225 matches found
CVE-2026-24332
Discord through 2026-01-16 allows gathering information about whether a user's client state is Invisible and not actually offline because the response to a WebSocket API request includes the user in the presences array with "status": "offline", whereas offline users are omitted from the presences...
CVE-2026-24332
Discord through 2026-01-16 allows gathering information about whether a user's client state is Invisible and not actually offline because the response to a WebSocket API request includes the user in the presences array with "status": "offline", whereas offline users are omitted from the presences...
PT-2026-3920
Name of the Vulnerable Software and Affected Versions Discord versions through 2026-01-16 Description The software allows gathering information about whether a user’s client state is Invisible and not actually offline. The response to a WebSocket API request includes the user in the presences arr...
CVE-2018-21012
The cf7-invisible-recaptcha plugin before 1.3.2 for WordPress has XSS...
GHSA-X44P-GVRJ-PJ2R Amazon S3 Encryption Client for Java has a Key Commitment Issue
Summary S3 Encryption Client for Java is an open-source client-side encryption library used to facilitate writing and reading encrypted records to S3. When the encrypted data key EDK is stored in an "Instruction File" instead of S3's metadata record, the EDK is exposed to an "Invisible Salamander...
Amazon S3 Encryption Client for .NET has a Key Commitment Issue
S3 Encryption Client for .NET S3EC is an open-source client-side encryption library used to facilitate writing and reading encrypted records to S3. When the encrypted data key EDK is stored in an "Instruction File" instead of S3's metadata record, the EDK is exposed to an "Invisible Salamanders"...
AWS SDK for Ruby's S3 Encryption Client has a Key Commitment Issue
Summary S3 Encryption Client for Ruby is an open-source client-side encryption library used to facilitate writing and reading encrypted records to S3. When the encrypted data key EDK is stored in an "Instruction File" instead of S3's metadata record, the EDK is exposed to an "Invisible Salamander...
Time Will Tell: Large-Scale De-Anonymization of Hidden I2P Services Via Live Behavior Alignment (Extended Version)
I2P Invisible Internet Project is a popular anonymous communication network. While existing de-anonymization methods for I2P focus on identifying potential traffic patterns of target hidden services among extensive network traffic, they often fail to scale effectively across the large and diverse...
EUVD-2025-91045
Malicious code in invisiblehippopotamusz3n npm...
EUVD-2025-81491
Malicious code in invisiblepony0xrequest npm...
Malicious code in invisible_pony_0xrequest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710288f46f89219312a2cd0385f4f090d8b11ebf0329e910ed5789b997c9f500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-81494
Malicious code in invisiblearmadillodumbs npm...
EUVD-2025-63439
Malicious code in invisibleguppyrequirement npm...
EUVD-2025-63442
Malicious code in invisiblecrawdadz3n npm...
EUVD-2025-63440
Malicious code in invisibledragonflyz3n npm...
EUVD-2025-63443
Malicious code in invisiblechickadeez3n npm...
EUVD-2025-53671
Malicious code in invisible-amethyst-newt npm...
EUVD-2025-59116
Malicious code in invisibleelkz3n npm...