CVE-2024-13112

The WP MediaTagger WordPress plugin through 4.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

PT-2025-2000 · WordPress · Wp Mediatagger

Name of the Vulnerable Software and Affected Versions: WP MediaTagger WordPress plugin versions 4.1.1 and earlier Description: The issue concerns the WP MediaTagger WordPress plugin, which does not validate and escape some of its shortcode attributes before outputting them back in a page or post...

The vulnerability of the nltk.download() function in the Natural Language Toolkit (NLTK) library, which is used for symbolic and statistical processing of natural language, allows a hacker to execute arbitrary code.

The vulnerability of the nltk.download function in the Natural Language Toolkit NLTK library, which is used for symbolic and statistical processing of natural language, relates to the recovery of unreliable data in memory during the processing of the averagedperceptrontagger and punkt packages...

SUSE CVE-2024-39705

NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...

ntlk unsafe deserialization vulnerability

NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...

PYSEC-2024-167

NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...

DEBIAN-CVE-2024-39705

NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...

PYSEC-2024-167

NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...

UBUNTU-CVE-2024-39705

NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...

Remote code execution vulnerability in NLTK

The current and earlier versions of NLTK are vulnerable to a rem...

PT-2024-6156 · Nltk +2 · Nltk +2

Name of the Vulnerable Software and Affected Versions: NLTK versions 3.8.1 and earlier Description: The issue is related to the nltk.download function in the NLTK library, which can lead to remote code execution when untrusted packages containing pickled Python code are downloaded. This...

aqtinstall (=0.9.8), brevettiai (>=0.5.4 <=0.8.5) +19 more potentially affected by CVE-2022-44900 via py7zr (>=0.10.2 <=0.18.5)

py7zr PYPI version =0.10.2, =0.5.4, =0.1.0, =1.1.1.dev1, =1.2.0, =1.1.6, =0.1.0, =1.0.0, =1.1.1, =0.2.6, =2.0.0, =0.2.8, =4.6.0.dev1 and more Source cves: CVE-2022-44900 Source advisory: OSV:GHSA-M8XW-9X5X-6VH3...

aqtinstall (=0.9.8), brevettiai (>=0.5.4 <=0.8.5) +19 more potentially affected by CVE-2022-44900 via py7zr (>=0.10.2 <=0.18.5)

py7zr PYPI version =0.10.2, =0.5.4, =0.1.0, =1.1.1.dev1, =1.2.0, =1.1.6, =0.1.0, =1.0.0, =1.1.1, =0.2.6, =2.0.0, =0.2.8, =4.6.0.dev1 and more Source cves: CVE-2022-44900 Source advisory: OSV:PYSEC-2022-42998...

ai.bareun.tagger:bareun (>=1.0.0 <=1.4.1), ai.djl.serving:serving (=0.19.0) +3739 more potentially affected by CVE-2022-3171 via com.google.protobuf:protobuf-java (>=3.21.0-rc-1 <=3.21.6)

com.google.protobuf:protobuf-java MAVEN version =3.21.0-rc-1, =1.0.0, =3.42.0.2-1-3.4, =0.0.1, =22.3.2, =22.3.2, =22.3.2, =22.3.2, =1.0.0-beta01, =1.0.0-beta01, =1.0.0-beta06 - at.ac.ait.lablink.clients:universalapiclient =0.1.0 and more Source cves: CVE-2022-3171 Source advisory:...

GHSA-RQJH-JP2R-59CJ NLTK Vulnerable to REDoS

NLTK is vulnerable to REDoS in some RegexpTaggers used in the functions getpostagger and maltregextagger...

[SECURITY] Fedora 17 Update: juk-4.10.4-1.fc17

Juk is a jukebox, tagger and music collection manager...

Fedora Update for juk FEDORA-2013-10130

Check for the Version of juk OpenVAS Vulnerability Test Fedora Update for juk FEDORA-2013-10130 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Hanso Tagger v 1.4.0 DLL Hijacking Exploit (dwmapi.dll)

Exploit for windows platform in category local exploits ======================================================= Hanso Tagger v 1.4.0 DLL Hijacking Exploit dwmapi.dll ======================================================= || || | || o,7 || . o7 || 4||| ow, : / /...

MP3 Tagger 1.29 Proof Of Concept

!/usr/bin/perl Mp3 Tagger 1.29 m3u File Local Crash PoC by: SkuLL-HacKeR Tested on: windows XP SP3 my $boom = "A" x 1526 my $file = "b0m.m3u"; openmy $FILE, "$file" or die "Cannot open $file: $!"; print $FILE $header.$crash; close$FILE; print "Done \n"; Windows Live: rendi più semplice per i tuoi...

Mp3 Tagger 1.29 (m3u File) Local Crash PoC

Exploit for unknown platform in category dos / poc ========================================== Mp3 Tagger 1.29 m3u File Local Crash PoC ========================================== !/usr/bin/perl Mp3 Tagger 1.29 m3u File Local Crash PoC by: SkuLL-HacKeR Tested on: windows XP SP3 my $boom = "A" x 152...