EUVD-2026-93236

Unauthenticated Cross Site Scripting XSS in Smart Forms = 2.6.104 versions...

CVE-2026-32574 WordPress Smart Forms plugin <= 2.6.104 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Smart Forms = 2.6.104 versions...

CVE-2026-32574

The WordPress Smart Forms plugin versions

CVE-2026-32574 WordPress Smart Forms plugin <= 2.6.104 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Smart Forms = 2.6.104 versions...

CVE-2026-9998-Insecure-Deserialization-in-Blockchain-Oracle

10. CVE-2026-9998 – Désérialisation non sécurisée dans l'oracle blockchain Présentation Un nœud oracle blockchain désérialise des données provenant d'un événement de contrat intelligent à l'aide de pickle de Python, ce qui permet à un attaquant d'exécuter des commandes arbitraires. Sévérité :...

PT-2026-106401

Name of the Vulnerable Software and Affected Versions Smart Forms versions prior to 2.6.105 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication. Recommendations...

PT-2026-106408

🚨 CVE-2026-39719 Unauthenticated Server Side Request Forgery SSRF in PDF Smart Viewer for Elementor = 1.0.4 versions. 🎖@cveNotify...

PT-2026-106424

Unauthenticated Cross Site Scripting XSS in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart = 2.0.6 versions...

GHSA-9FPM-3445-2VX4 Langflow: Prompt injection in Langflow Smart Transform can lead to code execution

Summary Langflow versions 1.3.0 through 1.10.2 contain a code-injection vulnerability in the Smart Transform LambdaFilterComponent component. Smart Transform places flow-author instructions and a preview of its input data into a prompt asking an LLM to generate a Python lambda. It then extracts a...

Langflow: Prompt injection in Langflow Smart Transform can lead to code execution

Summary Langflow versions 1.3.0 through 1.10.2 contain a code-injection vulnerability in the Smart Transform LambdaFilterComponent component. Smart Transform places flow-author instructions and a preview of its input data into a prompt asking an LLM to generate a Python lambda. It then extracts a...

LinksysLeaks

LinksysLeaks Script Python3 pour scanner les appareils Linksys Smart Wi-Fi vulnérables à la CVE-2014-8244 Ce script a été créé pour m'aider à trouver les appareils Smart Wi-Fi vulnérables qui divulguent des informations sensibles, connue sous le nom de CVE-2014-8244. Vous avez la possibilité de...

@orpc/zod: Prototype injection in smart coercion

Summary ZodSmartCoercionPlugin and experimentalZodSmartCoercionPlugin mishandle object keys that name Object.prototype members. Both coerce request input before validation, so any client that can reach a procedure whose input schema contains an object or a record can: 1. replace the prototype of...

WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Pedro Pinho in WordPress Plugin StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart versions = 2.0.6...

dameflare

DameFlare RCE non authentifié via contournement de l'authentification par carte à puce dans SolarWinds Dameware MRC CVE-2019-3980 | CVSS 9.8 Critique | TCP/6129 Recherche originale et POC : Tenable, Inc. TRA-2019-43 Outil Python 3 : David Boyd @Fir3d0g Comment ça fonctionne Dameware MRC expose un...

Astra Linux – Vulnerability in opensc

The TCOS smart card software driver in OpenSC before version 0.21.0-rc1 has a stack-based buffer overflow in the tcosdecipher function...

Astra Linux – Vulnerability in opensc

A stack overflow vulnerability exists in the OpenSC smart card middleware before version 0.23, due to improper responses to APDUs...

Astra Linux – Vulnerability in mbedtls

A vulnerability was discovered in Arm Mbed TLS before versions 2.16.6 and 2.7.x, prior to 2.7.15. An attacker who can obtain precise side-channel measurements can recover the long-term ECDSA private key by 1 reconstructing the projective coordinates of the result of scalar multiplication by...

OpenSC.tokend

OpenSC.tokend Le pilote de cartes à puce open source pour OS X Un tokend fait apparaître les clés et certificats de votre carte à puce dans Keychain Access.app et les rend disponibles aux applications telles que Safari ou Chrome. OpenSC.tokend est l'implémentation open source de tokend d'OpenSC,...

OpenSC

Documentation d'OpenSC Le wiki est disponible en ligne Veuillez consulter la documentation avant d'essayer d'utiliser OpenSC. Statut de construction et de test des cartes spécifiques : Cartes| Statut ---|--- CAC| Coolkey|...

CVE-2023-3836

POC de téléchargement de fichier publishing de la plateforme de gestion intégrée du campus intelligent Dahua Installation des dépendances pip install argparse requests rich Remarque : utiliser un environnement Python 3. Utilisation python CVE-2023-3836.py -h Format d'URL dans le fichier Résultat ...