Lucene search
K

991 matches found

Vulnrichment
Vulnrichment
added 2025/12/16 8:12 a.m.1 views

CVE-2025-66147 WordPress Coder for Elementor plugin <= 1.0.13 - Broken Access Control vulnerability

Missing Authorization vulnerability in merkulove Coder for Elementor coder-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Coder for Elementor: from n/a through = 1.0.13...

5.4CVSS6.6AI score0.00034EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/16 8:12 a.m.23 views

CVE-2025-66147 WordPress Coder for Elementor plugin <= 1.0.13 - Broken Access Control vulnerability

Missing Authorization vulnerability in merkulove Coder for Elementor coder-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Coder for Elementor: from n/a through = 1.0.13...

5.4CVSS0.00034EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.2 views

PT-2025-51423

Name of the Vulnerable Software and Affected Versions Coder for Elementor versions through 1.0.13 Description An issue exists in Coder for Elementor that relates to incorrectly configured access control security levels, potentially allowing unauthorized access. The vulnerability involves a missin...

5.4CVSS6.5AI score0.00034EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.1 views

WordPress plugin Coder for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.4CVSS6.5AI score0.00034EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/12/11 12:0 a.m.1 views

Coder Installed (Windows)

Binary data coderwininstalled.nbin...

7AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/12/11 12:0 a.m.1 views

Coder sensitive objects logged unsanitized vulnerability (CVE-2025-66411)

The Coder versions prior to 2.26.5, 2.27.7, and 2.28.4 are therefore vulnerable to a sensitive information disclosure via plaintext logging. Workspace Agent manifests containing sensitive values were logged in plaintext unsanitized. An attacker with limited local access to the Coder Workspace VM,...

7.8CVSS5.4AI score0.00039EPSS
Exploits1References2
Patchstack
Patchstack
added 2025/12/10 1:24 p.m.3 views

WordPress Coder for Elementor plugin <= 1.0.13 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Coder for Elementor versions = 1.0.13...

5.4CVSS7AI score0.00034EPSS
Exploits0Affected Software1
OSV
OSV
added 2025/12/08 9:31 p.m.2 views

GO-2025-4182 Coder logs sensitive objects unsanitized in github.com/coder/coder

Coder logs sensitive objects unsanitized in github.com/coder/coder...

7.8CVSS6.8AI score0.00039EPSS
Exploits1References9
CVE
CVE
added 2025/12/03 7:25 p.m.14 views

CVE-2025-66411

Summary of CVE-2025-66411 (Coder) Coder prior to versions 2.26.5, 2.27.7, and 2.28.4 logs Workspace Agent manifests containing sensitive values in plaintext. This could allow an attacker with limited local access to a Coder Workspace (VM, Kubernetes Pod, etc.) or a connected logging system (e.g.,...

7.8CVSS6.1AI score0.00039EPSS
Exploits1References5Affected Software1
EUVD
EUVD
added 2025/12/03 7:25 p.m.5 views

EUVD-2025-201015

Coder allows organizations to provision remote development environments via Terraform. Prior to 2.26.5, 2.27.7, and 2.28.4, Workspace Agent manifests containing sensitive values were logged in plaintext unsanitized. An attacker with limited local access to the Coder Workspace VM, K8s Pod etc. or ...

7.8CVSS5.9AI score0.00039EPSS
Exploits1References9
CNNVD
CNNVD
added 2025/12/03 12:0 a.m.1 views

Coder 日志信息泄露漏洞

Coder is an application from Coder Inc. that can set up development environments in public or private cloud infrastructures. A log information disclosure vulnerability exists in Coder versions 2.26.5, 2.27.7, and prior to 2.28.4, which stems from workspace agent manifests logging sensitive values...

7.8CVSS5.8AI score0.00039EPSS
Exploits1References6
OSV
OSV
added 2025/12/01 1:26 p.m.1 views

MAL-2025-191588 Malicious code in stringify-coder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10becae86ef9c656952f1684dea38b47c2242b0adafc4cbf72426b3e893a3751 The package stringify-coder was found to contain malicious code...

6.8AI score
Exploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/01 1:26 p.m.4 views

Malicious code in stringify-coder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10becae86ef9c656952f1684dea38b47c2242b0adafc4cbf72426b3e893a3751 The package stringify-coder was found to contain malicious code...

7AI score
Exploits0References3
Snyk
Snyk
added 2025/11/30 1:14 p.m.2 views

Malicious Package

Overview stringify-coder is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package...

9.8CVSS7.2AI score
Exploits0References3
OSV
OSV
added 2025/10/23 4:25 p.m.2 views

GO-2025-3991 Coder AgentAPI exposed user chat history via a DNS rebinding attack in github.com/coder/agentapi

Coder AgentAPI exposed user chat history via a DNS rebinding attack in github.com/coder/agentapi...

6.5CVSS6.9AI score0.00074EPSS
Exploits1References7
Packet Storm News
Packet Storm News
added 2025/10/23 12:0 a.m.23 views

REx86: A Local Large Language Model for Assisting in X86 Assembly Reverse Engineering

Reverse engineering RE of x86 binaries is indispensable for malware and firmware analysis, but remains slow due to stripped metadata and adversarial obfuscation. Large Language Models LLMs offer potential for improving RE efficiency through automated comprehension and commenting, but cloud-hosted...

6.8AI score
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-18327

Malware in sbrugna...

5.5CVSS6.9AI score0.00252EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-25590

Malware in sbrugna...

4.4CVSS5.3AI score0.00024EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-11560

Malware in sbrugna...

5.5CVSS5.3AI score0.00286EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-11565

Malware in sbrugna...

5.5CVSS5.4AI score0.00165EPSS
Exploits1References2
Rows per page
Query Builder