U.K. ICO Investigates TikTok, Reddit, and Imgur Over Children's Data Protection Practices

The U.K.'s Information Commissioner's Office ICO has opened an investigation into online platforms TikTok, Reddit, and Imgur to assess the steps they are taking to protect children between the ages of 13 and 17 in the country. To that end, the watchdog said it's probing how the ByteDance-owned...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: controller-gen, influx, boring-registry, k9s, aws-load-balancer-controller, kserve-rest-proxy, kuberay-operator, nri-discovery-kubernetes, timoni, openfga, metrics-server, k6, newrelic-nri-statsd, kiali, wave, aws-network-policy-agent, velero, kaf,...

CVE-2025-22622

Age Verification for your checkout page. Verify your customer's identity 1.20.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/class-wc-integration-agechecker-integration.php...

CVE-2025-22622

Age Verification for your checkout page. Verify your customer's identity 1.20.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/class-wc-integration-agechecker-integration.php...

CVE-2025-22622 Age Verification - Reflected cross-site scripting (XSS)

Age Verification for your checkout page. Verify your customer's identity 1.20.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/class-wc-integration-agechecker-integration.php...

CVE-2025-22622 Age Verification - Reflected cross-site scripting (XSS)

Age Verification for your checkout page. Verify your customer's identity 1.20.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/class-wc-integration-agechecker-integration.php...

CVE-2025-22622

CVE-2025-22622 : WordPress Age Verification plugin for checkout (Age Verification for your checkout page / agecheckernet, version

PT-2025-6950 · Unknown · Age Verification For Your Checkout Page

Name of the Vulnerable Software and Affected Versions: Age Verification for your checkout page Verify your customer's identity version 1.20.0 Description: The web application dynamically generates web content without validating the source of potentially untrusted data. This issue is located in th...

WordPress plugin Age Verification for your checkout page. Verify your customer s identity 跨站脚本漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Age Verification for your checkout page...

CVE-2024-5091

The SKT Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Age Gate and Creative Slider widgets in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

CVE-2024-55979

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in robindkumar Wr Age Verification wr-age-verification allows SQL Injection.This issue affects Wr Age Verification: from n/a through = 2.0.0...

CVE-2024-55980

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in robindkumar Wr Age Verification wr-age-verification allows SQL Injection.This issue affects Wr Age Verification: from n/a through = 2.0.0...

CVE-2024-57276

In Electronic Arts Dragon Age Origins 1.05, the DAUpdaterSVC service contains an unquoted service path vulnerability. This service is configured with insecure permissions, allowing users to modify the executable file path used by the service. The service runs with NT AUTHORITY\SYSTEM privileges,...

Electronic Arts Dragon Age Origins 安全漏洞

Electronic Arts Dragon Age Origins is a fantasy game by Electronic Arts. A security vulnerability exists in Electronic Arts Dragon Age Origins version 1.05, which stems from the inclusion of an unreferenced service path vulnerability that allows users to modify the path to an executable file used...

PT-2025-3424 · Bioware · Dragon Age Origins

Name of the Vulnerable Software and Affected Versions: Dragon Age Origins version 1.05 Description: The DAUpdaterSVC service in Dragon Age Origins contains an unquoted service path issue, allowing users to modify the executable file path used by the service. This service runs with NT...

CVE-2024-57276

In Electronic Arts Dragon Age Origins 1.05, the DAUpdaterSVC service contains an unquoted service path vulnerability. This service is configured with insecure permissions, allowing users to modify the executable file path used by the service. The service runs with NT AUTHORITY\SYSTEM privileges,...

CVE-2024-57276

Dragon Age Origins 1.05 is affected by an unquoted service path in the DAUpdaterSVC service. The service runs under NT AUTHORITY\SYSTEM with insecure permissions, enabling local privilege escalation by replacing or placing a malicious executable in the service path. Connected sources consistently...

CVE-2024-57276

In Electronic Arts Dragon Age Origins 1.05, the DAUpdaterSVC service contains an unquoted service path vulnerability. This service is configured with insecure permissions, allowing users to modify the executable file path used by the service. The service runs with NT AUTHORITY\SYSTEM privileges,...

FreeBSD : age -- age vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution (d9b0fea0-d564-11ef-b9bc-d05099c0ae8c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the d9b0fea0-d564-11ef-b9bc-d05099c0ae8c advisory. Filippo Valsorda reports: A plugin name containing a path separator may allow an attacker to execute an...

Arbitrary Code Execution (ACE)

filippo.io/age is vulnerable to Arbitrary Code Execution ACE. The vulnerability is due to improper validation or sanitization of plugin names, identities, or recipients, allows malicious input to be introduced and will execute arbitrary code or binaries...