-site scripting XSS vulnerability in Cyber-Ark Password Vault Web Access PVWA 5.0 and earlier, 5.5 through 5.5 patch 4, and 6.0 through 6.0 patch 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2025-13684

The ARK Related Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 2.19. This is due to missing or incorrect nonce validation on the arkrpoptionspage function. This makes it possible for unauthenticated attackers to modify the plugin's configuration settings via a...

CVE-2025-13684

The ARK Related Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 2.19. This is due to missing or incorrect nonce validation on the arkrpoptionspage function. This makes it possible for unauthenticated attackers to modify the plugin's configuration settings via a...

CVE-2025-13684

CVE-2025-13684 concerns the ARK Related Posts WordPress plugin (version

CVE-2025-13684 ARK Related Posts <= 2.19 - Cross-Site Request Forgery to Settings Update

The ARK Related Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 2.19. This is due to missing or incorrect nonce validation on the arkrpoptionspage function. This makes it possible for unauthenticated attackers to modify the plugin's configuration settings via a...

CVE-2025-13684 ARK Related Posts <= 2.19 - Cross-Site Request Forgery to Settings Update

The ARK Related Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 2.19. This is due to missing or incorrect nonce validation on the arkrpoptionspage function. This makes it possible for unauthenticated attackers to modify the plugin's configuration settings via a...

EUVD-2025-201393

The ARK Related Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 2.19. This is due to missing or incorrect nonce validation on the arkrpoptionspage function. This makes it possible for unauthenticated attackers to modify the plugin's configuration settings via a...

CVE-2025-13684: Cross-Site Request Forgery (CSRF)

The ARK Related Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 2.19. This is due to missing or incorrect nonce validation on the arkrpoptionspage function. This makes it possible for unauthenticated attackers to modify the plugin's configuration settings via a...

WordPress plugin ARK Related Posts 跨站请求伪造漏洞

...

PT-2025-49232

The ARK Related Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 2.19. This is due to missing or incorrect nonce validation on the ark rp options page function. This makes it possible for unauthenticated attackers to modify the plugin's configuration settings via ...

WordPress ARK Related Posts plugin <= 2.19 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by Muhammad Nur Ibnu Hubab Ibnu - Pondok Teknologi in WordPress Plugin ARK Related Posts versions = 2.19...

Malicious Package

Overview ark-experience is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-48613 Malicious code in ark-experience (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3390fa937ce615a9cf2e911edd90f9f2e03376c02c4a2f1642d3c9a9fdd4f291 Any computer that has this package installed or running should be considered...

Malicious code in ark-experience (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3390fa937ce615a9cf2e911edd90f9f2e03376c02c4a2f1642d3c9a9fdd4f291 Any computer that has this package installed or running should be considered...

Malicious code in @aml-ark/ark-experience-byteplus (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b9a81d78ce8d8f1da9a31e80166834c3098ef03d5ef0e58e1a03d1d93418314 Any computer that has this package installed or running should be considered...

CVE-2025-11023

CVE-2025-11023 affects ArkSigner AcBakImzala before v5.1.4. Root cause: improper control of the filename used in PHP include/require, enabling a PHP Local File Inclusion via a Remote File Inclusion vulnerability pattern. Documented impact in sources: high confidentiality, integrity, and availabil...