CVE-2026-76801: Improper Privilege Management

The FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.1.10 via the value function. This is due to a trivially bypassable regex blacklist in Executer::allowedToR...

Malicious code in ro-executer (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2966 Malicious code in ro-executer (npm)

--- -= Per source details. Do not edit below this line.=-...

Privilege Escalation

Lines of code Vulnerability details Impact An attacker with permissions to the INSTR.store function can obtain the "executor" and "admin" role. This implementation also gives space to human error because when the Kernel's executor changes, the permissions to INSTR.store needs to be changed manual...

IBM-Algorithmics-RICOS 4.7.0 /ricos470/Executer 信息泄漏漏洞

No description provided by source...

CVE-2014-0864

Multiple cross-site request forgery CSRF vulnerabilities in Executer in RICOS in IBM Algo Credit Limits aka ACLM 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allow remote attackers to hijack the authentication of arbitrary users for requests that change 1 a deal's currency or 2 a...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Executer in RICOS in IBM Algo Credit Limits aka ACLM 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allow remote attackers to hijack the authentication of arbitrary users for requests that change 1 a deal's currency or 2 a...

CVE-2014-0864: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Executer in RICOS in IBM Algo Credit Limits aka ACLM 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allow remote attackers to hijack the authentication of arbitrary users for requests that change 1 a deal's currency or 2 a...

A-PDF WAV to MP3 v1.0.0 Universal Local SEH Exploit

Exploit for windows platform in category local exploits =================================================== A-PDF WAV to MP3 v1.0.0 Universal Local SEH Exploit =================================================== !/usr/bin/env python Title: A-PDF WAV to MP3 v1.0.0 Universal Local SEH Exploit Exloi...

Joomla Simple Shop Galore Component 3.x (catid) SQL Injection

No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ @ Joomla option: comsimpleshop SQL Injection ------------------------------------------------------ @ AUTHOR: eXeCuTeR executerxatgmaildotcom...

Joomla! Component Simple Shop Galore 3.x - catid SQL Injection

Joomla! Component Simple Shop Galore 3.x - catid SQL Injection ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ @ Joomla option: comsimpleshop SQL Injection ------------------------------------------------------ @ AUTHOR: eXeCuTeR...

Joomla Simple Shop Galore Component 3.x (catid) SQL Injection

Exploit for unknown platform in category web applications ============================================================= Joomla Simple Shop Galore Component 3.x catid SQL Injection =============================================================...