PT-2025-7011

Name of the Vulnerable Software and Affected Versions: wassereimer Easy Code Placement versions through 18.11 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...

Security update for python312

This update for python312 fixes the following issues: CVE-2025-0938: Functions urllib.parse.urlsplit and urlparse accept domain names including square brackets bsc1236705. CVE-2024-12254: Unbounded memory buffering in SelectorSocketTransport.writelines bsc1234290. Other bugfixes: Position of SUSE...

CVE-2024-13528

The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.9.5. This is due to the presence of a shortcode that will generate a confirmation link with a placeholder email. This makes it possible for...

PT-2025-6466

Name of the Vulnerable Software and Affected Versions Customer Email Verification for WooCommerce plugin for WordPress versions up to and including 2.9.5 Description The issue is related to authentication bypass in the plugin. This is due to the presence of a shortcode that generates a confirmati...

CVE-2024-50656

itsourcecode Placement Management System 1.0 is vulnerable to Cross Site Scripting XSS via the Full Name field in registration.php...

CVE-2024-7449

A vulnerability, which was classified as critical, was found in itsourcecode Placement Management System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-50656

itsourcecode Placement Management System 1.0 is vulnerable to Cross Site Scripting XSS via the Full Name field in registration.php...

CVE-2024-50656

itsourcecode Placement Management System 1.0 is vulnerable to Cross Site Scripting XSS via the Full Name field in registration.php...

CVE-2024-50656

CVE-2024-50656 affects itsourcecode Placement Management System 1.0. An XSS vulnerability exists in the Full Name field of registration.php. CVSS v3.1 base score is 6.1 (Medium). Exploitation details are not described in the provided documents; remediation/fixes are not specified in the supplied ...

itsourcecode Placement Management System 安全漏洞

itsourcecode Placement Management System is an open source placement management system from itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode Placement Management System, which originates from an easy cross-site scripting XSS attack via the full name field in...

CVE-2024-50656

itsourcecode Placement Management System 1.0 is vulnerable to Cross Site Scripting XSS via the Full Name field in registration.php...

CVE-2024-50656: Improper Neutralization of Input During Web Page Generation

itsourcecode Placement Management System 1.0 is vulnerable to Cross Site Scripting XSS via the Full Name field in registration.php...

PT-2025-2877

Name of the Vulnerable Software and Affected Versions itsourcecode Placement Management System version 1.0 Description The issue concerns a Cross Site Scripting XSS vulnerability. It can be exploited via the Full Name field in the "registration.php" endpoint. This allows for potential malicious...

CVE-2024-50656

itsourcecode Placement Management System 1.0 is vulnerable to Cross Site Scripting XSS via the Full Name field in registration.php...

CVE-2025-0543 G DATA Security Client Local privilege escalation

Local privilege escalation in G DATA Security Client due to incorrect assignment of privileges to directories. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by placing an arbitrary executable in a globally writable directory resulting in...

WordPress Easy Code Placement Plugin <= 18.11 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh in WordPress Plugin Easy Code Placement versions = 18.11...

Security and bug fixes for NetworkManager

1.48.10-5.0.1 - disable MPTCP handling by default Orabug: 34801142 - add connectivity check via Oracle servers Orabug: 32051972 1:1.48.10-5 - vpn: Support routing rules in vpn conenctions RHEL-73167 - vpn: Place gateway route to table defined in ipvx.route-table RHEL-73166 1:1.48.10-4 - Remove...

CVE-2024-53932

The Color Phone: Call Screen Theme application (com.remi.colorphone.callscreen.calltheme.callerscreen) for Android versions through 21.1.9 contains a vulnerability that allows unauthorized phone calls. An attacker can place calls without user interaction by sending a crafted intent to the com.rem...

kernel: arm64: entry: fix ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD

A vulnerability was found in the Linux kernel. This issue occurs due to the incorrect placement of the TLBI and DSB instructions, which are not placed after all explicit memory accesses, creating the potential for speculative unprivileged loads...

Experts Warn of Critical Unpatched Vulnerability in Linear eMerge E3 Systems

Cybersecurity researchers are warning about an unpatched vulnerability in Nice Linear eMerge E3 access controller systems that could allow for the execution of arbitrary operating system OS commands. The flaw, assigned the CVE identifier CVE-2024-9441, carries a CVSS score of 9.8 out of a maximum...