38 matches found
EUVD-2024-52108
Malicious code in bioql PyPI...
MAL-2025-31625 Malicious code in raphael.core (npm)
The package raphael.core was found to contain malicious code...
Malicious code in raphael.core (npm)
The package raphael.core was found to contain malicious code...
LinkJoin security vulnerability
LinkJoin is a virtual course and meeting software by the individual developer Seth Raphael. A security vulnerability exists in LinkJoin version 882f196 that stems from improper handling of token ownership in the password reset feature...
CVE-2024-53776
Cross-Site Request Forgery CSRF vulnerability in raphaelheide Donate Me donate-me allows Stored XSS.This issue affects Donate Me: from n/a through = 1.2.5...
CVE-2024-53776
Cross-Site Request Forgery CSRF vulnerability in raphaelheide Donate Me donate-me allows Stored XSS.This issue affects Donate Me: from n/a through = 1.2.5...
CVE-2024-53776 WordPress Donate Me plugin <= 1.2.5 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Raphael Heide Donate Me allows Stored XSS.This issue affects Donate Me: from n/a through 1.2.5...
CVE-2024-53776
CVE-2024-53776 is a CSRF to Stored XSS vulnerability in the WordPress plugin Donate Me (versions <= 1.2.5). The issue arises from cross-site request forgery that can trigger stored XSS via Donate Me’s normal operations. Affected product: WordPress Donate Me plugin; affected versions:
raphael-levy.com Improper Access Control vulnerability OBB-3808856
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
AMD SMM Supervisor Vulnerability Security Notice
Bulletin ID: AMD-SB-7011 Potential Impact: Loss of confidentiality, integrity, and availability Severity: High Summary External researchers reported a potential vulnerability during SMM Supervisor initialization which may impact some AMD processors. On systems that do not have Supervisor Mode...
raphael-hotel.com Cross Site Scripting vulnerability OBB-3552759
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
MAL-2022-6946 Malicious code in visualization-raphael-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 880e10929215a420f57b8d378c3a98fdc1c514607a5c32cc7a19262ed887c6a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in visualization-raphael-chart (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 880e10929215a420f57b8d378c3a98fdc1c514607a5c32cc7a19262ed887c6a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
moodle.saint-raphael.be Cross Site Scripting vulnerability OBB-2122371
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
WordPress BBPress 2.5 Privilege Escalation
Exploit Title: Wordpress Plugin BBPress 2.5 - Unauthenticated Privilege Escalation Date: 2020-05-29 Exploit Author: Raphael Karger Software Link: https://codex.bbpress.org/releases/ Version: BBPress 2.5 CVE: CVE-2020-13693 import argparse import requests import bs4 import urllib3...
WordPress bbPress plugin <= 2.6.4 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by Raphael Karger in WordPress bbPress plugin versions = 2.6.4. Solution Update the WordPress bbPress plugin to the latest available version at least 2.6.5...
WordPress Plugin InfiniteWP Client 1.9.4.5 - Authentication Bypass
Exploit Title: Wordpress Plugin InfiniteWP Client 1.9.4.5 - Authentication Bypass Date: 2020-1-16 Exploit Author: Raphael Karger Vendor Homepage: https://infinitewp.com/ Version: InfiniteWP Client 1.9.4.5 !/usr/bin/python3 import requests import json import argparse import base64 import json impo...
Wordpress InfiniteWP Client Plugin 1.9.4.5 - Authentication Bypass Exploit
Exploit for php platform in category web applications Exploit Title: Wordpress Plugin InfiniteWP Client 1.9.4.5 - Authentication Bypass Exploit Author: Raphael Karger Vendor Homepage: https://infinitewp.com/ Version: InfiniteWP Client 1.9.4.5 !/usr/bin/python3 import requests import json import...
Wordpress Ultimate Addons for Beaver Builder 1.2.4.1 - Authentication Bypass Exploit
Exploit for php platform in category web applications Exploit Title: Wordpress Ultimate Addons for Beaver Builder 1.2.4.1 - Authentication Bypass Exploit Authors: Raphael Karger & Nathan Hrncirik Vendor Homepage: https://www.ultimatebeaver.com/ Version: Ultimate Addons for Beaver Builder | || |...
Cobalt Strike. Walkthrough for Red Teamers
What is Cobalt Strike? Raphael Mudge is the creator of Cobalt Strike CS, around 2010 he released a tool titled Armitage, which is described by wikipedia as a graphical cyber-attack management for the Metasploit Project, to put this more bluntly, Armitage is a gui that allows you to easily navigat...