Disclosures

漏洞披露 本仓库包含我的漏洞报告，这些报告不受保密协议（NDA）约束，也不受 VRP 服务条款的限制。 目录 Fancy Product Designer Microsoft Xfinity...

EUVD-2016-3482

Malware in sbrugna...

EUVD-2017-18430

Malware in sbrugna...

EUVD-2017-18407

Malware in sbrugna...

EUVD-2014-5634

Malware in sbrugna...

EUVD-2024-30462

Malicious code in bioql PyPI...

EUVD-2025-2909

Malicious code in bioql PyPI...

CVE-2024-32675

Missing Authorization vulnerability in Xfinity Soft Order Limit for WooCommerce.This issue affects Order Limit for WooCommerce: from n/a through 2.0.0...

CVE-2016-2398

Comcast XFINITY Home Security System does not properly maintain base-station communication, which allows physically proximate attackers to defeat sensor functionality by interfering with ZigBee 2.4 GHz transmissions...

CVE-2025-22681

Missing Authorization vulnerability in Xfinitysoft Content Cloner super-seo-content-cloner allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Content Cloner: from n/a through = 1.0.1...

CVE-2025-22681

Missing Authorization vulnerability in Xfinitysoft Content Cloner super-seo-content-cloner allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Content Cloner: from n/a through = 1.0.1...

CVE-2024-32675

Missing Authorization vulnerability in Xfinity Soft Order Limit for WooCommerce.This issue affects Order Limit for WooCommerce: from n/a through 2.0.0...

CVE-2024-32675 WordPress Order Limit for WooCommerce plugin <= 2.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Xfinity Soft Order Limit for WooCommerce.This issue affects Order Limit for WooCommerce: from n/a through 2.0.0...

CVE-2024-32675

CVE-2024-32675 represents a Missing Authorization vulnerability in the Order Limit for WooCommerce plugin (wc-order-limit-lite). Affected versions are reported as up to 2.0.0. The connected Red Hat/Wordfence entries confirm the CVE ID and indicate the issue concerns missing authorization, but do ...

CVE-2024-32675: Missing Authorization

Missing Authorization vulnerability in Xfinity Soft Order Limit for WooCommerce.This issue affects Order Limit for WooCommerce: from n/a through 2.0.0...

How to Opt Out of Comcast’s Xfinity Storing Your Sensitive Data

One of America’s largest internet providers may collect data about your political beliefs, race, and sexual orientation to serve personalized ads...

Xfinity Rocked with Data Breach Impacting 36 Million Users

By Deeba Ahmed The latest Xfinity data breach is linked to the critical Citrix Bleed vulnerability. This is a post from HackRead.com Read the original post: Xfinity Rocked with Data Breach Impacting 36 Million Users...

Malicious code in xfinity-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56b70e09dfa991a04792438328717b5904e3250501889b394aaef6f02bd5890a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8546 Malicious code in xfinity-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56b70e09dfa991a04792438328717b5904e3250501889b394aaef6f02bd5890a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-738 Malicious code in @xfinity/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9a1f10d5f6aa7b39416dcfd78a0c6036c840ddd308e7c1a988e46acccc39046 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...