Malicious code in istio-feeder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7455087a858d4ab6e5e5e42c14c3fb5b55222d653b9b971d12b0fe56a4cc7a5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5924 Malicious code in istio-feeder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7455087a858d4ab6e5e5e42c14c3fb5b55222d653b9b971d12b0fe56a4cc7a5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Missing access control in NFTFloorOracle::removeFeeder

Lines of code Vulnerability details Proof of Concept THe removeFeeder method is lacking onlyRoleDEFAULTADMINROLE modifier, even though the NatSpec states “Allows owner to remove feeder”. Due to this, now everyone can remove a feeder anytime. Different types of attack can be executed, one of which...

NFTFloorOracle trust feeder without any fallback

Lines of code Vulnerability details Impact In the current design, NFTFloorOracle take the median of valid feeder price as the oracle price. This design can be dangerous if more than half as few as 2 of the feeders decided to collude and publish malicious prices. If they set the price higher, they...

NFTFloorOracle's asset and feeder structures can be corrupted

Lines of code Vulnerability details NFTFloorOracle's addAsset and addFeeder truncate the assets and feeders arrays indices to 255, both using uint8 index field in the corresponding structures and performing uint8assets.length - 1 truncation on the new element addition. 2^8 - 1 looks to be too tig...

THE FUNCTION LOGIC OF _REMOVEFEEDER() IS FLAWED

Lines of code Vulnerability details Impact When the admin calls removeFeeder, it will internally call removeFeeder that will have the feeder removed from feeders before getting its UPDATEROLE revoked. In the midst of doing this, the protocol forgets to update index of feederPositionMap belonging ...

CVE-2022-38059

Cross-Site Request Forgery CSRF vulnerability in Alexey Trofimov's Access Code Feeder plugin = 1.0.3 at WordPress...

CVE-2022-38059

Cross-Site Request Forgery CSRF vulnerability in Alexey Trofimov's Access Code Feeder plugin = 1.0.3 at WordPress...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Alexey Trofimov's Access Code Feeder plugin = 1.0.3 at WordPress...

CVE-2022-38059 WordPress Access Code Feeder plugin <= 1.0.3 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Alexey Trofimov's Access Code Feeder plugin = 1.0.3 at WordPress...

CVE-2022-38059 WordPress Access Code Feeder plugin <= 1.0.3 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Alexey Trofimov's Access Code Feeder plugin = 1.0.3 at WordPress...

CVE-2022-38059

CVE-2022-38059 : A CSRF vulnerability affects WordPress plugins, specifically Access Code Feeder

WordPress plugin Alexey Trofimov s Access Code Feeder 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Alexey...

PT-2022-24178 · Unknown · Access Code Feeder Plugin

Name of the Vulnerable Software and Affected Versions: Access Code Feeder plugin versions 1.0.3 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a w...

WordPress Access Code Feeder plugin <= 1.0.3 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered by ptsfence Patchstack Alliance in WordPress Access Code Feeder plugin versions = 1.0.3. Solution Deactivate and delete. This plugin has been closed as of August 24, 2022 and is not available for download. This closure is temporary, pending...

Access Code Feeder <= 1.0.3 - CSRF

The plugin does not have CSRF check in some places, which could allow attackers to make logged in users perform unwanted actions...

WordPress Cross-site Request Forgery Vulnerability (CNVD-2021-61434)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. A cross-site request forgery vulnerability exists in versions of the WordPress plugin Youtube Feeder prior to 2.0.1, which stems from a cross-site request forgery vulnerability in the...

CVE-2021-34633

The Youtube Feeder WordPress plugin is vulnerable to Cross-Site Request Forgery via the printAdminPage function found in the /youtube-feeder.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.1...

CVE-2021-34633

The Youtube Feeder WordPress plugin is vulnerable to Cross-Site Request Forgery via the printAdminPage function found in the /youtube-feeder.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.1...

Cross site request forgery (csrf)

The Youtube Feeder WordPress plugin is vulnerable to Cross-Site Request Forgery via the printAdminPage function found in the /youtube-feeder.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.1...