500 matches found
pe-bear-old
PE-bear releases PE-bear es una herramienta gratuita de reversión para archivos PE. Su objetivo es ofrecer una «primera vista» rápida y flexible para los analistas de malware, estable y capaz de manejar archivos PE malformados. Firmas para PE-bear: SIG.txt actualizado: 22.01.2014 - contiene firma...
CVE-2026-84024
The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce before saving its meta field configuration, allowing an attacker to overwrite that configuration by tricking a logged-in administrator into visiting a crafted page...
CVE-2026-84023
The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce or check user capabilities before updating taxonomy terms, allowing an attacker to modify arbitrary terms by tricking a logged-in privileged user into visiting a crafted page...
CVE-2026-84025
The BEAR WordPress plugin before 1.2.2 does not perform ownership checks on several handlers that return product data by a user-supplied identifier, allowing users who are restricted to their own products to read other owners' product information, including protected downloadable file URLs and...
CVE-2026-84024 BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Meta Field Configuration Update via CSRF
The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce before saving its meta field configuration, allowing an attacker to overwrite that configuration by tricking a logged-in administrator into visiting a crafted page...
CVE-2026-84025 BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Authenticated Product Download URL and Meta Disclosure via IDOR
The BEAR WordPress plugin before 1.2.2 does not perform ownership checks on several handlers that return product data by a user-supplied identifier, allowing users who are restricted to their own products to read other owners' product information, including protected downloadable file URLs and...
EUVD-2026-76792
The BEAR WordPress plugin before 1.2.2 does not perform ownership checks on several handlers that return product data by a user-supplied identifier, allowing users who are restricted to their own products to read other owners' product information, including protected downloadable file URLs and...
EUVD-2026-76791
The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce before saving its meta field configuration, allowing an attacker to overwrite that configuration by tricking a logged-in administrator into visiting a crafted page...
CVE-2026-84024
The BEAR – Bulk Editor and Products Manager Professional for WooCommerce plugin (WordPress) before 1.2.2 fails to verify a CSRF nonce before saving its meta field configuration. An attacker can exploit this by tricking a logged-in administrator into visiting a crafted page, resulting in an unauth...
CVE-2026-84023 BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Taxonomy Term Modification via CSRF
The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce or check user capabilities before updating taxonomy terms, allowing an attacker to modify arbitrary terms by tricking a logged-in privileged user into visiting a crafted page...
EUVD-2026-76790
The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce or check user capabilities before updating taxonomy terms, allowing an attacker to modify arbitrary terms by tricking a logged-in privileged user into visiting a crafted page...
CVE-2026-84023
BEAR – Bulk Editor and Products Manager Professional for WooCommerce , a WordPress plugin, is affected in versions before 1.2.2 . The vulnerability stems from the plugin's failure to verify a CSRF nonce or check user capabilities before allowing updates to taxonomy terms. An attacker can modify a...
CVE-2026-84025
BEAR – Bulk Editor and Products Manager Professional for WooCommerce (WordPress plugin) versions before 1.2.2 are affected by an IDOR (Insecure Direct Object Reference) vulnerability. Several handlers that return product data by a user-supplied identifier fail to perform ownership checks, allowin...
pe-bear
PE-bear PE-bear 是一个跨平台的 PE 文件逆向工具。其目标是提供快速灵活的“第一印象”,适用于恶意软件分析师,稳定且能够处理畸形 PE 文件。 PE-bear 的特征库: SIG.txt(更新于 2022 年 10 月 17 日)- 包含来自PEid's UserDB 的特征——由 crashish 提供的脚本转换而来 构建版本 📦 ⚙️ 下载最新的发布版本。 Windows 打包 也可通过以下方式获取: Chocolatey Scoop WinGet(winget install pe-bear) 测试构建 🧪 最新的测试构建 (早于官方发布)可从 AppVeyor...
BEAR-C2
BEAR-C2 Framework de Simulación de Adversarios BEAR-C2 es un framework de simulación y emulación de adversarios construido en torno a TTPs del mundo real inspiradas en grupos APT rusos, chinos, norcoreanos e iraníes. Proporciona un entorno flexible para diversos escenarios de compromiso y ofrece...
WordPress Teddy Bear Customize Addon plugin <= 1.0.5 - Unauthenticated Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload vulnerability discovered by 0xBassia in WordPress Plugin Teddy Bear Customize Addon versions = 1.0.5...
WordPress Teddy Bear Customize Addon plugin <= 1.0.5 - Unauthenticated Account Takeover vulnerability
Unauthenticated Account Takeover vulnerability discovered by 0xBassia in WordPress Plugin Teddy Bear Customize Addon versions = 1.0.5...
CVE-2026-14562
The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not perform any authorization or ownership checks before returning WooCommerce order metadata and the URLs of customer-uploaded attachments, allowing unauthenticated attackers to disclose other customers' order and attachment data...
CVE-2026-14559
The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not verify a user's password before authenticating them, allowing unauthenticated attackers to log in as any registered user, including administrators, by supplying only that user's email address...
CVE-2026-14560
The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not properly validate uploaded files, relying on a client-supplied content type and preserving the original filename, allowing unauthenticated attackers to upload arbitrary PHP files and execute code on the server...