CVE-2023-35815 – DevExpress XML Deserialization Data-Sourcing Protection Bypass

April 28, 2025

CVE ID : CVE-2023-35815

Published : April 28, 2025, 4:15 p.m. | 2 hours, 50 minutes ago

Description : DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data.

Severity: 3.5 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2023-35816 – DevExpress TypeConverter Remote Code Execution Vulnerability

Next Article CVE-2023-35814 – DevExpress ASP.NET XtraReport Data Serialization Deserialization Vulnerability

Highlights

CVE-2025-6059 – WordPress Seraphinite Accelerator CSRF

June 14, 2025

CVE ID : CVE-2025-6059

Published : June 14, 2025, 3:15 a.m. | 2 hours, 23 minutes ago

Description : The Seraphinite Accelerator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.27.21. This is due to missing or incorrect nonce validation on the ‘OnAdminApi_CacheOpBegin’ function. This makes it possible for unauthenticated attackers to perform several administrative actions, including deleting the cache, via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

Severity: 4.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

How To Prevent WordPress SQL Injection Attacks

This week in AI dev tools: Apple’s Foundations Model framework, Mistral’s first reasoning model, and more (June 13, 2025)

Open Talent platforms emerging to match skilled workers to needs, study finds

Java never goes out of style: Celebrating 30 years of the language

6 registry tweaks every tech-savvy user must apply on Windows 11

Here’s why network infrastructure is vital to maximizing your company’s AI adoption

The AI video tool behind the most viral social trends right now

Got a new password manager? How to clean up the password mess you left in the cloud

Right Invoicing App for iPhone: InvoiceTemple

Right Invoicing App for iPhone: InvoiceTemple

Tunnel Run game in 170 lines of pure JS

Integrating Drupal with Salesforce SSO via SAML and Dynamic User Sync

Windows 11 24H2 tests toggle to turn off Recommended feed in the Start menu

Windows 11 24H2 tests toggle to turn off Recommended feed in the Start menu

User calls Windows 11 “pure horror,” Microsoft says it’s listening to feedback

John the Ripper is an advanced offline password cracker

CVE-2023-35815 – DevExpress XML Deserialization Data-Sourcing Protection Bypass

Microsoft Defender for Identity Flaw (CVE-2025-26685) Allows Unauthenticated Privilege Escalation

The Anatomy of an RCE Attack : The Hacker’s Big Score

LWiAI Podcast #211 – Claude Voice, Flux Kontext, wrong RL research?

CVE-2025-46599 – K3s Kubernetes Kubelet ReadWritePort Remote Authentication Bypass

CVE-2025-28057 – Owl-Admin SQL Injection Vulnerability

CVE-2025-5745 – IBM Power10 GNU C Library Unpredictable String Comparison Vulnerability

CVE-2025-6059 – WordPress Seraphinite Accelerator CSRF

6 Best Free and Open Source Font Editors

CVE-2025-5169 – Assimp MDLImporter Out-of-Bounds Read Vulnerability

Editing client-side encrypted MS Word file now works in Google Docs

CVE-2023-35815 – DevExpress XML Deserialization Data-Sourcing Protection Bypass

Related Posts