Typecho-Multiple-Vulnerabilities

Typecho 複数の脆弱性 このリポジトリには以下の脆弱性のエクスプロイトが含まれています: CVE-2024-35538: Typecho v1.3.0 にはクライアントIPスプーフィングの脆弱性が存在し、悪意のある攻撃者がHTTPリクエストの "X-Forwarded-For" または "Client-Ip" ヘッダーの値として任意のIPを指定することで、自身のIPアドレスを偽装することができます。 CVE-2024-35539: Typecho v1.3.0...

CVE-2024-35539

Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting function. This vulnerability allows attackers to post several comments before the spam protection checks if the comments are posted too frequently...

CVE-2024-35539

Typecho version 1.3.0 (and earlier) is susceptible to a race condition vulnerability within its post commenting function. This flaw allows an attacker to post multiple comments rapidly, bypassing the intended spam protection checks . A proof-of-concept exploit is publicly available. As a temporar...

CVE-2024-35539

Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting function. This vulnerability allows attackers to post several comments before the spam protection checks if the comments are posted too frequently...

CVE-2024-35539

Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting function. This vulnerability allows attackers to post several comments before the spam protection checks if the comments are posted too frequently...

CVE-2024-35539

Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting function. This vulnerability allows attackers to post several comments before the spam protection checks if the comments are posted too frequently...

WordPress < 5.5.2 - XML-RPC Privilege Escalation

Description The release notes state: "Thanks to Justin Tran who reported an issue surrounding privilege escalation in XML-RPC. He also found and disclosed an issue around privilege escalation around post commenting via XML-RPC."...