stylesmuggler

StyleSmuggler HTTP PoC Privates Forschungs-Repository für die ausschließlich HTTP-basierte Reproduktion von StyleSmuggler, CVE-2026-75650, gegen ein lokales Magento Open Source Lab. Die vollständige technische Analyse finden Sie in Magento StyleSmuggler RCE: Report Poisoning to Code Execution. De...

Exploit for Improper Neutralization of Special Elements Used in a Template Engine in Adobe Commerce

StyleSmuggler HTTP PoC Private research repository for the HT...

📄 WordPress WP Full Stripe Free 8.4.3 Missing Authorization

The WP Full Stripe Free plugin for WordPress is vulnerable to missing authorization in versions up to, and including, 8.4.3 via the wpfsupdatefailedpaymentstatus AJAX action. CVE-2026-12432: WP Full Stripe Free = 8.4.4 - Published: June 26, 2026 - Last Updated: June 27, 2026 - Researcher: Netwurm...

Exploit for CVE-2026-12432

CVE-2026-12432: WP Full Stripe Free = 8.4.4 - Published: J...

PT-2026-53054

The WP Full Stripe Free plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 8.4.3 via the wpfs update failed payment status AJAX action. The handler is registered through both wp ajax and wp ajax nopriv hooks and the underlying update failed payment statu...

CVE-2015-7231: Improper Input Validation

The Commerce Commonwealth CBA module 7.x-1.x before 7.x-1.5 for Drupal does not properly validate payments, which allows remote attackers to make a failed payment appear valid via a crafted URL, related to a "response from commweb."...

PT-2015-7481

Name of the Vulnerable Software and Affected Versions Commerce Commonwealth CBA module versions 7.x-1.x through 7.x-1.4 Description The issue is related to improper validation of payments, allowing remote attackers to make a failed payment appear valid by using a crafted URL. This is related to a...