791 matches found
CVE-2025-67544
CVE-2025-67544 is a stored XSS vulnerability in the WordPress plugin Shopkeeper Extender (before version 7.0). The issue stems from improper input neutralization during web page generation, enabling stored cross-site scripting. Affected product: Shopkeeper Extender
WordPress plugin Shopkeeper Extender 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
CVE-2025-67544: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Get Bowtied Shopkeeper Extender shopkeeper-extender allows Stored XSS.This issue affects Shopkeeper Extender: from n/a through 7.0...
PT-2025-49920
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Get Bowtied Shopkeeper Extender shopkeeper-extender allows Stored XSS.This issue affects Shopkeeper Extender: from n/a through 7.0...
Linksys多款产品 安全漏洞
Linksys RE6250, among others, is a wireless extender from Linksys, USA. A security vulnerability exists in various Linksys products, which stems from an incorrect manipulation of the parameter clientsname0 in the file modform.so, which could result in a stack buffer overflow. The following produc...
The vulnerability of the software solution for integrating corporate-level data, Transformation Extender Advanced, relates to the recovery of unreliable data in memory. This allows a perpetrator to execute arbitrary code.
The vulnerability of the software solution for integrating corporate-level data with the Transformation Extender Advanced solution is related to the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2025-46775
A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated user to obtain administrator credentials via debug log...
WordPress Shopkeeper Extender plugin < 7.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Jarno Vos jrn5151 in WordPress Plugin Shopkeeper Extender versions 7.0...
Security Bulletin: IBM Sterling Transformation Extender is affected by multiple IBM Semeru Java 17 vulnerabilities
Summary IBM Sterling Transformation Extender uses IBM Semeru Runtime Certified Edition, Version 17 and is affected by multiple vulnerabilities CVE-2025-53057, CVE-2025-53066, CVE-2025-50059, CVE-2025-50106, CVE-2025-30749, CVE-2025-30761 and CVE-2025-30754. Vulnerability Details...
IBM Transformation Extender Advanced Improper Access Control Vulnerability
IBM Transformation Extender Advanced A data transformation, validation and standardization tool software from International Business Machines Corporation. IBM Transformation Extender Advanced suffers from an Improper Access Control Vulnerability, no details of the vulnerability are available at...
IBM Transformation Extender Advanced Weak Password Vulnerability
IBM Transformation Extender Advanced A data transformation, validation and standardization tool software from International Business Machines Corporation. IBM Transformation Extender Advanced suffers from a weak password vulnerability that stems from not requiring users to use strong passwords by...
IBM Transformation Extender Advanced Log Message Disclosure Vulnerability
IBM Transformation Extender Advanced is a data transformation, validation and standardization tool software from International Business Machines IBM. IBM Transformation Extender Advanced suffers from a log information disclosure vulnerability that originates from storing sensitive information in ...
IBM Transformation Extender Advanced Logout Without Disabling Session Vulnerability
IBM Transformation Extender Advanced A data transformation, validation and standardization tool software from International Business Machines Corporation. IBM Transformation Extender Advanced suffers from a Logout Without Disabling Session vulnerability, which can be exploited by an attacker to...
The vulnerability of the software solution for integrating corporate-level data, Transformation Extender Advanced, is related to an incorrect session expiration time. This allows a malicious actor to intercept the session and gain access to the user account.
The vulnerability of the software solution for integrating corporate-level data with the Transformation Extender Advanced solution is related to an incorrect session expiration time. Exploiting this vulnerability could allow a malicious actor to intercept the session and gain access to the user...
The vulnerability of the software solution for integrating corporate-level data, Transformation Extender Advanced, is related to deficiencies in access control. This allows attackers to compromise the integrity of the protected information.
The vulnerability of the software solution for integrating corporate-level data with the Transformation Extender Advanced solution is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...
The vulnerability of the software solution for integrating corporate-level data, Transformation Extender Advanced, is related to weak password requirements, allowing attackers to gain access to user accounts.
The vulnerability of the software solution for integrating corporate-level data with the Transformation Extender Advanced solution is related to weak password requirements. Exploiting this vulnerability could allow an attacker to gain access to user accounts remotely...
The vulnerability of the software solution for integrating corporate-level data, Transformation Extender Advanced, relates to the disclosure of information through registration files, allowing a perpetrator to disclose confidential information.
The vulnerability of the software solution for integrating corporate-level data with the Transformation Extender Advanced solution is related to the disclosure of information through registration files. Exploiting this vulnerability can allow attackers to disclose confidential information...
EUVD-2019-0185
Malware in sbrugna...