H2O affected by a deserialization vulnerability

A deserialization vulnerability exists in h2oai/h2o-3 versions = 3.46.0.7, allowing attackers to read arbitrary system files and execute arbitrary code. The vulnerability arises from improper handling of JDBC connection parameters, which can be exploited by bypassing regular expression checks and...

CVE-2025-57929 WordPress Double the Donation Plugin <= 2.0.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kanweidoublethedonation Double the Donation double-the-donation allows Stored XSS.This issue affects Double the Donation: from n/a through = 2.0.0...

CVE-2025-57929 WordPress Double the Donation Plugin <= 2.0.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kanweidoublethedonation Double the Donation double-the-donation allows Stored XSS.This issue affects Double the Donation: from n/a through = 2.0.0...

CVE-2025-57929

CVE-2025-57929 is a Stored XSS in the WordPress plugin Double the Donation (vulnerable up to 2.0.0). Root cause: improper neutralization of input during web page generation. Impact (per sources): requires authentication; could inject scripts via input handled by the plugin. Remediation: update to...

CVE-2025-57930

CVE-2025-57930 describes a Cross-Site Request Forgery in the WordPress plugin Double the Donation (affected: 0 through 2.0.0) that requires user interaction to trigger. Impact is limited to CSRF-propagated actions authenticated as a user; CVSS 3.1 base score 4.3 (Medium). Remediation: upgrade to ...

CVE-2025-57930 WordPress Double the Donation Plugin <= 2.0.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in kanweidoublethedonation Double the Donation double-the-donation allows Cross Site Request Forgery.This issue affects Double the Donation: from n/a through = 2.0.0...

CVE-2025-57930 WordPress Double the Donation Plugin <= 2.0.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in kanweidoublethedonation Double the Donation allows Cross Site Request Forgery. This issue affects Double the Donation: from n/a through 2.0.0...

CVE-2025-51006

A flaw was found in tcpreplay. A double free issue can be triggered in the tcprewrite program because the tcpeditdltcleanup function indirectly calls the cleanup routine multiple times when a specially crafted pcap file is processed, resulting in a denial of service...

Double Free

Overview Affected versions of this package are vulnerable to Double Free via the dltlinuxsll2cleanup function. An attacker can cause memory corruption and application crash by supplying a specially crafted pcap file to the binary. Remediation Upgrade appneta/tcpreplay to version 4.5.2 or higher...

CVE-2025-51006

Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the dltlinuxsll2cleanup function in plugins/dltlinuxsll2/linuxsll2.c. This vulnerability is triggered when tcpeditdltcleanup indirectly invokes the cleanup routine multiple times on the same memory region. By...

UBUNTU-CVE-2025-51006

Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the dltlinuxsll2cleanup function in plugins/dltlinuxsll2/linuxsll2.c. This vulnerability is triggered when tcpeditdltcleanup indirectly invokes the cleanup routine multiple times on the same memory region. By...

PT-2025-38781

Name of the Vulnerable Software and Affected Versions Double the Donation versions through 2.0.0 Description A Cross-Site Request Forgery CSRF issue exists in Double the Donation. This allows attackers to potentially perform actions on behalf of an authenticated user without their knowledge...

WordPress plugin Double the Donation 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...

PT-2025-38780

Name of the Vulnerable Software and Affected Versions Double the Donation versions through 2.0.0 Description The Double the Donation software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious...

CVE-2025-51006

Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the dltlinuxsll2cleanup function in plugins/dltlinuxsll2/linuxsll2.c. This vulnerability is triggered when tcpeditdltcleanup indirectly invokes the cleanup routine multiple times on the same memory region. By...

AppNeta TCPrewrite 安全漏洞

AppNeta TCPrewrite is AppNeta's tool for editing and replaying network traffic previously captured by tools such as tcpdump and Wireshark. A security vulnerability exists in AppNeta TCPrewrite that stems from a double release in the dltlinuxsll2cleanup function, which could lead to memory...

WordPress plugin Double the Donation 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

CVE-2025-51006

CVE-2025-51006 affects tcpreplay’s tcprewrite component. The vulnerability in dlt_linuxsll2_cleanup() (plugins/dlt_linuxsll2/linuxsll2.c) results from tcpedit_dlt_cleanup() potentially invoking the cleanup routine multiple times on the same memory region, enabling a local attacker to trigger a de...

CVE-2025-51006

Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the dltlinuxsll2cleanup function in plugins/dltlinuxsll2/linuxsll2.c. This vulnerability is triggered when tcpeditdltcleanup indirectly invokes the cleanup routine multiple times on the same memory region. By...

CVE-2025-51006

Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the dltlinuxsll2cleanup function in plugins/dltlinuxsll2/linuxsll2.c. This vulnerability is triggered when tcpeditdltcleanup indirectly invokes the cleanup routine multiple times on the same memory region. By...