260 matches found
CVE-2026-24526 WordPress Email Inquiry & Cart Options for WooCommerce plugin <= 3.4.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Steve Truman Email Inquiry & Cart Options for WooCommerce woocommerce-email-inquiry-cart-options allows DOM-Based XSS.This issue affects Email Inquiry & Cart Options for WooCommerce: from n/a throu...
CVE-2026-24526
CVE-2026-24526 affects the WordPress plugin Email Inquiry & Cart Options for WooCommerce (woocommerce-email-inquiry-cart-options) up to version 3.4.3. The issue is a DOM-Based XSS due to improper input handling during web page generation. Exploitation details are not provided in the initial docum...
PT-2026-4376
Name of the Vulnerable Software and Affected Versions Steve Truman Email Inquiry & Cart Options for WooCommerce versions through 3.4.3 Description The software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-site Scripting issue. This...
WordPress plugin: Email Inquiry & Cart Options for WooCommerce – Cross-site Script Vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001370)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001370 advisory. An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hcievent.c has a slab out-of- bounds read in hciextendedinquiryresultevt, aka CID-51c19bf3d5c...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003840)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003840 advisory. An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hcievent.c has a slab out-of- bounds read in hciextendedinquiryresultevt, aka CID-51c19bf3d5c...
The Ultra-Realistic AI Face Swapping Platform Driving Romance Scams
Capable of creating “nearly perfect” face swaps during live video chats, Haotian has made millions, mainly via Telegram. But its main channel vanished after WIRED's inquiry into scammers using the app...
EUVD-2020-25203
Malware in sbrugna...
EUVD-2019-3187
Malware in sbrugna...
EUVD-2020-7250
Malware in sbrugna...
EUVD-2023-31272
Malicious code in bioql PyPI...
EUVD-2023-32771
Malicious code in bioql PyPI...
EUVD-2025-19413
Malicious code in bioql PyPI...
EUVD-2022-55213
Malicious code in bioql PyPI...
Bluetooth: eir: Fix possible crashes on eir_create_adv_data
...
CVE-2022-50233
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix using strlen with hdev-devname,shortname Both devname and shortname are not guaranteed to be NULL terminated so this instead use strnlen and then attempt to determine if the resulting string needs to be...
CVE-2022-50233 Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name}
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix using strlen with hdev-devname,shortname Both devname and shortname are not guaranteed to be NULL terminated so this instead use strnlen and then attempt to determine if the resulting string needs to be...
Linux Distros Unpatched Vulnerability : CVE-2023-53037
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: mpi3mr: Bad drive in topology results kernel crash When the SAS Transport Layer support is enabled and a device exposed to the OS by the driver fails...
