airflow-provider-appops (>=0.0.3, <=0.0.4), astronomer-providers (1.0.0) +1 more potentially affected by CVE-2026-68868 via apache-airflow-providers-google (6.8.0)

apache-airflow-providers-google PYPI version 6.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-provider-appops =0.0.3, =0.0.4, =0.1.4 Source cves: CVE-2026-68868 Source advisory:...

airflow-provider-appops (>=0.0.3, <=0.0.4), astronomer-providers (1.0.0) +1 more potentially affected by CVE-2026-45361 via apache-airflow-providers-google (6.8.0)

apache-airflow-providers-google PYPI version 6.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-provider-appops =0.0.3, =0.0.4, =0.1.4 Source cves: CVE-2026-45361 Source advisory:...

carte-blanche (>=1.3.7, <=1.3.8), dop-python-pip-package (>=0.0.1, <=0.0.4) +2 more potentially affected by CVE-2025-71176 via pytest (3.7.2)

pytest PYPI version 3.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - carte-blanche =1.3.7, =0.0.1, =2.0.3, =2.0.6 - seleniumbase 1.14.6 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

Malicious code in @zalastax/nolb-dop (npm)

The package @zalastax/nolb-dop was found to contain malicious code...

MAL-2025-43188 Malicious code in @zalastax/nolb-dop (npm)

The package @zalastax/nolb-dop was found to contain malicious code...

MAL-2025-9940 Malicious code in @zalastax/nolb-_dop (npm)

The package @zalastax/nolb-dop was found to contain malicious code...

WordPress DOP Shortcodes plugin <= 1.2 - Contributor+ Stored XSS via Shortcode vulnerability

Contributor+ Stored XSS via Shortcode vulnerability discovered by Bob Matyas in WordPress Plugin DOP Shortcodes versions = 1.2...

CVE-2024-4377

The DOP Shortcodes WordPress plugin through 1.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2024-4377

The DOP Shortcodes WordPress plugin through 1.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2024-4377

CVE-2024-4377 affects the DOP Shortcodes WordPress plugin (versions

CVE-2024-4377 DOP Shortcodes <= 1.2 - Contributor+ Stored XSS via Shortcode

The DOP Shortcodes WordPress plugin through 1.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2024-4377 DOP Shortcodes <= 1.2 - Contributor+ Stored XSS via Shortcode

The DOP Shortcodes WordPress plugin through 1.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

WordPress DOP Shortcodes Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)

Software DOP Shortcodes Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4377 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 358272ad2236 Credits Bob Matyas Required privilege...

PT-2024-30643 · WordPress · Dop Shortcodes

Name of the Vulnerable Software and Affected Versions: DOP Shortcodes WordPress plugin versions 1.2 and earlier Description: The issue concerns the DOP Shortcodes WordPress plugin, which does not properly validate and escape some of its shortcode attributes before outputting them in a page or pos...

WordPress plugin DOP Shortcodes security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-4377: Improper Neutralization of Input During Web Page Generation

The DOP Shortcodes WordPress plugin through 1.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

DOP Shortcodes <= 1.2 - Contributor+ Stored XSS via Shortcode

Description The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks PoC Add the following shortcode ...

DOP Shortcodes <= 1.2 - Contributor+ Stored XSS via Shortcode

Description The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Add the following shortcode to a...

The vulnerability of the DOPSoft software, designed for programming Delta Electronics’ DOP-100 series operator panels, stems from buffer overflows in the “cull” function. This allows an attacker to execute arbitrary code.

The vulnerability of the DOPSoft software, designed for programming Delta Electronics’ DOP-100 series operator panels, is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Delta Electronics DOPSoft 2 (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Delta Electronics Equipment: DOPSoft 2 Vulnerabilities: Stack-based Buffer Overflow, Out-of-Bounds Write, Heap-based Buffer Overflow 2. UPDATED INFORMATION This updated advisory is a follow-up to the original advisory...