3243 matches found
PT-2025-5687 · Gitlab · Gitlab Ce/Ee
Name of the Vulnerable Software and Affected Versions: GitLab EE versions 16.0 through 17.0.6 GitLab EE versions 17.1 through 17.1.4 GitLab EE versions 17.2 through 17.2.2 Description: An issue was discovered in GitLab EE which allowed cross project access for Security policy bot. Recommendations...
WordPress Telegram Bot & Channel plugin <= 3.8.2 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Telegram Bot & Channel versions = 3.8.2...
CVE-2024-39729
creationtimestamp| type| source ---|---|--- 2024-07-15 05:58:23+00:00| seen| https://t.me/cvedetector/837...
NetScaler AppFirewall: Configuration, CEF logging, Signatures
Introduction This article provides a list of resources on how to Configure, investigate, troubleshoot, and prevent the most common issues with NetScaler AppFirewall. Overview of the Issue NetScaler web application firewall WAF provides comprehensive protection for web applications from various...
Spyware Users Exposed in Major Data Breach
Plus: The Heritage Foundation gets hacked over Project 2025, a car dealership software provider seems to have paid $25 million to a ransomware gang, and authorities disrupt a Russian bot farm...
CVE-2024-39905
Red is a fully modular Discord bot. Due to a bug in Red's Core API, 3rd-party cogs using the @commands.canmanagechannel command permission check without additional permission controls may authorize a user to run a command even when that user doesn't have permissions to manage a channel. None of t...
CVE-2024-39905 Red-DiscordBot vulnerable to Incorrect Authorization in commands API
Red is a fully modular Discord bot. Due to a bug in Red's Core API, 3rd-party cogs using the @commands.canmanagechannel command permission check without additional permission controls may authorize a user to run a command even when that user doesn't have permissions to manage a channel. None of t...
CVE-2024-39905
The CVE-2024-39905 issue affects Red-DiscordBot caused by a bug in Red’s Core API: 3rd-party cogs using the can_manage_channel permission check may allow a user to run a command without channel management rights. Core commands/cogs are not affected. The vulnerability was patched in version 3.5.10...
CVE-2024-39905: Incorrect Authorization
Red is a fully modular Discord bot. Due to a bug in Red's Core API, 3rd-party cogs using the @commands.canmanagechannel command permission check without additional permission controls may authorize a user to run a command even when that user doesn't have permissions to manage a channel. None of t...
Red Discord Bot Security Vulnerability
Red Discord Bot is a modular bot written in Python by an individual developer. The bot software can be configured to perform different functions based on different modules. A security vulnerability exists in Red Discord Bot versions prior to 3.5.10, which stems from an error in the core API that...
Malicious code in telegram_bot-types (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in telegram_bot-ruby (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-7039 Malicious code in telegram_bot-types (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-7038 Malicious code in telegram_bot-ruby (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in telegram-meetup_bot (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in telegram-bot_ruby (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-7035 Malicious code in telegram-bot_ruby (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in telegram-bot_api (RubyGems)
--- -= Per source details. Do not edit below this line.=-...