CVE-2025-24369

Anubis is a tool that allows administrators to protect bots against AI scrapers through bot-checking heuristics and a proof-of-work challenge to discourage scraping from multiple IP addresses. Anubis allows attackers to bypass the bot protection by requesting a challenge, formulates any nonce suc...

CVE-2025-24369 Anubis has a bot protection bypass when a sophisticated attacker asks to pass a challenge of difficulty 0

Anubis is a tool that allows administrators to protect bots against AI scrapers through bot-checking heuristics and a proof-of-work challenge to discourage scraping from multiple IP addresses. Anubis allows attackers to bypass the bot protection by requesting a challenge, formulates any nonce suc...

CVE-2025-24369

Anubis is a tool that allows administrators to protect bots against AI scrapers through bot-checking heuristics and a proof-of-work challenge to discourage scraping from multiple IP addresses. Anubis allows attackers to bypass the bot protection by requesting a challenge, formulates any nonce suc...

CVE-2025-23197

matrix-hookshot is a Matrix bot for connecting to external services like GitHub, GitLab, JIRA, and more. When Hookshot 6 version 6.0.1 or below, or Hookshot 5 version 5.4.1 or below, is configured with GitHub support, it is vulnerable to a Denial of Service DoS whereby it can crash on restart due...

PT-2025-5348

Name of the Vulnerable Software and Affected Versions Anubis versions prior to v1.11.0-37-gd98d70a Anubis affected versions not specified, but fixed by commit e09d0226a628f04b1d80fd83bee777894a45cd02 Description The issue allows attackers to bypass bot protection by requesting a challenge and...

Anubis 安全漏洞

Anubis is a tool by Xe Iaso Individual Developers. Anubis has a security vulnerability that stems from allowing administrators to protect bots from AI crawling tools by bot-checking heuristic algorithms and proof-of-work challenges to block crawling from multiple IP addresses...

CVE-2025-24369: Reliance on Untrusted Inputs in a Security Decision

Anubis is a tool that allows administrators to protect bots against AI scrapers through bot-checking heuristics and a proof-of-work challenge to discourage scraping from multiple IP addresses. Anubis allows attackers to bypass the bot protection by requesting a challenge, formulates any nonce suc...

Malicious code in gnosis-twitter-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fa831de5fb56848d866a78f8271a5eed9a6d13355f5f41d8986ea89e3a3c314 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-335 Malicious code in gnosis-twitter-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fa831de5fb56848d866a78f8271a5eed9a6d13355f5f41d8986ea89e3a3c314 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress plugin WPBot Pro Wordpress Chatbot 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2025-24024 Mjolnir v1.9.0 accepts commands from any room

Mjolnir is a moderation tool for Matrix. Mjolnir v1.9.0 responds to management commands from any room the bot is member of. This can allow users who aren't operators of the bot to use the bot's functions, including server administration components if enabled. Version 1.9.1 reverts the feature tha...

PT-2025-5265

Name of the Vulnerable Software and Affected Versions Mjolnir version 1.9.0 Description Mjolnir is a moderation tool for Matrix. It responds to management commands from any room the bot is a member of, potentially allowing users who are not operators to use the bot's functions, including server...

Malicious code in prem-bot-convo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cd47585859b799eb8fb019210456a4cfd1f1e439e305455338438c8e21be566 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-223 Malicious code in prem-bot-convo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cd47585859b799eb8fb019210456a4cfd1f1e439e305455338438c8e21be566 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-54142

Discourse AI is a Discourse plugin which provides a number of AI features. When sharing Discourse AI Bot conversations into posts, if the conversation had HTML entities those could leak into the Discourse application when a user visited a post with a onebox to said conversation. This issue has be...

CVE-2025-22542

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ofek Nakar Virtual Bot virtual-bot allows Blind SQL Injection.This issue affects Virtual Bot: from n/a through = 1.0.0...

CVE-2025-22542 WordPress Virtual Bot Plugin <= 1.0.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ofek Nakar Virtual Bot virtual-bot allows Blind SQL Injection.This issue affects Virtual Bot: from n/a through = 1.0.0...

CVE-2025-22542 WordPress Virtual Bot Plugin <= 1.0.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ofek Nakar Virtual Bot allows Blind SQL Injection.This issue affects Virtual Bot: from n/a through 1.0.0...

CVE-2025-22542

CVE-2025-22542 describes an SQL Injection in the WordPress plugin/feature named Virtual Bot . The entry notes an improper neutralization of input elements that can enable unauthenticated, blind SQL injection against the Virtual Bot component, affecting versions from initial n/a up through 1.0.0. ...

PT-2025-4533

Name of the Vulnerable Software and Affected Versions Ofek Nakar Virtual Bot versions prior to 1.0.0 Description The issue is related to the improper neutralization of special elements used in an SQL command, allowing for Blind SQL Injection. This means an attacker can execute SQL commands withou...