459999 matches found
CVE-2026-107752 Welcart e-Commerce <= 2.12.4 - Authenticated (Editor+) SQL Injection via 'wp_usces_order_old' Cookie
The Welcart e-Commerce plugin for WordPress is vulnerable to generic SQL Injection via the 'wpuscesorderold JSON fields searchSql / searchSkuSql' parameter in all versions up to, and including, 2.12.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation o...
CVE-2026-107752 Welcart e-Commerce <= 2.12.4 - Authenticated (Editor+) SQL Injection via 'wp_usces_order_old' Cookie
The Welcart e-Commerce plugin for WordPress is vulnerable to generic SQL Injection via the 'wpuscesorderold JSON fields searchSql / searchSkuSql' parameter in all versions up to, and including, 2.12.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation o...
pythonSQLInjection_Practica
Simulación y Mitigación de SQL Injection 1. Descripción de...
ReadyScript SQL Injection
The vulnerability of the ReadyScript e-commerce management system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
ReadyScript e-commerce management system Session Management
The vulnerability of the ReadyScript e-commerce management system is related to improper session management. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
ReadyScript e-commerce management system File Upload
The vulnerability of the ReadyScript e-commerce management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to load any desired files...
ReadyScript e-commerce management system Sequence Data Compromise
The vulnerability of the ReadyScript e-commerce management system is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...
ReadyScript e-commerce management system File Upload
The vulnerability of the ReadyScript e-commerce management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to load any desired files...
EUVD-2026-103197
Text::CSVXS versions before 1.65 for Perl allow record splitting by writing strings used as numbers without quotes in combine. combine and print do not check whether a field needs quotes when its value has Perl's integer or numeric flag set. Perl sets these flags on a string used in a numeric...
CVE-2026-110757
Text::CSVXS versions before 1.65 for Perl allow record splitting by writing strings used as numbers without quotes in combine. combine and print do not check whether a field needs quotes when its value has Perl's integer or numeric flag set. Perl sets these flags on a string used in a numeric...
abdal-anydesk-remote-ip-detector
AnyDesk IP Leak Vulnerability CVE-2024-52940 🎤 README Translation English Deutsch فارسی 📸 Screenshot 🎥 Proof of Concept Videos To see the AnyDesk IP Leak Vulnerability in action, you can download the PoC demonstration videos below: 📥 Download Proof 01 📥 Download Proof 02 Recommended - 📥 Download...
BobTheSmuggler
BobTheSmuggler Quick Update Jan 15th, 2024 -Support for multi-file compression has been added. If you have multiple files generated for your final payload e.g., DLL-Sideloading files or multi-stage delivery files, you can now use the '-i' option to specify the directory path. If a directory path ...
nate158g-m-w-n-l-p-d-a-o-e
nate158g-m-w-n-l-p-d-a-o-e This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-frameworkclass MetasploitModule 'Wordpress Popular Posts Authenticated RCE', 'Description' = %q This exploit requires Metasploit to have a FQDN and the...
r2ai
R2AI - Augmented reversing with LLM for radare2 ╭─────────────────────────────────╮ │ , . . , │ ╭──╮ │ : \ \ |: \ : | │ │ │ │ | |/ || , || : | │ │ O O | : \ \ . || : || | │ │ │╷ │ | |\ :||| || | │ │ ││ │ || : |||| │ │ ─╯│ ╰─────────────────────────────────╯ ╰───╯ Components This repository...
OGhidra
OGhidra 3 - AI-Powered Reverse Engineering with Ghidra For the version using a Claude-inspired Orchestrator, see https://github.com/llnl/OGhidra/tree/orchestrator OGhidra bridges Large Language Models with Ghidra's reverse engineering platform, enabling AI-driven binary analysis through natural...
CVE-2022-0847
CVE-2022-0847 Dirty Pipe Linux Kernel Privilege Escalation Analysis toc This article was first published on Huawei Security's official account, this is the blog version more complete First published link: https://mp.weixin.qq.com/s/6VhWBOzJ7uu80nzFxe5jpg Vulnerability Introduction Vulnerability I...
xtrace-sdk
The encrypted vector database. Your data never leaves your machine in plaintext. Documentation | X | LinkedIn Manage your AI memory → mem.xtrace.ai What is XTrace? Every vector database on the market requires you to hand your data to a third party in plaintext. XTrace doesn't. Your documents and...
A-Red-Teamer-diaries
A Red-Teamer diaries Publicly accessible notes about my pentesting/red teaming experiments tested on several controlled environments/infrastructures that involve playing with various tools and techniques used by penetration testers and redteamers during a security assessment. Project in progress...
LdrShuffle
LdrShuffle Stealthy code execution via modification of the EntryPoint of loaded modules at runtime. Summary Windows processses have various modules loaded at runtime. Each of theses modules has a DllMain function defined, which will be invoked on process or thread creation/destruction four possib...