WordPress plugin XML for Google Merchant Center 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress XML for Google Merchant Center plugin <= 3.0.11 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Le Ngoc Anh in WordPress Plugin XML for Google Merchant Center versions = 3.0.11...

The vulnerability of the Hitachi Ops Center Analyzer software for data analysis and the Hitachi Infrastructure Analytics Advisor software for data processing systems lies in the lack of authentication for critical functions. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Hitachi Ops Center Analyzer software for data analysis and the Hitachi Infrastructure Analytics Advisor software for data processing infrastructure lies in the lack of authentication for critical functions. Exploiting this vulnerability could allow an attacker operating...

The vulnerability of the QNAP License Center software lies in its failure to take measures to neutralize special elements used in the operating system’s command set, allowing a violator to execute arbitrary commands.

The vulnerability of the QNAP License Center software management tool is related to the failure to take measures to neutralize special elements used in the operating system command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

WordPress Notifications Center plugin <= 1.5.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika in WordPress Plugin Notifications Center versions = 1.5.2...

CVE-2025-22754

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Berkman Klein Center Amber amberlink allows Reflected XSS.This issue affects Amber: from n/a through = 1.4.4...

Microsoft Security Update Validation Report January 2025

Microsoft’s January 2025 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing softwar...

DoS (Denial of Service) com.thoughtworks.xstream:xstream Dependency in Bitbucket Data Center and Server

This High severity com.thoughtworks.xstream:xstream Dependency vulnerability was introduced in versions 8.6.0, 8.7.0, 8.8.0, 8.9.0, 8.10.0, 8.11.0, 8.12.0, 8.13.0, 8.14.0, 8.15.0, 8.16.0, 8.17.0, 8.18.0, 8.19.0, 9.0.0, 9.1.0, 9.2.0, 9.3.0, and 9.4.0 of Bitbucket Data Center and Server. This...

Description of the security update for Office 2016: January 14, 2025 (KB5002675)

None None...

Description of the security update for SharePoint Server 2019: January 14, 2025 (KB5002666)

None None...

Description of the security update for Excel 2016: January 14, 2025 (KB5002673)

None None...

February 4, 2025, update for Access 2016 (KB5002688)

None None...

Description of the security update for Access 2016: January 14, 2025 (KB5002670)

None None...

The vulnerability of the software for managing Lenovo Accessories and Display Manager (LADM) and the software for managing and configuring Lenovo Display Control Center (LDCC) lies in errors in the authentication process, allowing a perpetrator to execute arbitrary code.

The vulnerabilities of the Lenovo Accessories and Display Manager LADM software for managing accessories and displays, as well as the Lenovo Display Control Center LDCC software for controlling and configuring displays, are related to errors in the certificate validation process. Exploiting these...

The vulnerability of the software for managing Lenovo Accessories and Display Manager (LADM) and the software for managing and configuring Lenovo Display Control Center (LDCC) is related to errors in the authentication process. This vulnerability allows a malicious individual to gain increased privileges.

The vulnerabilities of the Lenovo Accessories and Display Manager LADM software for managing accessories and displays, as well as the Lenovo Display Control Center LDCC software for controlling and configuring displays, are related to errors in the authentication process. Exploiting these...

CISA: Chemical Security Analysis Center (CSAC) Overview

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

Securing Success: Stories from the SOC Webinar Series

In today’s fast-paced threat landscape, SOC Security Operations Center teams are under relentless pressure. Cyberattacks are evolving, threat volumes are skyrocketing, and attackers are exploiting vulnerabilities faster than ever. To navigate these challenges, Rapid7 has launched the "Securing...

Hands-On Walkthrough: Microsegmentation For all Users, Workloads and Devices by Elisity

Network segmentation remains a critical security requirement, yet organizations struggle with traditional approaches that demand extensive hardware investments, complex policy management, and disruptive network changes. Healthcare and manufacturing sectors face particular challenges as they...

vivo MinigameCenter 访问控制错误漏洞

Vivo MinigameCenter is a command line interface for rapid development of Vivo mini-games from the Chinese company Vivo. A security vulnerability exists in vivo MinigameCenter versions prior to 2.3.5.0, which stems from an insufficient restriction on loading URLs and could lead to partial...

The vulnerability of the QuLog Center software platform for managing QNAP NAS devices lies in the lack of security measures to protect the website structure. This allows attackers to carry out XSS attacks.

The vulnerability of the QuLog Center software platform for managing QNAP NAS devices is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...