publications

Publications from Trail of Bits Publications from Trail of Bits Academic Papers White Papers Guides and Handbooks Conference Presentations Automated bug finding and exploitation Blockchain Compilers Cryptography Engineering Education Infrastructure Machine Learning Mobile security Programming Sid...

publications

Publicaciones de Trail of Bits Publicaciones de Trail of Bits Artículos académicos Libros blancos Guías y manuales Presentaciones de conferencias Detección y explotación automatizada de bugs Blockchain Compiladores Criptografía Ingeniería Educación Infraestructura Aprendizaje automático Seguridad...

aws-security-assessment-solution

Self-Service Security Assessment Solutions v2.0 Cybersecurity remains a very important topic and point of concern for many CIOs, CISOs, and their customers. To meet these important concerns, AWS has developed a primary set of services customers should use to aid in protecting their accounts. Amaz...

Mintinstall-object-injection

TR El administrador de software de Linux Mint v 7.9.5/9 provoca la inyección de objetos y la ejecución de código arbitrario debido a una configuración incorrecta. EN El administrador de software de Linux Mint v 7.9.5/9 nos hace ejecutar inyección de objetos y código arbitrario debido a una...

CVE-2021-39475

CVE-2021-39475 管理后台评论页面上的XSS漏洞 https://www.warcloudsecurity.com/ecommerce/admin/reviews.php?action=preview&rID=1&page=0...

Site Reviews < 7.2.5 - Unauthenticated Stored XSS

Site Reviews WordPress plugin before 7.2.5 contains a stored cross-site scripting caused by improper sanitization and escaping of review fields, letting unauthenticated users execute malicious scripts, exploit requires no authentication. id: CVE-2025-1232 info: name: Site Reviews 7.2.5 -...

mapsdumper

root@kitploit: ▒█▀▄▀█ ░█▀▀█ ▒█▀▀█ ▒█▀▀▀█ ▒█▀▀▄ ▒█░▒█ ▒█▀▄▀█ ▒█▀▀█ ▒█▀▀▀ ▒█▀▀█ ▒█▒█▒█ ▒█▄▄█ ▒█▄▄█ ░▀▀▀▄▄ ▒█░▒█ ▒█░▒█ ▒█▒█▒█ ▒█▄▄█ ▒█▀▀▀ ▒█▄▄▀ ▒█░░▒█ ▒█░▒█ ▒█░░░ ▒█▄▄▄█ ▒█▄▄▀ ░▀▄▄▀ ▒█░░▒█ ▒█░░░ ▒█▄▄▄ ▒█░▒█ by: @Tegal1337 MAPSDUMPER Demo • Installation • Feature • Credits A tool for dumping place...

rcno-reviews

Reseñas de Libros Recencio Un plugin de WordPress para gestionar y mostrar reseñas de libros. Tipo de contenido personalizado, 7 taxonomías, 13 shortcodes, 7 widgets, 6 plantillas, 5 extensiones. Todos los datos almacenados en metadatos estándar de WordPress — sin tablas personalizadas...

WordPress Customer Reviews for WooCommerce plugin < 5.118.0 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by rasul in WordPress Plugin Customer Reviews for WooCommerce versions 5.118.0...

CVE-2026-76585

The Customer Reviews for WooCommerce WordPress plugin before 5.118.0 does not sanitise and escape the content of customer reviews received via one of its endpoints, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks...

EUVD-2026-68157

The Customer Reviews for WooCommerce WordPress plugin before 5.118.0 does not sanitise and escape the content of customer reviews received via one of its endpoints, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks...

CVE-2026-76585 Customer Reviews for WooCommerce < 5.118.0 - Unauthenticated Stored XSS via 'comment' Parameter

The Customer Reviews for WooCommerce WordPress plugin before 5.118.0 does not sanitise and escape the content of customer reviews received via one of its endpoints, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks...

CVE-2026-76585

CVE-2026-76585 affects the Customer Reviews for WooCommerce WordPress plugin in versions before 5.118.0 . The plugin fails to sanitise and escape customer review content received via the comment parameter of one of its endpoints, allowing unauthenticated attackers to perform Stored Cross-Site Scr...

CVE-2024-50945

CVE-2024-50945 Descrizione SimplCommerce è affetto da una vulnerabilità di controllo degli accessi non corretti nel sistema di recensioni, che consente a utenti non autorizzati di pubblicare recensioni per prodotti che non hanno acquistato. Metodo di rilevamento Un attaccante può rilevare questa...

CVE-2026-6176

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the aggregated review form submission in versions up to and including 5.106.0. This is due to insufficient input sanitization and output escaping on user-supplied review comment text. The...

WordPress Customer Reviews for WooCommerce plugin <= 5.106.0 - Unauthenticated Stored Cross-Site Scripting via Aggregated Review Form vulnerability

Unauthenticated Stored Cross-Site Scripting via Aggregated Review Form vulnerability discovered by daroo in WordPress Plugin Customer Reviews for WooCommerce versions = 5.106.0...

EUVD-2026-67711

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the aggregated review form submission in versions up to and including 5.106.0. This is due to insufficient input sanitization and output escaping on user-supplied review comment text. The...

CVE-2026-6176

The Customer Reviews for WooCommerce WordPress plugin is vulnerable to unauthenticated Stored Cross-Site Scripting in versions up to and including 5.106.0 . The root cause is insufficient input sanitization and output escaping: review comment text submitted via the cr_local_forms_submit AJAX acti...

CVE-2026-6176 Customer Reviews for WooCommerce <= 5.106.0 - Unauthenticated Stored Cross-Site Scripting via Aggregated Review Form

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the aggregated review form submission in versions up to and including 5.106.0. This is due to insufficient input sanitization and output escaping on user-supplied review comment text. The...

raptor

Raptor is a web-based web-serivce + UI github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can setup webhooks to ensure automated scans every-time you commit or merge a pull request. The scan is done asynchonously and the results are available...