Lucene search
+L

500 matches found

Kitploit
Kitploit
added 2026/09/12 6:21 a.m.12 views

pe-bear-old

PE-bear releases PE-bear es una herramienta gratuita de reversión para archivos PE. Su objetivo es ofrecer una «primera vista» rápida y flexible para los analistas de malware, estable y capaz de manejar archivos PE malformados. Firmas para PE-bear: SIG.txt actualizado: 22.01.2014 - contiene firma...

5.9AI score
SaveExploits0References3
NVD
NVD
added 2026/09/12 6:16 a.m.7 views

CVE-2026-84024

The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce before saving its meta field configuration, allowing an attacker to overwrite that configuration by tricking a logged-in administrator into visiting a crafted page...

4.3CVSS0.00097EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/12 6:16 a.m.8 views

CVE-2026-84023

The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce or check user capabilities before updating taxonomy terms, allowing an attacker to modify arbitrary terms by tricking a logged-in privileged user into visiting a crafted page...

6.5CVSS0.00097EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/12 6:16 a.m.8 views

CVE-2026-84025

The BEAR WordPress plugin before 1.2.2 does not perform ownership checks on several handlers that return product data by a user-supplied identifier, allowing users who are restricted to their own products to read other owners' product information, including protected downloadable file URLs and...

2.2CVSS0.00132EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/12 6:00 a.m.8 views

CVE-2026-84024 BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Meta Field Configuration Update via CSRF

The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce before saving its meta field configuration, allowing an attacker to overwrite that configuration by tricking a logged-in administrator into visiting a crafted page...

0.00097EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/12 6:00 a.m.8 views

CVE-2026-84025 BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Authenticated Product Download URL and Meta Disclosure via IDOR

The BEAR WordPress plugin before 1.2.2 does not perform ownership checks on several handlers that return product data by a user-supplied identifier, allowing users who are restricted to their own products to read other owners' product information, including protected downloadable file URLs and...

0.00132EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/12 6:00 a.m.5 views

EUVD-2026-76792

The BEAR WordPress plugin before 1.2.2 does not perform ownership checks on several handlers that return product data by a user-supplied identifier, allowing users who are restricted to their own products to read other owners' product information, including protected downloadable file URLs and...

2.2CVSS0.00132EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/12 6:00 a.m.4 views

EUVD-2026-76791

The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce before saving its meta field configuration, allowing an attacker to overwrite that configuration by tricking a logged-in administrator into visiting a crafted page...

4.3CVSS0.00097EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/12 6:00 a.m.7 views

CVE-2026-84024

The BEAR – Bulk Editor and Products Manager Professional for WooCommerce plugin (WordPress) before 1.2.2 fails to verify a CSRF nonce before saving its meta field configuration. An attacker can exploit this by tricking a logged-in administrator into visiting a crafted page, resulting in an unauth...

4.3CVSS0.00097EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/12 6:00 a.m.7 views

CVE-2026-84023 BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Taxonomy Term Modification via CSRF

The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce or check user capabilities before updating taxonomy terms, allowing an attacker to modify arbitrary terms by tricking a logged-in privileged user into visiting a crafted page...

0.00097EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/12 6:00 a.m.5 views

EUVD-2026-76790

The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce or check user capabilities before updating taxonomy terms, allowing an attacker to modify arbitrary terms by tricking a logged-in privileged user into visiting a crafted page...

6.5CVSS0.00097EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/12 6:00 a.m.6 views

CVE-2026-84023

BEAR – Bulk Editor and Products Manager Professional for WooCommerce , a WordPress plugin, is affected in versions before 1.2.2 . The vulnerability stems from the plugin's failure to verify a CSRF nonce or check user capabilities before allowing updates to taxonomy terms. An attacker can modify a...

6.5CVSS0.00097EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/12 6:00 a.m.6 views

CVE-2026-84025

BEAR – Bulk Editor and Products Manager Professional for WooCommerce (WordPress plugin) versions before 1.2.2 are affected by an IDOR (Insecure Direct Object Reference) vulnerability. Several handlers that return product data by a user-supplied identifier fail to perform ownership checks, allowin...

2.2CVSS0.00132EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 3:17 a.m.5 views

pe-bear

PE-bear PE-bear 是一个跨平台的 PE 文件逆向工具。其目标是提供快速灵活的“第一印象”,适用于恶意软件分析师,稳定且能够处理畸形 PE 文件。 PE-bear 的特征库: SIG.txt(更新于 2022 年 10 月 17 日)- 包含来自PEid's UserDB 的特征——由 crashish 提供的脚本转换而来 构建版本 📦 ⚙️ 下载最新的发布版本。 Windows 打包 也可通过以下方式获取: Chocolatey Scoop WinGet(winget install pe-bear) 测试构建 🧪 最新的测试构建 (早于官方发布)可从 AppVeyor...

5.8AI score
SaveExploits0References12
Kitploit
Kitploit
added 2026/09/11 8:26 p.m.3 views

BEAR-C2

BEAR-C2 Framework de Simulación de Adversarios BEAR-C2 es un framework de simulación y emulación de adversarios construido en torno a TTPs del mundo real inspiradas en grupos APT rusos, chinos, norcoreanos e iraníes. Proporciona un entorno flexible para diversos escenarios de compromiso y ofrece...

SaveExploits0
Patchstack
Patchstack
added 2026/09/11 2:02 p.m.5 views

WordPress Teddy Bear Customize Addon plugin <= 1.0.5 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by 0xBassia in WordPress Plugin Teddy Bear Customize Addon versions = 1.0.5...

10CVSS0.00442EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/09/11 2:01 p.m.4 views

WordPress Teddy Bear Customize Addon plugin <= 1.0.5 - Unauthenticated Account Takeover vulnerability

Unauthenticated Account Takeover vulnerability discovered by 0xBassia in WordPress Plugin Teddy Bear Customize Addon versions = 1.0.5...

9.8CVSS0.00277EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2026/09/11 7:16 a.m.7 views

CVE-2026-14562

The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not perform any authorization or ownership checks before returning WooCommerce order metadata and the URLs of customer-uploaded attachments, allowing unauthenticated attackers to disclose other customers' order and attachment data...

5.3CVSS0.00206EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/11 7:16 a.m.7 views

CVE-2026-14559

The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not verify a user's password before authenticating them, allowing unauthenticated attackers to log in as any registered user, including administrators, by supplying only that user's email address...

9.8CVSS0.00277EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/11 7:16 a.m.9 views

CVE-2026-14560

The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not properly validate uploaded files, relying on a client-supplied content type and preserving the original filename, allowing unauthenticated attackers to upload arbitrary PHP files and execute code on the server...

10CVSS0.00442EPSS
SaveExploits0References1
Rows per page
Query Builder