dcsgonebadge

DEF CON Singapore One Badge This project manages the hardware design of the Circuit Crafters first project, an electronic hardware badge intended for distribution at the DEF CON Singapore 2026 security conference at the Marina Bay Sands Expo and Convention Centre. License This project is licensed...

Overglade-Badges

Overglade Hackathon Badges These are zero-power hackathon badges I designed for the overglade hackathon in singapore! They're powered by the RP2040 and have passive NFC and an onboard e-ink driver! Custom Features Passive NFC tap for whatever your heart desires E-ink support so that you don't nee...

CVE-2026-120671

The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'badge' parameter in all versions up to, and including, 1.2.80 due to insufficient input sanitization and output escaping...

CVE-2026-120671 UsersWP <= 1.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'badge' Shortcode Attribute

The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'badge' parameter in all versions up to, and including, 1.2.80 due to insufficient input sanitization and output escaping...

EUVD-2026-118020

The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'badge' parameter in all versions up to, and including, 1.2.80 due to insufficient input sanitization and output escaping...

CVE-2026-120671

The UsersWP plugin for WordPress (versions up to and including 1.2.80 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The flaw resides in the 'badge' shortcode attribute due to insufficient input sanitization and output escaping. Authenticated attackers with Contributor-level access or hig...

purpleteam

purpleteam CLI CLI component of purpleteam - Currently in alpha Installation Simplest npm install -g purpleteam If you want to debug Clone this repository. Configuration Copy the config/config.example.json to either config/config.local.json or config/config.cloud.json depending on which...

CVE-2026-105602

Joomla Extension - joomshaper.com - Stored Cross-Site Scripting XSS in Mega Menu Badge Text in Helix Ultimate 2.2.11...

CVE-2026-105602 Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate < 2.2.11.

Joomla Extension - joomshaper.com - Stored Cross-Site Scripting XSS in Mega Menu Badge Text in Helix Ultimate 2.2.11...

EUVD-2026-115176

Joomla Extension - joomshaper.com - Stored Cross-Site Scripting XSS in Mega Menu Badge Text in Helix Ultimate 2.2.11...

CVE-2026-105602

The Helix Ultimate Joomla extension by joomshaper.com is vulnerable to Stored Cross-Site Scripting (XSS) in versions prior to 2.2.11 . The vulnerability exists within the Mega Menu Badge Text component, where improper neutralization of input allows for malicious script execution. This issue is as...

CVE-2026-105602 Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate < 2.2.11.

Joomla Extension - joomshaper.com - Stored Cross-Site Scripting XSS in Mega Menu Badge Text in Helix Ultimate 2.2.11...

CVE-2026-105602: joomshaper.com Helix Ultimate extension for Joomla: Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate <…

Joomla Extension - joomshaper.com - Stored Cross-Site Scripting XSS in Mega Menu Badge Text in Helix Ultimate 2.2.11...

PT-2026-135424

Joomla Extension - joomshaper.com - Stored Cross-Site Scripting XSS in Mega Menu Badge Text in Helix Ultimate 2.2.11...

DC30-Badge-Challenge-Writeup

DC30-Badge-Challenge-Writeup Table of Contents Intro Challenge Part 1: Gathering Notes Challenge Part 2: Calling YИИEႱ Challenge Part 2A: Alice Challenge Part 2B: Bob Challenge Part 2C: Carol Challenge Part 2D: Dan Challenge Part 2E: Eve Challenge Part 2F: Trevor Challenge Part 3: The Final Threa...

dc34-vault

DC34 vault Application !WARNING Loading your own firmware onto your badge will wipe the light encryption key and cause your badge to enter developer mode. NOTICE: this repo is now orphaned and will be archived soon, as it is now merged into xous-core. It only existed in the bunnie github reposito...

gha-lab-232af4821f

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of BraveUX/for-the-badge at commit...

CVE-2025-61777

CVE-2025-61777 1. Unauthorized modification of badge templates on FlagforgeCTF CVE-2025-61777 Summary The Flagforge application https://flagforge.xyz exposes critical vulnerabilities in its administrative API endpoints, specifically /api/admin/badge-templates GET and...

CVE-2026-84989

ntopng is a web-based network traffic monitoring application. In versions 6.7.0 through 6.7.260717, two REST v2 endpoints that manage ntopng's tag/badge feature — POST /lua/rest/v2/delete/tag/tag.lua and POST /lua/rest/v2/edit/tag/tag.lua — perform no authorization check at all. Any authenticated...

CVE-2026-113487

The GeoDirectory WordPress plugin before 2.8.196 does not properly sanitise or escape a post badge click-through link value before outputting it in an anchor element on a listing, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks against...