CVE-2024-34712

Oceanic is a NodeJS library for interfacing with Discord. Prior to version 1.10.4, input to functions such as "Client.rest.channels.removeBan" is not url-encoded, resulting in specially crafted input such as "../../../channels/id" being normalized into the url "/api/v10/channels/id", and deleting...

PT-2024-26126 · Oceanic · Oceanic

Name of the Vulnerable Software and Affected Versions: Oceanic versions prior to 1.10.4 Description: The issue arises from the lack of url-encoding for input to certain functions, such as Client.rest.channels.removeBan. This allows specially crafted input, like ../../../channels/id, to be...

PT-2022-13025

Name of the Vulnerable Software and Affected Versions Ad Invalid Click Protector AICP WordPress plugin versions prior to 1.2.7 Description The issue concerns a lack of CSRF check in the deletion of banned users, potentially allowing attackers to manipulate a logged-in admin into removing arbitrar...