EUVD-2026-93236

Unauthenticated Cross Site Scripting XSS in Smart Forms = 2.6.104 versions...

CVE-2026-32574

The WordPress Smart Forms plugin versions

CVE-2026-32574 WordPress Smart Forms plugin <= 2.6.104 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Smart Forms = 2.6.104 versions...

CVE-2026-32574 WordPress Smart Forms plugin <= 2.6.104 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Smart Forms = 2.6.104 versions...

CVE-2026-9998-Insecure-Deserialization-in-Blockchain-Oracle

10. CVE-2026-9998 – Désérialisation non sécurisée dans l'oracle blockchain Présentation Un nœud oracle blockchain désérialise des données provenant d'un événement de contrat intelligent à l'aide de pickle de Python, ce qui permet à un attaquant d'exécuter des commandes arbitraires. Sévérité :...

PT-2026-106401

Name of the Vulnerable Software and Affected Versions Smart Forms versions prior to 2.6.105 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication. Recommendations...

PT-2026-106408

🚨 CVE-2026-39719 Unauthenticated Server Side Request Forgery SSRF in PDF Smart Viewer for Elementor = 1.0.4 versions. 🎖@cveNotify...

PT-2026-106424

Unauthenticated Cross Site Scripting XSS in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart = 2.0.6 versions...

Langflow: Prompt injection in Langflow Smart Transform can lead to code execution

Summary Langflow versions 1.3.0 through 1.10.2 contain a code-injection vulnerability in the Smart Transform LambdaFilterComponent component. Smart Transform places flow-author instructions and a preview of its input data into a prompt asking an LLM to generate a Python lambda. It then extracts a...

GHSA-9FPM-3445-2VX4 Langflow: Prompt injection in Langflow Smart Transform can lead to code execution

Summary Langflow versions 1.3.0 through 1.10.2 contain a code-injection vulnerability in the Smart Transform LambdaFilterComponent component. Smart Transform places flow-author instructions and a preview of its input data into a prompt asking an LLM to generate a Python lambda. It then extracts a...

LinksysLeaks

LinksysLeaks سكربت Python3 لفحص أجهزة Linksys الذكية القابلة للاتصال WiFi المعرّضة لثغرة CVE-2014-8244 أُنشئ هذا السكربت لمساعدتي في العثور على أجهزة WiFi الذكية القابلة للاتصال التي تسرّب معلومات حساسة، والمعروفة بثغرة CVE-2014-8244. لديك خيار إما فحص عنوان IP واحد أو ملف نصي يحتوي على عناوين IP...

@orpc/zod: Prototype injection in smart coercion

Summary ZodSmartCoercionPlugin and experimentalZodSmartCoercionPlugin mishandle object keys that name Object.prototype members. Both coerce request input before validation, so any client that can reach a procedure whose input schema contains an object or a record can: 1. replace the prototype of...

WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Pedro Pinho in WordPress Plugin StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart versions = 2.0.6...

dameflare

DameFlare تنفيذ تعليمات برمجية عن بعد غير مصرح به عبر تجاوز مصادقة البطاقة الذكية في SolarWinds Dameware MRC CVE-2019-3980 | CVSS 9.8 حرج | TCP/6129 البحث الأصلي وإثبات المفهوم: Tenable, Inc. TRA-2019-43 أداة Python 3: David Boyd @Fir3d0g كيف يعمل يكشف Dameware MRC عن خدمة تحكم عن بعد DWRCS.exe ع...

Astra Linux – Vulnerability in opensc

A stack overflow vulnerability exists in the OpenSC smart card middleware before version 0.23, due to improper responses to APDUs...

Astra Linux – Vulnerability in mbedtls

A vulnerability was discovered in Arm Mbed TLS before versions 2.16.6 and 2.7.x, prior to 2.7.15. An attacker who can obtain precise side-channel measurements can recover the long-term ECDSA private key by 1 reconstructing the projective coordinates of the result of scalar multiplication by...

Astra Linux – Vulnerability in opensc

The TCOS smart card software driver in OpenSC before version 0.21.0-rc1 has a stack-based buffer overflow in the tcosdecipher function...

OpenSC.tokend

OpenSC.tokend Le pilote de cartes à puce open source pour OS X Un tokend fait apparaître les clés et certificats de votre carte à puce dans Keychain Access.app et les rend disponibles aux applications telles que Safari ou Chrome. OpenSC.tokend est l'implémentation open source de tokend d'OpenSC,...

OpenSC

Documentation d'OpenSC Le wiki est disponible en ligne Veuillez consulter la documentation avant d'essayer d'utiliser OpenSC. Statut de construction et de test des cartes spécifiques : Cartes| Statut ---|--- CAC| Coolkey|...

CVE-2023-3836

POC لرفع الملفات publishing في منصة الإدارة الشاملة للحديقة الذكية من Dahua تثبيت التبعيات pip install argparse requests rich ملاحظة: يتم استخدام بيئة Python 3 الاستخدام python CVE-2023-3836.py -h تنسيق URL داخل الملف نتائج التشغيل...