Overglade-Badges

Overgladeハッカソンバッジ シンガポールで開催されたOvergladeハッカソン用にデザインしたゼロパワーのバッジです！RP2040を搭載し、パッシブNFCとオンボードのe-inkドライバーを備えています！ カスタム機能 パッシブNFCタップ対応。お好みの用途にお使いいただけます e-ink対応により、バッテリーは不要 プログラミング用にヘッダーピンに引き出された20個のGPIO より複雑な処理を行いたい場合のアクティブNFCモード ゼロパワー：コア機能に電力を必要としません 4MBフラッシュメモリ搭載のRP2040 SoC クールなPCBと露出銅アート PCBデザイン...

purpleteam

purpleteam CLI CLI component of purpleteam - Currently in alpha Installation Simplest npm install -g purpleteam...

dcsgonebadge

DEF CON Singapore One Badge This project manages the hardware design of the Circuit Crafters first project, an electronic hardware badge intended for distribution at the DEF CON Singapore 2026 security conference at the Marina Bay Sands Expo and Convention Centre. License This project is licensed...

CVE-2025-61777

CVE-2025-61777 1. FlagforgeCTF におけるバッジテンプレートの不正変更 CVE-2025-61777 概要 Flagforge アプリケーション（https://flagforge.xyz）は、管理APIエンドポイント、具体的には /api/admin/badge-templates（GET）と...

CVE-2026-88929

The Product Badge, Label, Countdown Timer for WooCommerce WordPress plugin before 7.5.2 does not check whether a product is published before returning its details to unauthenticated users, allowing them to read the title, description and price of draft, pending and private products...

CVE-2026-88929 Sale Booster 7.0.0 - 7.5.1 - Unauthenticated Non-Public Product Disclosure

The Product Badge, Label, Countdown Timer for WooCommerce WordPress plugin before 7.5.2 does not check whether a product is published before returning its details to unauthenticated users, allowing them to read the title, description and price of draft, pending and private products...

EUVD-2026-85051

The Product Badge, Label, Countdown Timer for WooCommerce WordPress plugin before 7.5.2 does not check whether a product is published before returning its details to unauthenticated users, allowing them to read the title, description and price of draft, pending and private products...

CVE-2026-88929

The Product Badge, Label, Countdown Timer for WooCommerce WordPress plugin (versions 7.0.0-7.5.1 ) is vulnerable to an unauthenticated non-public product disclosure . The flaw exists because the plugin fails to verify if a product is published before returning its details to unauthenticated users...

WordPress Product Badge, Label, Countdown Timer for WooCommerce plugin 7.0.0-7.5.1 - Unauthenticated Non-Public Product Disclosure vulnerability

Unauthenticated Non-Public Product Disclosure vulnerability discovered by Que Thanh Tuan in WordPress Plugin Product Badge, Label, Countdown Timer for WooCommerce versions 7.0.0-7.5.1...

gha-lab-232af4821f

自動生成された研究アーティファクト — 上流プロジェクトではありません。 このリポジトリは、ラヴァル大学の修士論文のために、公開されたGitHub Actionsワークフローの脆弱性を再現する目的で自動化ハーネスによって構築された使い捨てラボです。これは、BraveUX/for-the-badge のコミット 409c1fda3477b8dd05f3289926e08d88edd5a664（2021-07-20）時点の逐語的なスナップショットであり、そのプロジェクト自身のライセンスの下で再配布されています。 上流プロジェクトは関与しておらず...

DC30-Badge-Challenge-Writeup

DC30-Badge-Challenge-Writeup Table of Contents はじめに チャレンジパート1: メモの収集 チャレンジパート2: YИИEႱに電話する チャレンジパート2A: アリス チャレンジパート2B: ボブ チャレンジパート2C: キャロル チャレンジパート2D: ダン チャレンジパート2E: イブ チャレンジパート2F: トレバー チャレンジパート3: 最後のスレッド カンファレンスで電話を逃した場合は? 余談 はじめに こんにちは! ピート別名 Kybrです。これは DEF CON 30 バッジチャレンジの writeup です。...

dc34-vault

DC34 vault アプリケーション !WARNING バッジに独自のファームウェアを書き込むと、ライト暗号化キーが消去され、バッジが開発者モードになります。 注意: このリポジトリは現在孤立しており、まもなくアーカイブされます。xous-core に統合されたためです。このリポジトリは、カンファレンス前に非公開にする必要があったため、bunnie の GitHub リポジトリにのみ存在していました。現在は公開されているため、xous-core の一部として保守されます。今後の PR はすべて xous-core に送ってください。Tetris PR...

CVE-2026-84989: Missing Authorization

ntopng is a web-based network traffic monitoring application. In versions 6.7.0 through 6.7.260717, two REST v2 endpoints that manage ntopng's tag/badge feature — POST /lua/rest/v2/delete/tag/tag.lua and POST /lua/rest/v2/edit/tag/tag.lua — perform no authorization check at all. Any authenticated...

EUVD-2026-66418

The vulnerability allows the unauthorised generation of physical access QR codes due to the use of hard-coded credentials within the application. The generation mechanism uses the 'badgenumber' parameter as the HMAC private key, the value of which remains static and is accessible via the API usin...

CVE-2026-18501

The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Badge Widget Variable Substitution in all versions up to, and including, 1.2.69 due to insufficient input sanitization and...

CVE-2026-18501 UsersWP <= 1.2.69 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Badge Widget Variable Substitution

The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Badge Widget Variable Substitution in all versions up to, and including, 1.2.69 due to insufficient input sanitization and...

EUVD-2026-53926

The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Badge Widget Variable Substitution in all versions up to, and including, 1.2.69 due to insufficient input sanitization and...

CVE-2026-18501 UsersWP <= 1.2.69 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Badge Widget Variable Substitution

The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Badge Widget Variable Substitution in all versions up to, and including, 1.2.69 due to insufficient input sanitization and...

CVE-2026-18501

The CVE concerns the UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress. It is vulnerable to Stored Cross-Site Scripting via Badge Widget Variable Substitution in all versions up to and including 1.2.69, caused by insufficient input sanitizati...

CVE-2026-18501 UsersWP <= 1.2.69 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Badge Widget Variable Substitution

The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Badge Widget Variable Substitution in all versions up to, and including, 1.2.69 due to insufficient input sanitization and...