CVE-2022-47449 WordPress Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD Plugin <= 3.1.5 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in RexTheme Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD plugin = 3.1.5 versions...

CVE-2022-47449 WordPress Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD Plugin <= 3.1.5 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in RexTheme Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD plugin = 3.1.5 versions...

CVE-2022-47449

CVE-2022-47449 documents a cross-site scripting flaw in the RexTheme Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD plugin, vulnerable versions

Important: gnutls

Issue Overview: A timing side-channel vulnerability was found in RSA ClientKeyExchange messages in GnuTLS. This side-channel may be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption, the attacker wou...

Windows Recovery Environment BitLocker Bypass (KB5025175)

The remote Windows host has not had the post-update scripts described in Microsoft KB5025175 executed. It may, therefore, be affected by a BitLocker security feature bypass vulnerability if the Windows Recovery Environment WinRE has not been update by an alternative method. Note that Nessus has n...

PT-2023-2576 · D Link · D-Link Dir-890L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-890L version FW1.10 A1 Description: The issue is related to authentication bypass in the D-Link DIR-890L router. It is caused by weaknesses in the authentication procedure, which can be exploited by a remote attacker to bypass...

PT-2023-2597 · D Link · D-Link Dir-879

Name of the Vulnerable Software and Affected Versions: D-Link DIR-879 version v105A1 Description: The issue is related to a component called phpcgi in the D-Link DIR-879 router's firmware, which has weaknesses in its authentication procedure. This can be exploited by a remote attacker to bypass...

datarecoverymasters.com Cross Site Scripting vulnerability OBB-3281149

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-2297

The Profile Builder – User Profile & User Registration Forms plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 3.9.0. This is due to the plugin using native password reset functionality, with insufficient validation on the password reset function...

Release Information for Veeam Recovery Orchestrator 6 Cumulative Patches

Requirements This Cumulative Patch can be used to: update manually from a previous Veeam Recovery Orchestrator 6 release to the latest Cumulative Patch. upgrade an existing Veeam Recovery Orchestrator 5 server to Veeam Recovery Orchestrator 6 with the latest Cumulative Patch. install a new...

PT-2025-53177

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the qedi driver within the Linux kernel. The issue occurs in the qedi remove function, potentially triggered by concurrent execution of qedi recovery...

Using the iPhone Recovery Key to Lock Owners Out of Their iPhones

This a good example of a security feature that can sometimes harm security: Apple introduced the optional recovery key in 2020 to protect users from online hackers. Users who turn on the recovery key, a unique 28-digit code, must provide it when they want to reset their Apple ID password. iPhone...

CVE-2022-48150

Shopware v5.5.10 was discovered to contain a cross-site scripting XSS vulnerability via the recovery/install/ URI...

CVE-2022-48150

Shopware v5.5.10 was discovered to contain a cross-site scripting XSS vulnerability via the recovery/install/ URI...

Unspecified Vulnerability in Oracle Database Server (CNVD-2023-71322)

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. A security vulnerability exists in Oracle Database Server versions 19c and 21c. An...

Shopware 跨站脚本漏洞

Shopware is a set of open source e-commerce software from German Shopware company . A security vulnerability exists in Shopware v5.5.10, which can be exploited by an attacker to conduct cross-site scripting XSS attacks via URI recovery/install/...

CVE-2022-48150

Shopware v5.5.10 was discovered to contain a cross-site scripting XSS vulnerability via the recovery/install/ URI...

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring lies in its ability to restore unreliable data stored in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially created UDP packets...

Oracle Database Server (Apr 2023 CPU)

The 19c and 21c versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2023 CPU advisory. - Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Difficul...

CVE-2023-26048 OutOfMemoryError for large multipart without filename in Eclipse Jetty

Jetty is a java based web server and servlet engine. In affected versions servlets with multipart support e.g. annotated with @MultipartConfig that call HttpServletRequest.getParameter or HttpServletRequest.getParts may cause OutOfMemoryError when the client sends a multipart request with a part...