Typecho-Multiple-Vulnerabilities

Typecho ثغرات متعددة يحتوي هذا المستودع على استغلالات الثغرات التالية: CVE-2024-35538: في Typecho الإصدار 1.3.0 توجد ثغرة تزوير عنوان IP العميل، والتي تسمح للجهات الخبيثة بتزوير عناوين IP الخاصة بهم عن طريق تحديد عنوان IP عشوائي كقيمة لرؤوس "X-Forwarded-For" أو "Client-Ip" أثناء تنفيذ طلبات HTTP...

CVE-2024-35539

Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting function. This vulnerability allows attackers to post several comments before the spam protection checks if the comments are posted too frequently...

CVE-2024-35539

Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting function. This vulnerability allows attackers to post several comments before the spam protection checks if the comments are posted too frequently...

CVE-2024-35539

Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting function. This vulnerability allows attackers to post several comments before the spam protection checks if the comments are posted too frequently...

CVE-2024-35539

Typecho version 1.3.0 (and earlier) is susceptible to a race condition vulnerability within its post commenting function. This flaw allows an attacker to post multiple comments rapidly, bypassing the intended spam protection checks . A proof-of-concept exploit is publicly available. As a temporar...

CVE-2024-35539

Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting function. This vulnerability allows attackers to post several comments before the spam protection checks if the comments are posted too frequently...

WordPress < 5.5.2 - XML-RPC Privilege Escalation

Description The release notes state: "Thanks to Justin Tran who reported an issue surrounding privilege escalation in XML-RPC. He also found and disclosed an issue around privilege escalation around post commenting via XML-RPC."...