CVE-2025-26928

CVE-2025-26928: Missing Authorization in Order Limit for WooCommerce (Order Limit for WooCommerce plugin) affects versions up to and including 3.0.2. Documented in Wordfence Intelligence, it is labeled as a Missing Authorization vulnerability; remediation is to apply the patch/upgrade that fixes ...

PT-2025-7851 · Woocommerce · Order Limit For Woocommerce

Name of the Vulnerable Software and Affected Versions: Order Limit for WooCommerce versions 3.0.2 and earlier Description: The issue is related to a Missing Authorization vulnerability in the Order Limit for WooCommerce plugin, which allows exploitation due to incorrectly configured access contro...

WordPress plugin Order Limit for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in th...

CVE-2025-25513

Seacms =13.3 is vulnerable to SQL Injection in adminmembers.php...

CVE-2024-12916

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Agito Computer Life4All allows SQL Injection. This issue affects Life4All: before 10.01.2025...

CVE-2024-12916

CVE-2024-12916 concerns an SQL Injection in Agito Computer’s Life4All before 10.01.2025. Connected sources confirm the root cause is improper neutralization of special elements in SQL commands, affecting Life4All installations prior to the stated version. The CVSS metrics indicate high impact acr...

The vulnerability of the File.OpenText() function in the WhatsUp Gold network infrastructure monitoring system allows a intruder to gain unauthorized access to protected information.

The vulnerability of the File.OpenText function in the WhatsUp Gold network infrastructure monitoring system is related to an incorrect limitation on the path name to the restricted directory when processing the xmlName parameter. Exploiting this vulnerability can allow a malicious actor to gain...

CVE-2025-22631

CVE-2025-22631 : WordPress Marketing Automation plugin (up to v1.2.6.8) vulnerable to Reflected XSS due to improper input neutralization during web-page generation. CVSS 3.1 vector: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L; base score 7.1 (HIGH). Patched status exists per sources; remediation/version ...

WordPress Order Limit for WooCommerce plugin <= 3.0.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Order Limit for WooCommerce versions = 3.0.2...

OESA-2025-1163 python-jwcrypto security update

Implements JWK, JWS, JWE specifications with python-cryptography Security Fixes: JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography. Prior to version 1.5.6, an attacker can cause a denial of service attack by passing in a malicious JWE Token with a high compression...

Abseil 安全漏洞

Abseil is an Abseil generic library C++ open-sourced by Abseil. Abseil has a security vulnerability that stems from a buffer overflow problem caused by the size constructor, reserve and rehash methods of absl::flat,nodehashset,map not imposing an upper limit on its size parameter...

Medium: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: block: fix integer overflow in BLKSECDISCARD CVE-2024-49994 In the Linux kernel, the following vulnerability has been resolved: ext4: fix access to uninitialised lock in fc replay path CVE-2024-50014 In the Linux...

Namada-apps allows Excessive Computation in Mempool Validation

Impact A malicious transaction may cause an expensive computation in mempool validation. A transaction with multiple repeated sections causes the section hash calculation used for signature validation to grow exponentially and potentially even cubic in proportion to number of sections. This may b...

PT-2025-7549 · Lsquic · Lsquic

Name of the Vulnerable Software and Affected Versions: LSQUIC versions prior to 4.2.0 Description: A hash collision vulnerability in the hash table used to manage connections allows remote attackers to cause a considerable CPU load on the server by initiating connections with colliding Source...

bind security update

32:9.11.36-16.4 - Change patches applying to use -P parameter 32:9.11.36-16.3 - Limit additional section records CPU processing CVE-2024-11187 - Correct ANY queries to not have additional data appended...

CVE-2023-51297

A lack of rate limiting in the 'Email Settings' feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

SUSE CVE-2025-21702

In the Linux kernel, the following vulnerability has been resolved: pfifotailenqueue: Drop new packet when sch-limit == 0 Expected behaviour: In case we reach scheduler's limit, pfifotailenqueue will drop a packet in scheduler's queue and decrease scheduler's qlen by one. Then, pfifotailenqueue...

CVE-2025-21702

In the Linux kernel, the following vulnerability has been resolved: pfifotailenqueue: Drop new packet when sch-limit == 0 Expected behaviour: In case we reach scheduler's limit, pfifotailenqueue will drop a packet in scheduler's queue and decrease scheduler's qlen by one. Then, pfifotailenqueue...

UBUNTU-CVE-2025-21702

In the Linux kernel, the following vulnerability has been resolved: pfifotailenqueue: Drop new packet when sch-limit == 0 Expected behaviour: In case we reach scheduler's limit, pfifotailenqueue will drop a packet in scheduler's queue and decrease scheduler's qlen by one. Then, pfifotailenqueue...

CVE-2025-21702 pfifo_tail_enqueue: Drop new packet when sch->limit == 0

In the Linux kernel, the following vulnerability has been resolved: pfifotailenqueue: Drop new packet when sch-limit == 0 Expected behaviour: In case we reach scheduler's limit, pfifotailenqueue will drop a packet in scheduler's queue and decrease scheduler's qlen by one. Then, pfifotailenqueue...