4761 matches found
CVE-2024-50945
CVE-2024-50945 Descrizione SimplCommerce è affetto da una vulnerabilità di controllo degli accessi non corretti nel sistema di recensioni, che consente a utenti non autorizzati di pubblicare recensioni per prodotti che non hanno acquistato. Metodo di rilevamento Un attaccante può rilevare questa...
Kaspersky_CVE-2024-3094
Sicherheitsüberprüfung: CVE-2024-3094 XZ Utils Backdoor Autor: Ivan Sushin Datum: März 2026 1. Projektbeschreibung Dieses Repository enthält die Ergebnisse einer vollständigen Sicherheitsüberprüfung der Schwachstelle CVE-2024-3094 Supply-Chain-Angriff in der Bibliothek XZ Utils. Ziel der Arbeit:...
sec_review_cve-2024-3094
È stata condotta una revisione completa della sicurezza della vulnerabilità open source CVE-2024-3094. Sulla base dei dati raccolti, sono stati preparati: 1. Report «ThreatModel + SecurityReview» – descrizione dettagliata delle minacce, percorsi di sfruttamento, valutazione del rischio e...
WordPress Customer Reviews for WooCommerce plugin <= 5.106.0 - Unauthenticated Stored Cross-Site Scripting via Aggregated Review Form vulnerability
Unauthenticated Stored Cross-Site Scripting via Aggregated Review Form vulnerability discovered by daroo in WordPress Plugin Customer Reviews for WooCommerce versions = 5.106.0...
EUVD-2026-67711
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the aggregated review form submission in versions up to and including 5.106.0. This is due to insufficient input sanitization and output escaping on user-supplied review comment text. The...
CVE-2026-6176
The Customer Reviews for WooCommerce WordPress plugin is vulnerable to unauthenticated Stored Cross-Site Scripting in versions up to and including 5.106.0 . The root cause is insufficient input sanitization and output escaping: review comment text submitted via the cr_local_forms_submit AJAX acti...
OpenClaw went viral. Meet the maintainers building and securing it.
What began as a personal experiment quickly became a global open source project with extraordinary momentum. OpenClaw is a personal AI assistant that runs on users' devices and connects with the messaging channels they already use. Started by Peter Steinberger as a weekend project in November 202...
DakshSCRA v0.38-beta
Daksh SCRA Source Code Review Assist root@kitploit: Author: - Debasis Mohanty [email protected] - Twitter / X: @coffeensecurity - www.coffeeandsecurity.com About Daksh SCRA Daksh SCRA Source Code Review Assist tool is built to enhance the efficiency of the source code review process, providi...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098997)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098997 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: fix a double free in sndac97controllerregister If ac97addadapter fails, putdevice is...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Fixed an off-by-one error in the setupnicdevices cleanup process. In setupnicdevices, the initialization loop jumps to the label setupnicdevfree if there is a failure. The current cleanup loop whilei-- skips the...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: power: supply: cpcap-battery: Fix the issue where the nvmemdeviceput function was not called, leading to a reference leak. In cpcapbatterydetectbatterytype, the reference to an nvmem device obtained through nvmemdevicefind was no...
CVE-2026-4245
The Post Duplicator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.0.11. This is due to the duplicatepostpermissions permission callback only verifying the duplicateposts capability without checking whether the requesting user holds publishposts...
EUVD-2026-64251
The Post Duplicator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.0.11. This is due to the duplicatepostpermissions permission callback only verifying the duplicateposts capability without checking whether the requesting user holds publishposts...
CVE-2026-4245
The Post Duplicator WordPress plugin (all versions up to and including 3.0.11 ) is vulnerable to an authorization bypass in its REST API. The duplicate_post_permissions() callback only verifies the duplicate_posts capability without checking whether the user holds publish_posts or other status-ga...
CVE-2026-20357
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...
CVE-2026-20318
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...
CVE-2026-20317
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...
CVE-2026-20231
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...
CVE-2026-20030
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...
