393 matches found
CACredDecoder
C-Ark Credential Decoder Exploit tool for CVE-2021-31796 A Tool for decoding C-Ark Credential files By: Aaron Mizrachi - https://twitter.com/unmanarc/ Enrique Vaamonde - https://twitter.com/ejvm First release: 2/Sep/2019 Disclosure: 11/Oct/2021 References...
Astra Linux – Vulnerability in ARK
The libarchiveplugin.cpp file in the KDE archive prior to version 24.12.0 can extract to an absolute path from an archive...
CLEANSTART-2024-IG56715 In kerfuffle/jobs
Security vulnerability affects the ark package. In kerfuffle/jobs...
CLEANSTART-2024-HZ44036 In KDE Ark before 20
Security vulnerability affects the ark package. In KDE Ark before 20...
CVE-2026-8164
Uncontrolled Search Path Element vulnerability in ArkSigner Software and Hardware Industry and Trade Inc. ArkSigner Desktop Client allows Search Order Hijacking. This issue affects ArkSigner Desktop Client: from v2.2.16.10 through 17062026...
CVE-2026-8164
CVE-2026-8164: Uncontrolled Search Path Element affecting ArkSigner Desktop Client (ArkSigner Software and Hardware Industry and Trade Inc.). Affected versions: v2.2.16.10 through 17062026. Impact: high for confidentiality, integrity, and availability. Attack vector: LOCAL; prerequisites: LOW pri...
ch.artaios:openchemlib-vaadin (>=2.0.0, <=2.4.1), ch.martinelli.oss:vaadin-jooq (2.1.1) +471 more potentially affected by CVE-2026-41715 via io.projectreactor.netty:reactor-netty (>=1.1.0, <=1.1.31)
io.projectreactor.netty:reactor-netty MAVEN version =1.1.0, =2.0.0, =3.1.0.5, =3.3.0.0, =5.0.0, =5.0.0, =1.1.5, =2.0.0, =4.2.0, =4.2.0, =4.9.0-beta.1, =4.9.0-beta.1, =4.9.0-beta.1, =3.0.0, =3.0.1 and more Source cves: CVE-2026-41715 Source advisory: GHSA-PFC9-2CQG-9WQ6...
CVE-2011-0459
Cross-site scripting XSS vulnerability in Cyber-Ark Password Vault Web Access PVWA 5.0 and earlier, 5.5 through 5.5 patch 4, and 6.0 through 6.0 patch 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
lunarbase-pmm-math (>=0.1.0, <=0.2.6), semaphore-rs-ark-circom (>=0.3.0, <=0.5.1) +3 more potentially affected by unknown CVE via ruint (>=1.13.1, <=1.16.0)
ruint CARGO version =1.13.1, =0.1.0, =0.3.0, =0.3.0, =0.1.0, =0.1.0, =0.5.1 Source cves: unknown CVE Source advisory: GHSA-9FJQ-45QV-PCM7...
lunarbase-pmm-math (>=0.1.0, <=0.2.6), semaphore-rs-ark-circom (>=0.3.0, <=0.5.1) +3 more potentially affected by unknown CVE via ruint (>=1.13.1, <=1.16.0)
ruint CARGO version =1.13.1, =0.1.0, =0.3.0, =0.3.0, =0.1.0, =0.1.0, =0.5.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0137...
CVE-2025-13684
The ARK Related Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 2.19. This is due to missing or incorrect nonce validation on the arkrpoptionspage function. This makes it possible for unauthenticated attackers to modify the plugin's configuration settings via a...
CVE-2025-13684
The ARK Related Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 2.19. This is due to missing or incorrect nonce validation on the arkrpoptionspage function. This makes it possible for unauthenticated attackers to modify the plugin's configuration settings via a...
CVE-2025-13684 ARK Related Posts <= 2.19 - Cross-Site Request Forgery to Settings Update
The ARK Related Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 2.19. This is due to missing or incorrect nonce validation on the arkrpoptionspage function. This makes it possible for unauthenticated attackers to modify the plugin's configuration settings via a...
EUVD-2025-201393
The ARK Related Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 2.19. This is due to missing or incorrect nonce validation on the arkrpoptionspage function. This makes it possible for unauthenticated attackers to modify the plugin's configuration settings via a...
CVE-2025-13684
CVE-2025-13684 concerns the ARK Related Posts WordPress plugin (version
CVE-2025-13684 ARK Related Posts <= 2.19 - Cross-Site Request Forgery to Settings Update
The ARK Related Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 2.19. This is due to missing or incorrect nonce validation on the arkrpoptionspage function. This makes it possible for unauthenticated attackers to modify the plugin's configuration settings via a...
CVE-2025-13684: Cross-Site Request Forgery (CSRF)
The ARK Related Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 2.19. This is due to missing or incorrect nonce validation on the arkrpoptionspage function. This makes it possible for unauthenticated attackers to modify the plugin's configuration settings via a...
WordPress plugin ARK Related Posts: Cross-Site Request Forgery Vulnerability
...
PT-2025-49232
The ARK Related Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 2.19. This is due to missing or incorrect nonce validation on the ark rp options page function. This makes it possible for unauthenticated attackers to modify the plugin's configuration settings via ...
WordPress ARK Related Posts plugin <= 2.19 - Cross-Site Request Forgery to Settings Update vulnerability
Cross-Site Request Forgery to Settings Update vulnerability discovered by Muhammad Nur Ibnu Hubab Ibnu - Pondok Teknologi in WordPress Plugin ARK Related Posts versions = 2.19...