24347 matches found
tsunami-security-scanner
Tsunami Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence. To learn more about Tsunami, visit our documentation. Tsunami relies heavily on its plugin system to provide basic scanning capabilities...
CVE-2026-92554
The ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via Query-String Parameter Name in all versions up to, and including, 3.5.1 due to insufficient input sanitization and output escaping. This makes it...
CVE-2026-14323
The Printcart Web to Print Product Designer for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.8.5 via the 'mockups' parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server...
CVE-2026-14323
The Printcart Web to Print Product Designer for WooCommerce plugin for WordPress is affected by a Directory Traversal vulnerability (all versions up to and including 2.8.5 ) via the 'mockups' parameter, allowing unauthenticated attackers to read arbitrary files on the server containing sensitive ...
CVE-2026-92554
ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin for WordPress is affected by a Reflected Cross-Site Scripting (XSS) vulnerability in all versions up to and including 3.5.1 . The flaw resides in the WL: Product Horizontal Filter widget , which reflects attacker-supplied query...
EUVD-2026-82747
The ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via Query-String Parameter Name in all versions up to, and including, 3.5.1 due to insufficient input sanitization and output escaping. This makes it...
CVE-2024-38639
An improper authentication vulnerability has been reported to affect product. The remote attackers can then exploit the vulnerability to compromise the security of the system. QTS is not affected. We have already fixed the vulnerability in the following version:...
CVE-2026-87771
The Product Question and Answer WordPress plugin through 1.1.0 does not sanitize and escape parameters before using them in SQL queries on AJAX actions available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the...
CVE-2026-87771
The Product Question and Answer WordPress plugin (through 1.1.0 ) is vulnerable to unauthenticated SQL injection via the p_id and read parameters on AJAX actions. The root cause is the failure to sanitize and escape these parameters before using them in SQL queries, allowing an unauthenticated at...
petereport
PeTeReport PeTeReport Pe nTe st Report is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writting and generation of reports. Focused in product security, the tool help security researchers and pentesters to...
autoresponder
AutoResponder Carbon Black Response IR tool for hunting threats in an environment What is it? AutoResponder is a tool aimed to help people to carry out their Incident Response tasks WITH the help of Carbon Black Response's awesome capabilities and WITHOUT much bothering IT/System/Network Teams Wh...
XPKeygen
XPKeygen Un generador de claves VLK para Windows XP / Windows Server 2003. Esta herramienta te permite generar claves válidas de Windows XP basadas en la Raw Product Key Clave de Producto sin procesar, que puede ser aleatoria. La Raw Product Key RPK se proporciona en forma de 9 dígitos XXX-YYYYYY...
CVE-2026-53264
CVE-2026-53264 Descripción: https://vulners.com/cve/CVE-2026-53264 Donar Apoya el mantenimiento de este proyecto con PayPal o escaneando el código QR a continuación. ⚡ Uso Sencillo Usa este proyecto solo en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker...
CVE-2024-51818
CVE-2024-51818 Fancy Product Designer = 6.4.3 - Inyección SQL no autenticada Descripción El plugin Fancy Product Designer para WordPress es vulnerable a la inyección SQL en versiones hasta la 6.4.3, incluida, debido a un escape insuficiente del parámetro proporcionado por el usuario y a la falta ...
recog
Recog: Un Framework de Reconocimiento Recog es un framework para identificar productos, servicios, sistemas operativos y hardware mediante la comparación de huellas contra los datos devueltos por diversas sondas de red. Recog facilita la extracción de información útil de los banners de servidores...
CVE-2024-43918
Wordpress WBW Product Table Pro = 1.9.4 - Ejecución SQL Arbitraria no Autenticada a Ejecución Remota de Código CVE-2024-43918 El plugin WBW Product Table Pro para WordPress es vulnerable a la ejecución SQL arbitraria no autorizada debido a la falta de verificación de capacidades en una función en...
shodan
Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...
Disclosures
Divulgaciones Este repositorio contiene mis informes de vulnerabilidades que no están sujetos a un NDA ni restringidos por los términos de servicio del VRP. Contenido Fancy Product Designer Microsoft Xfinity...