Lucene search
K

22 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-1176

Malware in sbrugna...

7.5CVSS7.6AI score0.0082EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-6116

Malware in sbrugna...

6.1CVSS6.5AI score0.00356EPSS
Exploits1References4
Snyk
Snyk
added 2025/09/08 2:26 p.m.1 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package version contains malicious code that monitors network traffic when run in a browser and targets crypto transactions. The injected malicious code activates a hook whenever a Web3 wallet is present...

9.8CVSS7.1AI score
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/06/15 4:10 a.m.7 views

CVE-2025-5815

The Traffic Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tfcmmaybesetbotflags function in all versions up to, and including, 3.2.2. This makes it possible for unauthenticated attackers to disabled bot logging...

5.3CVSS5AI score0.00132EPSS
Exploits1References1
NVD
NVD
added 2025/06/13 4:15 a.m.15 views

CVE-2025-5815

The Traffic Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tfcmmaybesetbotflags function in all versions up to, and including, 3.2.2. This makes it possible for unauthenticated attackers to disabled bot logging...

5.3CVSS0.00132EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/06/13 3:41 a.m.18 views

CVE-2025-5815 Traffic Monitor <= 3.2.2 - Missing Authorization to Unauthenticated Settings Update

The Traffic Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tfcmmaybesetbotflags function in all versions up to, and including, 3.2.2. This makes it possible for unauthenticated attackers to disabled bot logging...

5.3CVSS0.00132EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/06/13 3:41 a.m.8 views

CVE-2025-5815 Traffic Monitor <= 3.2.2 - Missing Authorization to Unauthenticated Settings Update

The Traffic Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tfcmmaybesetbotflags function in all versions up to, and including, 3.2.2. This makes it possible for unauthenticated attackers to disabled bot logging...

5.3CVSS5.1AI score0.00132EPSS
Exploits1References3
CVE
CVE
added 2025/06/13 3:41 a.m.50 views

CVE-2025-5815

The Traffic Monitor plugin for WordPress (up to version 3.2.2) is vulnerable due to a missing capability check in the tfcm_maybe_set_bot_flags()/tfcm_set_bot_flags AJAX path, allowing unauthenticated attackers to disable bot logging. This is an unauthenticated remote modification risk affecting t...

5.3CVSS5.1AI score0.00132EPSS
Exploits1References3
Packet Storm News
Packet Storm News
added 2025/06/13 12:0 a.m.7 views

WordPress Traffic Monitor 3.2.2 Unauthenticated Bot Logging Disable

This repository features a Nuclei template specifically designed to detect an unauthenticated bot logging disable vulnerability in the Traffic Monitor WordPress plugin. This issue allows unauthenticated attackers to remotely disable bot logging via a vulnerable AJAX action. It affects versions up...

5.3CVSS5.2AI score0.00132EPSS
Exploits1
CNNVD
CNNVD
added 2025/06/13 12:0 a.m.5 views

WordPress plugin Traffic Monitor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS5.4AI score0.00132EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/06/13 12:0 a.m.7 views

PT-2025-25383

Name of the Vulnerable Software and Affected Versions The Traffic Monitor plugin for WordPress versions up to, and including, 3.2.2 Description The issue is related to unauthorized modification of data due to a missing capability check on the tfcm maybe set bot flags function. This allows...

5.3CVSS5AI score0.00132EPSS
Exploits1References8
AlmaLinux
AlmaLinux
added 2025/05/13 12:0 a.m.4 views

Moderate: iptraf-ng security update

IPTraf-ng is a console-based network monitoring utility which includes an IP traffic monitor, a TCP and UDP service monitor, and a LAN statistics module. It supports Ethernet, FDDI, ISDN, SLIP, PPP, and loopback interfaces as well as the built-in raw socket interface of the Linux kernel. Security...

7.5CVSS7.5AI score0.00134EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2018/06/14 12:0 a.m.31 views

Cisco Web Security Appliance L4 Traffic Monitor Bypass

According to its self-reported version, the Cisco Web Security Appliance WSA running on the remote host is affected by a security feature bypass vulnerability that allows an unauthenticated, remote attacker to bypass L4 Traffic Monitor L4TM restrictions. C Tenable Network Security, Inc...

7.5CVSS7.5AI score0.0082EPSS
Exploits0References3
OSV
OSV
added 2018/06/07 12:29 p.m.1 views

CVE-2018-0353

A vulnerability in traffic-monitoring functions in Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to circumvent Layer 4 Traffic Monitor L4TM functionality and bypass security protections. The vulnerability is due to a change in the underlying operating system...

7.5CVSS5.8AI score
Exploits0References3
Cisco
Cisco
added 2018/06/06 4:0 p.m.31 views

Cisco Web Security Appliance Layer 4 Traffic Monitor Security Bypass Vulnerability

A vulnerability in traffic-monitoring functions in Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to circumvent Layer 4 Traffic Monitor L4TM functionality and bypass security protections. The vulnerability is due to a change in the underlying operating system...

7.5CVSS1.4AI score0.0082EPSS
Exploits0References1
Prion
Prion
added 2017/09/20 8:29 p.m.10 views

Design/Logic Flaw

An FBX-5313 issue was discovered in WatchGuard Fireware before 12.0. When a failed login attempt is made to the login endpoint of the XML-RPC interface, if JavaScript code, properly encoded to be consumed by XML parsers, is embedded as value of the user element, the code will be rendered in the...

4.3CVSS6.2AI score0.00356EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2017/09/20 8:29 p.m.1 views

CVE-2017-14615

An FBX-5313 issue was discovered in WatchGuard Fireware before 12.0. When a failed login attempt is made to the login endpoint of the XML-RPC interface, if JavaScript code, properly encoded to be consumed by XML parsers, is embedded as value of the user element, the code will be rendered in the...

6.1CVSS5.8AI score
Exploits0References3
Cvelist
Cvelist
added 2017/09/20 8:0 p.m.27 views

CVE-2017-14615

An FBX-5313 issue was discovered in WatchGuard Fireware before 12.0. When a failed login attempt is made to the login endpoint of the XML-RPC interface, if JavaScript code, properly encoded to be consumed by XML parsers, is embedded as value of the user element, the code will be rendered in the...

6.5AI score0.00356EPSS
Exploits1References3
Packet Storm
Packet Storm
added 2017/09/19 12:0 a.m.77 views

Watchguard Firebox / XTM XML-RPC Empty Member Denial Of Service

Watchguardas Firebox and XTM are a series of enterprise grade network security appliances providing advanced security services like next generation firewall, intrusion prevention, malware detection and blockage and others. Two vulnerabilities were discovered affecting the XML-RPC interface of the...

5CVSS5.4AI score0.11383EPSS
Exploits2
Symantec
Symantec
added 2016/07/12 12:0 a.m.37 views

Microsoft .NET Framework CVE-2016-3255 XML External Entity Information Disclosure Vulnerability

Description The Microsoft .NET Framework is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information. Successful exploits may lead to other attacks. Technologies Affected Microsoft .NET Framework 2.0 SP2 Microsoft .NET Framework...

5CVSS7.8AI score0.29474EPSS
Exploits0Affected Software3
Rows per page
Query Builder