WordPress plugin WP Calais Auto Tagger 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site...

CVE-2025-32563: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in dangrossman WP Calais Auto Tagger calais-auto-tagger allows Cross Site Request Forgery.This issue affects WP Calais Auto Tagger: from n/a through = 2.0...

CVE-2024-13101

The WP MediaTagger WordPress plugin through 4.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2024-13112

The WP MediaTagger WordPress plugin through 4.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

PT-2025-2000 · WordPress · Wp Mediatagger

Name of the Vulnerable Software and Affected Versions: WP MediaTagger WordPress plugin versions 4.1.1 and earlier Description: The issue concerns the WP MediaTagger WordPress plugin, which does not validate and escape some of its shortcode attributes before outputting them back in a page or post...

The vulnerability of the nltk.download() function in the Natural Language Toolkit (NLTK) library, which is used for symbolic and statistical processing of natural language, allows a hacker to execute arbitrary code.

The vulnerability of the nltk.download function in the Natural Language Toolkit NLTK library, which is used for symbolic and statistical processing of natural language, relates to the recovery of unreliable data in memory during the processing of the averagedperceptrontagger and punkt packages...

SUSE CVE-2024-39705

NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...

ntlk unsafe deserialization vulnerability

NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...

PYSEC-2024-167

NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...

DEBIAN-CVE-2024-39705

NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...

PYSEC-2024-167

NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...

UBUNTU-CVE-2024-39705

NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...

Remote code execution vulnerability in NLTK

The current and earlier versions of NLTK are vulnerable to a rem...

PT-2024-6156

Name of the Vulnerable Software and Affected Versions NLTK versions 3.8.1 and earlier Description The issue is related to the nltk.download function in the NLTK library, which can lead to remote code execution when untrusted packages containing pickled Python code are downloaded. This particularl...

GHSA-RQJH-JP2R-59CJ NLTK Vulnerable to REDoS

NLTK is vulnerable to REDoS in some RegexpTaggers used in the functions getpostagger and maltregextagger...

[SECURITY] Fedora 17 Update: juk-4.10.4-1.fc17

Juk is a jukebox, tagger and music collection manager...

Fedora Update for juk FEDORA-2013-10130

Check for the Version of juk OpenVAS Vulnerability Test Fedora Update for juk FEDORA-2013-10130 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Hanso Tagger v 1.4.0 DLL Hijacking Exploit (dwmapi.dll)

Exploit for windows platform in category local exploits ======================================================= Hanso Tagger v 1.4.0 DLL Hijacking Exploit dwmapi.dll ======================================================= || || | || o,7 || . o7 || 4||| ow, : / /...

MP3 Tagger 1.29 Proof Of Concept

!/usr/bin/perl Mp3 Tagger 1.29 m3u File Local Crash PoC by: SkuLL-HacKeR Tested on: windows XP SP3 my $boom = "A" x 1526 my $file = "b0m.m3u"; openmy $FILE, "$file" or die "Cannot open $file: $!"; print $FILE $header.$crash; close$FILE; print "Done \n"; Windows Live: rendi più semplice per i tuoi...

Mp3 Tagger 1.29 (m3u File) Local Crash PoC

Exploit for unknown platform in category dos / poc ========================================== Mp3 Tagger 1.29 m3u File Local Crash PoC ========================================== !/usr/bin/perl Mp3 Tagger 1.29 m3u File Local Crash PoC by: SkuLL-HacKeR Tested on: windows XP SP3 my $boom = "A" x 152...