Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

nalam-1 — Vulnerabilities & Security Advisories 7

Browse all 7 CVE security advisories affecting nalam-1. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Nalam-1 is a network monitoring tool primarily used for real-time traffic analysis and security event detection across enterprise environments. Historically, it has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, with six CVEs documented to date. The application's exposure of administrative interfaces and insufficient input validation have been recurring security concerns. While no major public security incidents have been widely reported, the consistent pattern of vulnerabilities in its web management console suggests potential for unauthorized system compromise if not properly patched or segmented within network architectures.

CVE ID Title CVSS Severity Published
CVE-2026-109999 AI Marketing Expert <= 1.2.8 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'name' Parameter — AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation, Social Media & Ai Chatbot CWE-79 7.2 High 2026-10-28
CVE-2025-12965 Magical Posts Display <= 1.2.54 - Authenticated (Author+) Stored Cross-Site Scripting via Magical Posts Accordion Widget — Magical Posts Display – Elementor Advanced Posts widgets CWE-79 6.4 Medium 2025-12-12
CVE-2025-12964 Magical Products Display <= 1.1.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via MPD Pricing Table Widget — Magical Shop Builder – WooCommerce Template Builder for Elementor | Shop, Cart, Checkout & Product Page Builder CWE-79 6.4 Medium 2025-11-21
CVE-2025-8196 Magical Addons For Elementor <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes — Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) CWE-79 6.4 Medium 2025-07-29
CVE-2024-10352 Magical Addons For Elementor <= 1.2.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template — Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) CWE-200 4.3 Medium 2024-11-09
CVE-2024-5161 Magical Addons For Elementor <= 1.1.39 - Authenticated (Contributor+) Stored Cross-Site Scripting — Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) CWE-79 6.4 Medium 2024-06-06
CVE-2024-2923 Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) <= 1.1.37 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Effect Widget — Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) CWE-79 6.4 Medium 2024-05-09

This page lists every published CVE security advisory associated with nalam-1. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.