EUVD-2025-209818

The Broadstreet plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.53.1 via the getsponsoredmeta AJAX action. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract data from password protect...

Awesome-BEC

Awesome-BEC Repository of attack and defensive information for Business Email Compromise investigations Office365/AzureAD ATT&CK O365 ATT&CK Azure Microsoft Azure Threat Research Matrix Microsoft 365 Licensing Microsoft Portals Azure App IDs Microsoft First Party App IDs & Graph Permissions...

CVE-2026-102107

Kiteworks Core contains a business logic flaw in a Kiteworks file-request feature allowed an authenticated user to send a request that appeared to originate from another user, because the server did not verify that the requester was authorized to act as the specified account. This could be used t...

Carnivore

Publicado como código abierto por NCC Group Plc - https://www.nccgroup.com/ Desarrollado por Chris Nevin, [email protected] https://www.github.com/nccgroup/carnivore Publicado bajo la licencia AGPL https://www.github.com/nccgroup/carnivore/license Carnivore - V.1.0.4 Herramienta de Evaluació...

CVE-2026-102107

Kiteworks Core contains a business logic flaw within its file-request feature. This flaw allows an authenticated user to send requests that appear to originate from a different user because the server fails to verify if the requester is authorized to act as the specified account. An attacker coul...

CVE-2025-61882-CVE-2025-61884

CVE-2025-61882 & CVE-2025-61884 EDIT: Oracle just disclosed a new vulnerability CVE-2025-61884, the detection script for that vuln can be found in this repo or originally here:https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550. As quoted from Oracle's security advisory: This Securit...

watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882

watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882 Generador de artefactos de detección para Oracle E-Business Suite CVE-2025-61882 Consulte nuestra publicación en el blog para obtener detalles técnicos Detección en acción python3 watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882.py --command...

CVE-2026-62097

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPTasty Business Directory business-directory-plugin allows Blind SQL Injection.This issue affects Business Directory: from n/a through 6.4.27...

CVE-2026-62097 WordPress Business Directory plugin <= 6.4.27 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPTasty Business Directory business-directory-plugin allows Blind SQL Injection.This issue affects Business Directory: from n/a through 6.4.27...

EUVD-2026-89957

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPTasty Business Directory business-directory-plugin allows Blind SQL Injection.This issue affects Business Directory: from n/a through 6.4.27...

CVE-2026-62097

The WPTasty Business Directory plugin for WordPress (versions n/a through 6.4.27 ) is vulnerable to Blind SQL Injection due to the Improper Neutralization of Special Elements used in an SQL Command . This flaw allows an attacker with high privileges to execute malicious SQL queries. No specific e...

CVE-2026-94173

Contributor Insecure Direct Object References IDOR in Business Directory = 6.4.27 versions...

CVE-2026-94173 WordPress Business Directory plugin <= 6.4.27 - Insecure Direct Object References (IDOR) vulnerability

Contributor Insecure Direct Object References IDOR in Business Directory = 6.4.27 versions...

EUVD-2026-89841

Contributor Insecure Direct Object References IDOR in Business Directory = 6.4.27 versions...

CVE-2026-94173 WordPress Business Directory plugin <= 6.4.27 - Insecure Direct Object References (IDOR) vulnerability

Contributor Insecure Direct Object References IDOR in Business Directory = 6.4.27 versions...

CVE-2026-94173

The WordPress Business Directory plugin (versions

WordPress Business Directory plugin <= 6.4.27 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Business Directory versions = 6.4.27...

trappsec

trappsec trappsec is an open-source framework that helps developers detect attackers who probe API business logic. By embedding realistic decoy routes and honey fields that are difficult to distinguish from real API constructs, attackers are nudged to authenticate — converting reconnaissance into...

tirreno

tirreno tirreno es un software de análisis de seguridad abierto. tirreno tir.ˈrɛ.no ayuda a entender, monitorear y proteger tus aplicaciones de amenazas cibernéticas, robos de cuentas, bots y abusos. Mientras que la ciberseguridad clásica se centra en la infraestructura y el perímetro de red, la...

CVE-2026-86789

The Connections Business Directory WordPress plugin through 10.4.67 does not apply its visibility and moderation-status restrictions on certain REST API read endpoints, allowing unauthenticated attackers to retrieve directory entries that are marked private or unlisted, or that are still pending...