228 matches found
CVE-2020-17519
CVE-2020-17519 CVE-2020-17519 Cheetah language version, supports batch scanning. Copy ip.txt to /script/漏洞探测/Apache/ folder, open Wker main program...
cheetah
English description | 中文说明 0x00 cheetah Cheetah is a dictionary-based brute force password webshell tool, running as fast as a cheetah hunt for prey. Cheetah's working principle is that it can submit a large number of detection passwords based on different web services at once, blasting efficienc...
CVE-2026-15823
The Builderall Cheetah For Wp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disable function in versions up to, and including, 3.0.2. The wpajaxbacheetahdisable AJAX handler is registered without any capability or nonce...
CVE-2026-15823 Builderall for WordPress <= 3.0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Modification via 'ba_cheetah_data[post_id]' Parameter
The Builderall Cheetah For Wp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disable function in versions up to, and including, 3.0.2. The wpajaxbacheetahdisable AJAX handler is registered without any capability or nonce...
EUVD-2026-75236
The Builderall Cheetah For Wp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disable function in versions up to, and including, 3.0.2. The wpajaxbacheetahdisable AJAX handler is registered without any capability or nonce...
CVE-2026-15823: Missing Authorization
The Builderall Cheetah For Wp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disable function in versions up to, and including, 3.0.2. The wpajaxbacheetahdisable AJAX handler is registered without any capability or nonce...
PT-2026-89265
Name of the Vulnerable Software and Affected Versions Builderall Cheetah For Wp versions prior to 3.0.3 Description Unauthorized modification of data is possible due to a missing capability check in the disable function. The wp ajax ba cheetah disable AJAX handler is registered without capability...
PYSEC-2026-794 Cobbler is vulnerable to code injection
templateapi.py in Cobbler before 2.0.7, as used in Red Hat Network Satellite Server and other products, does not disable the ability of the Cheetah template engine to execute Python statements contained in templates, which allows remote authenticated administrators to execute arbitrary code via a...
CVE-2026-22390
Improper Control of Generation of Code 'Code Injection' vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Code Injection.This issue affects Builderall Builder for WordPress: from n/a through = 3.0.1...
CVE-2026-22390: Improper Control of Generation of Code
Improper Control of Generation of Code 'Code Injection' vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Code Injection.This issue affects Builderall Builder for WordPress: from n/a through = 3.0.1...
CVE-2005-1632
Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/...
Malicious code in interior_cheetah_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f4a0da19a02ce09191d24fc0f6c82a3e21eb0dc7a4d2ec0172ee3d0dcac20e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in early_cheetah_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8312ccd88140f4df3c550d05a635504bdd7245cad8ee52a74e30773e270a605 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in bored_cheetah_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d214af96ab428c3a76669e0004c438c1755a0158601f91e5493e2b441478812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-98062
Malicious code in inappropriatecheetahz3n npm...
EUVD-2025-102092
Malicious code in spottycheetahz3n npm...
EUVD-2025-97541
Malicious code in joyouscheetahz3n npm...
MAL-2025-130313 Malicious code in spotty_cheetah_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17a14d4a1e4bc38e13bd3b13759457796cb9a5cf897866d2030f09f94915bf14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-125216 Malicious code in bored_cheetah_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d214af96ab428c3a76669e0004c438c1755a0158601f91e5493e2b441478812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...