1541 matches found
CVE-2026-108579
OpenPanel through 2.3.0 contains a CSV formula injection vulnerability that allows unauthenticated attackers to embed spreadsheet formulas by supplying crafted profile IDs to the /track endpoint. Attackers can send tracking events with profile IDs like =HYPERLINK... matching a cohort, so exported...
CVE-2026-108579 OpenPanel through 2.3.0 CSV Formula Injection via Cohort Member Export
OpenPanel through 2.3.0 contains a CSV formula injection vulnerability that allows unauthenticated attackers to embed spreadsheet formulas by supplying crafted profile IDs to the /track endpoint. Attackers can send tracking events with profile IDs like =HYPERLINK... matching a cohort, so exported...
CVE-2026-108579
OpenPanel versions through 2.3.0 are vulnerable to a CSV formula injection vulnerability via the Cohort Member Export feature. Unauthenticated attackers can supply crafted profile IDs (e.g., =HYPERLINK(...)) to the /track endpoint. When a cohort is exported to a CSV file, these embedded formulas ...
EUVD-2026-96362
OpenPanel through 2.3.0 contains a CSV formula injection vulnerability that allows unauthenticated attackers to embed spreadsheet formulas by supplying crafted profile IDs to the /track endpoint. Attackers can send tracking events with profile IDs like =HYPERLINK... matching a cohort, so exported...
privacybadger
隐私獾 隐私獾是一款浏览器扩展，能够自动学习阻止隐藏的追踪器。隐私獾由领先的数字权利非营利组织 EFF 开发，旨在阻止公司监视您。 隐私獾发送 全球隐私控制 信号以选择退出数据共享和售卖，并发送 Do Not Track 信号告知公司不要追踪您。如果追踪器忽视这些信号，隐私獾将学会阻止它们。 除了自动拦截追踪器，隐私獾还内置了隐私功能，例如针对可能有用的追踪器（视频播放器、评论插件等）的 点击激活替换功能，以及对 Facebook 和 Google 的链接清理。 要了解更多信息，请参阅 隐私獾主页的常见问题解答。 隐私獾受 EFF 的公共项目行为准则 约束。 安装 要安装隐私獾，请访问...
dependency-track
OWASP Dependency-Track Dependency-Track 是一个智能组件分析平台，使组织能够识别并降低软件供应链中的风险。Dependency-Track 通过利用软件物料清单（SBOM）的能力，采用了一种独特且极具价值的方法。 !YouTubehttps://...
Schneider Electric U.motion Builder - SQL Injection
The vulnerability exists within processing of trackimportexport.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the objectid input parameter. id: CVE-2018-7765 info: name: Schneider Electric U.motion...
social-engineer-toolkit
The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...
CVE-2026-106200
An use after free flaw was found in the Track component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568422505...
cve-2026-25676
Investigación sobre CVE-2026-25676 Secuestro de la ruta de búsqueda de DLL en el instalador de M-Track Duo HD Descripción general Este repositorio contiene investigación inicial y una prueba de concepto relacionada con CVE-2026-25676, una vulnerabilidad de secuestro de la ruta de búsqueda de DLL...
WordPress Track Orders for WooCommerce plugin < 1.2.7 - Unauthenticated PII Disclosure vulnerability
Unauthenticated PII Disclosure vulnerability discovered by Pedro Pinho in WordPress Plugin Track Orders for WooCommerce versions 1.2.7...
CVE-2026-94275
The Track Orders for WooCommerce WordPress plugin before 1.2.7 does not verify ownership of an order before returning its billing details, allowing unauthenticated attackers to obtain a customer's name, email address, phone number, postal address and order history by supplying that customer's ema...
CVE-2026-94275 Track Orders for WooCommerce < 1.2.7 - Unauthenticated PII Disclosure via 'email' Parameter
The Track Orders for WooCommerce WordPress plugin before 1.2.7 does not verify ownership of an order before returning its billing details, allowing unauthenticated attackers to obtain a customer's name, email address, phone number, postal address and order history by supplying that customer's ema...
EUVD-2026-94754
The Track Orders for WooCommerce WordPress plugin before 1.2.7 does not verify ownership of an order before returning its billing details, allowing unauthenticated attackers to obtain a customer's name, email address, phone number, postal address and order history by supplying that customer's ema...
CVE-2026-94275
The Track Orders for WooCommerce WordPress plugin (versions before 1.2.7 ) contains an unauthenticated PII disclosure vulnerability. The root cause is a failure to verify order ownership before returning billing details. An unauthenticated attacker can obtain sensitive information, including a cu...
CVE-2026-106347
An use after free flaw was found in the Track component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567936270...
PT-2026-107850
The Track Orders for WooCommerce WordPress plugin before 1.2.7 does not verify ownership of an order before returning its billing details, allowing unauthenticated attackers to obtain a customer's name, email address, phone number, postal address and order history by supplying that customer's ema...
Linux Distros Unpatched Vulnerability : CVE-2026-106347
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...
Linux Distros Unpatched Vulnerability : CVE-2026-106200
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...
