Kevin Chen

The Tutor LMS WordPress plugin before 4.1.1 does not perform a capability check in a routine that regenerates its managed pages, allowing unauthenticated users to force-publish unpublished pages and overwrite their content, create missing ones, and change the options that reference them.

**Name of the Vulnerable Software and Affected Versions** Nissan Sylphy Classic version 2021 **Description** The remote keyfob system sends the same RF signal for each door-open request, allowing for a replay attack. The vendor claims this issue cannot be reproduced with genuine Nissan parts, citing a mismatch in the technology used in the exploit demonstration. **Recommendations** For Nissan Sylphy Classic version 2021, consider restricting access to the door handle and keyfob system to minimize the risk of exploitation. As a temporary workaround, avoid using the remote keyfob system for door-open requests until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.