27692 matches found
CVE-2026-104801 PPOM <= 34.0.10 - Unauthenticated Arbitrary File Deletion via 'ppom[fields][<data_name>][n][org]' Parameter
The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the renamefiles function in all versions up to, and including, 34.0.10 This makes it possible for unauthenticated attackers to delete...
CVE-2026-104801
The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to unauthenticated arbitrary file deletion in all versions up to and including 34.0.10 . The root cause is insufficient file path validation within the rename_files function, specifically triggered via th...
CVE-2026-103889
The 3D Product configurator for WooCommerce plugin for WordPress (versions
EUVD-2026-96055
The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.16.2 via the 'xpvimage' parameter parameter. This is due to missing authentication and nonce checks on the wploaded handler combined with no sanitization...
recog
Recog: Un Framework de Reconocimiento Recog es un framework para identificar productos, servicios, sistemas operativos y hardware mediante la comparación de huellas contra los datos devueltos por diversas sondas de red. Recog facilita la extracción de información útil de los banners de servidores...
tsunami-security-scanner
Tsunami Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence. To learn more about Tsunami, visit our documentation. Tsunami relies heavily on its plugin system to provide basic scanning capabilities...
CVE-2024-24135
CVE-2024-24135：产品库存与导出到Excel - 跨站脚本 概念验证PoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24135.md 概念验证PoC : https://github.com/BurakSevben/CVE-2024-24135/blob/main/CVE-2024-24135.md...
XPKeygen
XPKeygen Un generador de claves VLK para Windows XP / Windows Server 2003. Esta herramienta te permite generar claves válidas de Windows XP basadas en la Raw Product Key Clave de Producto sin procesar, que puede ser aleatoria. La Raw Product Key RPK se proporciona en forma de 9 dígitos XXX-YYYYYY...
CVE-2026-49777
CVE-2026-49777 CVE-2026-49777 - ShapedPlugin Product Slider Pro for WooCommerce 后门远程代码执行 RCE 深入技术分析：Product Slider Pro 后门漏洞 漏洞基础与成因 CWE-1284 该漏洞的技术起源被归类为 CWE-1284："对输入中指定数量验证不当"。这意味着软件接收用户输入，预期用户指定数量（例如大小、长度、数量），但未能正确验证该输入。攻击者可以利用此漏洞发送与正常预期不同的恶意输入，导致系统表现出意外行为。 . 受影响版本与补丁状态 受影响版本：3.5.3 之前的所有版本。...
autoresponder
AutoResponder Carbon Black Response IR tool for hunting threats in an environment What is it? AutoResponder is a tool aimed to help people to carry out their Incident Response tasks WITH the help of Carbon Black Response's awesome capabilities and WITHOUT much bothering IT/System/Network Teams Wh...
petereport
PeTeReport PeTeReport Pe nTe st Report is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writting and generation of reports. Focused in product security, the tool help security researchers and pentesters to...
CVE-2024-50508
CVE-2024-50508 Woocommerce Product Design = 1.0.0 - Descarga Arbitraria de Archivos No Autenticada Descripción El plugin Woocommerce Product Design para WordPress es vulnerable a Directory Traversal en todas las versiones hasta, e incluyendo, 1.0.0. Esto permite que atacantes no autenticados lean...
shodan
Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...
CVE-2026-53264
CVE-2026-53264 Descripción: https://vulners.com/cve/CVE-2026-53264 Donar Apoya el mantenimiento de este proyecto con PayPal o escaneando el código QR a continuación. ⚡ Uso Sencillo Usa este proyecto solo en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker...
WordPress PPOM – Product Addons & Custom Fields for WooCommerce plugin <= 34.0.10 - Unauthenticated Arbitrary File Deletion vulnerability
Unauthenticated Arbitrary File Deletion vulnerability discovered by whatm in WordPress Plugin PPOM for WooCommerce versions = 34.0.10...
WordPress 3D Product configurator for WooCommerce plugin <= 2.16.2 - Unauthenticated Remote Code Execution vulnerability
Unauthenticated Remote Code Execution vulnerability discovered by Osman Hussein in WordPress Plugin 3D Product configurator for WooCommerce versions = 2.16.2...
WordPress SKU Error Fixer for WooCommerce plugin <= 1.0 - Unauthenticated Orphaned Product Variation Deletion vulnerability
Unauthenticated Orphaned Product Variation Deletion vulnerability discovered by Naoki Kawahigashi in WordPress Plugin SKU Error Fixer for WooCommerce versions = 1.0...
CVE-2026-105872
Deserialization of Untrusted Data vulnerability in mklacroix Product Configurator for WooCommerce product-configurator-for-woocommerce allows Object Injection.This issue affects Product Configurator for WooCommerce: from n/a through 1.7.5...
EUVD-2026-95772
Deserialization of Untrusted Data vulnerability in mklacroix Product Configurator for WooCommerce product-configurator-for-woocommerce allows Object Injection.This issue affects Product Configurator for WooCommerce: from n/a through 1.7.5...