CVE-2023-47521

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Max Bond, AndreSC Q2W3 Post Order allows Reflected XSS.This issue affects Q2W3 Post Order: from n/a through 1.2.8...

CVE-2023-47521

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Max Bond, AndreSC Q2W3 Post Order allows Reflected XSS.This issue affects Q2W3 Post Order: from n/a through 1.2.8...

CVE-2023-47521

CVE-2023-47521 affects the WordPress Q2W3 Post Order plugin up to version 1.2.8. It is a Reflected XSS caused by improper input neutralization during web page generation, permitting unauthenticated injection of scripts via crafted requests. Public sources indicate the vulnerability remains unpatc...

CVE-2023-47521 WordPress Q2W3 Post Order Plugin <= 1.2.8 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Max Bond, AndreSC Q2W3 Post Order allows Reflected XSS.This issue affects Q2W3 Post Order: from n/a through 1.2.8...

CVE-2023-47690

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Anton Bond Additional Order Filters for WooCommerce plugin = 1.10 versions...

CVE-2023-47690

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Anton Bond Additional Order Filters for WooCommerce plugin = 1.10 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Anton Bond Additional Order Filters for WooCommerce plugin = 1.10 versions...

CVE-2023-47690 WordPress Additional Order Filters for WooCommerce Plugin <= 1.10 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Anton Bond Additional Order Filters for WooCommerce plugin = 1.10 versions...

CVE-2023-47690 WordPress Additional Order Filters for WooCommerce Plugin <= 1.10 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Anton Bond Additional Order Filters for WooCommerce plugin = 1.10 versions...

CVE-2023-47690

CVE-2023-47690 is a publicly disclosed unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Additional Order Filters for WooCommerce. Affected versions are

PT-2023-30570 · WordPress · Anton Bond Additional Order Filters For Woocommerce

Name of the Vulnerable Software and Affected Versions: Anton Bond Additional Order Filters for WooCommerce plugin versions = 1.10 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website,...

kernel: bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails

In the Linux kernel, the following vulnerability has been resolved: bonding: restore bond's IFFSLAVE flag if a non-eth dev enslave fails syzbot reported a warning1 where the bond device itself is a slave and we try to enslave a non-ethernet device as the first slave which fails but then in the...

bondnewyork.com Cross Site Scripting vulnerability OBB-3771971

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bond-consultants.com Cross Site Scripting vulnerability OBB-3753442

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

NetworkManager bug fix update

An update is available for NetworkManager. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list NetworkManager is a system network service that manages network device...

Any call to settle a bond can be reverted by donating 1 WEI to the VaultLP contract

Lines of code Vulnerability details Impact Any settle call can be reverted, thus disallowing the protocol from settling any options and from releasing the locked tokens. Proof of Concept The protocol admin calls settle on an option when its price gets bellow the strike price, at which the option ...

Transfering Bonds would create confusion among delegators because of non-deletion of unbondingLocks & assigning all the new delegators the same unbounding id

Lines of code Vulnerability details transferBond function is used to transfers ownership of a bond to a new delegator using optional hints if needed. Here the old unbound lock is deleted after creating a new one in unbondWithHint function. But the problem lies in the delete operation as it does n...

kernel: net/mlx5: LAG, fix logic over MLX5_LAG_FLAG_NDEVS_READY

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, fix logic over MLX5LAGFLAGNDEVSREADY Only set MLX5LAGFLAGNDEVSREADY if both netdevices are registered. Doing so guarantees that both ldev-pfMLX5LAGP0.dev and ldev-pfMLX5LAGP1.dev have valid pointers when...

bonded-materials.com Cross Site Scripting vulnerability OBB-3298858

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Attacker can front-run Bond buyer and make them buy it for a lower payout than expected

Lines of code Vulnerability details The MuteBond contract contains a feature in which after each purchase the epochStart increases by 5% of the time passed since epochStart, this in most cases lowers the bond's price i.e. buyer gets less payout for future purchases. An attacker can exploit this...