CVE-2026-105097

A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the file /customer-currency/ of the component Customer Information API. The manipulation of the argument ID leads to authorization bypass. Remote exploitation of the attack is possible. The...

WPBookit <= 1.0.8 - Unauthenticated Customer Information Disclosure

WPBookit WordPress plugin = 1.0.8 contains an information disclosure vulnerability caused by missing authorization check on 'getcustomerlist' route, letting unauthenticated attackers retrieve sensitive customer data. id: CVE-2026-1980 info: name: WPBookit = 1.0.8 - Unauthenticated Customer...

CVE-2026-105097

A vulnerability exists in the Customer Information API of Omega Solution CoinEx Crypto 2025 . The issue resides in an unknown function within the /customer-currency/ file, where manipulating the ID argument results in an authorization bypass . Remote exploitation is possible, and a public exploit...

EUVD-2026-92063

A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the file /customer-currency/ of the component Customer Information API. The manipulation of the argument ID leads to authorization bypass. Remote exploitation of the attack is possible. The...

CVE-2023-50071

CVE-2023-50071 Customer Support System 1.0 - 다중 SQL 인젝션 취약점 - savedepartment 설명 : Customer Support System 1.0의 /customersupport/ajax.php?action=savedepartment에서 다중 SQL 인젝션 취약점이 존재하며, 인증된 공격자가 id 또는 name 매개변수를 통해 임의의 SQL 명령을 실행할 수 있습니다. 취약한 제품 버전 : Customer Support System 1.0 CVE 작성자 : Geraldo...

CVE-2026-105096

A vulnerability exists in the Customer Profile API component of Omega Solution CoinEx Crypto 2025 . The flaw resides in an unknown function within the /customer/ file, where a manipulation of the ID argument can lead to an authorization bypass . This vulnerability can be exploited remotely . Whil...

EUVD-2026-92059

A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /customer/ of the component Customer Profile API. Executing a manipulation of the argument ID can lead to authorization bypass. The attack may be launched remotely. The exploit has be...

CVE-2023-50070

CVE-2023-50070 Customer Support System 1.0 - 複数のSQLインジェクション脆弱性 - saveticket 説明 : Customer Support System 1.0の /customersupport/ajax.php?action=saveticket における複数のSQLインジェクション脆弱性により、認証済みの攻撃者が departmentid、customerid、subject を介して任意のSQLコマンドを実行可能です。 脆弱性のある製品バージョン : Customer Support System 1.0 CVE作成者 :...

CVE-2023-49968

CVE-2023-49968 Customer Support System 1.0 - managedepartment.php의 "id" URL 매개변수를 통한 SQL 인젝션 취약점 설명 : Customer Support System 버전 1에 SQL 인젝션 취약점이 존재합니다. 악의적인 공격자는 부서를 편집하는 동안 'id' URL 매개변수를 조작하여 MySQL 데이터베이스에서 SQL 명령을 실행할 수 있습니다. 취약한 제품 버전 : Customer Support System 1.0 CVE 작성자 : Geraldo Alcântara ...

CVE-2023-49546

CVE-2023-49546 Customer Support System 1.0 - 'email' 매개변수의 SQL 인젝션 취약점 'savestaff' 작업 중 설명 : Customer Support System 버전 1에 SQL 인젝션 취약점이 존재합니다. 악의적인 공격자는 취약한 매개변수 'email'을 통해 직원 사용자를 생성/편집할 때 MySQL 데이터베이스에 SQL 명령을 주입할 수 있습니다. 취약한 제품 버전 : Customer Support System 1.0 CVE 작성자 : Geraldo Alcântara 날짜 :...

customer-assistance-buttons-sdr

고객 지원 버튼 연구 이 저장소는 Walgreens, CVS, Lowes, Home Depot 등 소매점의 고객 서비스 버튼에 사용되는 다양한 인코더와 프로토콜을 리버싱하는 데 투입한 작업을 담고 있습니다. 각 소매점은 자체 폴더로 분류되어 있으며, 해당 폴더 내에는 CU8 SDR 신호와 FlipperZero subghz 캡처를 위한 폴더가 있습니다. 이 저장소를 복제하거나, 이 저장소에 링크를 걸 경우 서브모듈로 포함해 주세요. 여기 있는 작업물을 단순히 자신의 저장소에 복사하지 말아 주십시오. 그러면 Github과 커뮤니티...

CVE-2026-100149

The WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.7.3 via the 'x-yamidoo-signature attacker-obtained via inlinejs identify payload' parameter. This makes it possible...

CVE-2026-100149

The WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to and including 4.7.3 . An unauthenticated attacker can exploit an HMAC Signature Collision (due to missing domain separation) in the x...

EUVD-2026-91911

The WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.7.3 via the 'x-yamidoo-signature attacker-obtained via inlinejs identify payload' parameter. This makes it possible...

coreweave-demo-2026-05

Langflow 1.0 이 출시되었습니다! 🎉 여기를 눌러 자세히 알아보기! 다중 에이전트 및 RAG 애플리케이션 구축을 위한 시각적 프레임워크 오픈소스, Python-기반, 전체 커스텀, LLM과 Vector store를 몰라도 사용 가능 문서 - Discord에 참여하기 - X에서 팔로우하기 - 실시간 데모 Your GIF 📝 목차 📝 목차 📦 시작하기 🎨 플로우 만들기 배포 DataStax Langflow Hugging Face Spaces에 Langflow 배포하기 Google Cloud Platform에...

CVE-2026-89055

CVE-2026-89055 — Customer Reviews for WooCommerce CusRev 認可バイパス Customer Reviews for WooCommerce （customer-reviews-woocommerce / Ivole CusRev）における CVE-2026-89055 の Python 3 PoC。 説明 PoCbit / GitHub CVE-2026-89055 — Customer Reviews for WooCommerce CusRev ≤ 5.120.0 は、公開されている ローカルレビューフォーム の AJAX...

CVE-2026-97663

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and including, 5.122.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

WordPress Customer Reviews for WooCommerce plugin <= 5.122.0 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by crow in WordPress Plugin Customer Reviews for WooCommerce versions = 5.122.0...

CVE-2026-97663 Customer Reviews for WooCommerce <= 5.122.0 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and including, 5.122.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

EUVD-2026-91237

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and including, 5.122.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...