1267 matches found
WordPress plugin Coder for Elementor 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
CVE-2025-66147: Missing Authorization
Missing Authorization vulnerability in merkulove Coder for Elementor coder-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Coder for Elementor: from n/a through = 1.0.13...
PT-2025-51423
Name of the Vulnerable Software and Affected Versions Coder for Elementor versions through 1.0.13 Description An issue exists in Coder for Elementor that relates to incorrectly configured access control security levels, potentially allowing unauthorized access. The vulnerability involves a missin...
Coder Installed (Windows)
Binary data coderwininstalled.nbin...
Coder sensitive objects logged unsanitized vulnerability (CVE-2025-66411)
The Coder versions prior to 2.26.5, 2.27.7, and 2.28.4 are therefore vulnerable to a sensitive information disclosure via plaintext logging. Workspace Agent manifests containing sensitive values were logged in plaintext unsanitized. An attacker with limited local access to the Coder Workspace VM,...
WordPress Coder for Elementor plugin <= 1.0.13 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Coder for Elementor versions = 1.0.13...
GO-2025-4182 Coder logs sensitive objects unsanitized in github.com/coder/coder
Coder logs sensitive objects unsanitized in github.com/coder/coder...
EUVD-2025-201015
Coder allows organizations to provision remote development environments via Terraform. Prior to 2.26.5, 2.27.7, and 2.28.4, Workspace Agent manifests containing sensitive values were logged in plaintext unsanitized. An attacker with limited local access to the Coder Workspace VM, K8s Pod etc. or ...
CVE-2025-66411
Summary of CVE-2025-66411 (Coder) Coder prior to versions 2.26.5, 2.27.7, and 2.28.4 logs Workspace Agent manifests containing sensitive values in plaintext. This could allow an attacker with limited local access to a Coder Workspace (VM, Kubernetes Pod, etc.) or a connected logging system (e.g.,...
Coder 日志信息泄露漏洞
Coder is an application from Coder Inc. that can set up development environments in public or private cloud infrastructures. A log information disclosure vulnerability exists in Coder versions 2.26.5, 2.27.7, and prior to 2.28.4, which stems from workspace agent manifests logging sensitive values...
CVE-2025-66411: Insertion of Sensitive Information into Log File
Coder allows organizations to provision remote development environments via Terraform. Prior to 2.26.5, 2.27.7, and 2.28.4, Workspace Agent manifests containing sensitive values were logged in plaintext unsanitized. An attacker with limited local access to the Coder Workspace VM, K8s Pod etc. or ...
Malicious code in stringify-coder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10becae86ef9c656952f1684dea38b47c2242b0adafc4cbf72426b3e893a3751 The package stringify-coder was found to contain malicious code...
MAL-2025-191588 Malicious code in stringify-coder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10becae86ef9c656952f1684dea38b47c2242b0adafc4cbf72426b3e893a3751 The package stringify-coder was found to contain malicious code...
Malicious Package
Overview stringify-coder is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this package...
GO-2025-3991 Coder AgentAPI exposed user chat history via a DNS rebinding attack in github.com/coder/agentapi
Coder AgentAPI exposed user chat history via a DNS rebinding attack in github.com/coder/agentapi...
REx86: A Local Large Language Model for Assisting in X86 Assembly Reverse Engineering
Reverse engineering RE of x86 binaries is indispensable for malware and firmware analysis, but remains slow due to stripped metadata and adversarial obfuscation. Large Language Models LLMs offer potential for improving RE efficiency through automated comprehension and commenting, but cloud-hosted...
EUVD-2018-11564
Malware in sbrugna...
EUVD-2021-25590
Malware in sbrugna...