16306 matches found
EUVD-2026-93236
Unauthenticated Cross Site Scripting XSS in Smart Forms = 2.6.104 versions...
CVE-2026-32574 WordPress Smart Forms plugin <= 2.6.104 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Smart Forms = 2.6.104 versions...
CVE-2026-32574
The WordPress Smart Forms plugin versions
CVE-2026-32574 WordPress Smart Forms plugin <= 2.6.104 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Smart Forms = 2.6.104 versions...
CVE-2026-9998-Insecure-Deserialization-in-Blockchain-Oracle
10. CVE-2026-9998 – 블록체인 오라클의 안전하지 않은 역직렬화 개요 블록체인 오라클 노드가 스마트 계약 이벤트의 데이터를 Python의 pickle로 역직렬화하여, 공격자가 임의의 명령을 실행할 수 있게 합니다. 심각도: 치명적전체 노드 손상 오라클 시뮬레이션 및 익스플로잇 !/usr/bin/env python3 """ vulnerableoracle.py - Oracle node that listens to events and deserializes data unsafely. """ import pickle,...
PT-2026-106401
Name of the Vulnerable Software and Affected Versions Smart Forms versions prior to 2.6.105 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication. Recommendations...
PT-2026-106408
🚨 CVE-2026-39719 Unauthenticated Server Side Request Forgery SSRF in PDF Smart Viewer for Elementor = 1.0.4 versions. 🎖@cveNotify...
PT-2026-106424
Unauthenticated Cross Site Scripting XSS in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart = 2.0.6 versions...
Langflow: Prompt injection in Langflow Smart Transform can lead to code execution
Summary Langflow versions 1.3.0 through 1.10.2 contain a code-injection vulnerability in the Smart Transform LambdaFilterComponent component. Smart Transform places flow-author instructions and a preview of its input data into a prompt asking an LLM to generate a Python lambda. It then extracts a...
GHSA-9FPM-3445-2VX4 Langflow: Prompt injection in Langflow Smart Transform can lead to code execution
Summary Langflow versions 1.3.0 through 1.10.2 contain a code-injection vulnerability in the Smart Transform LambdaFilterComponent component. Smart Transform places flow-author instructions and a preview of its input data into a prompt asking an LLM to generate a Python lambda. It then extracts a...
LinksysLeaks
LinksysLeaks CVE-2014-8244에 취약한 Linksys 스마트 WiFi 장치를 스캔하는 Python3 스크립트 이 스크립트는 CVE-2014-8244로 알려진, 민감한 정보를 유출하는 취약한 스마트 WiFi 장치를 찾기 위해 만들어졌습니다. 단일 IP 또는 여러 IP가 포함된 텍스트 파일을 스캔할 수 있습니다. 선택적 인수로는 스캔할 포트, 타임아웃, 발견된 장치를 텍스트 파일로 저장, 관리자 비밀번호 확인이 있습니다. 현재 스크립트는 장치를 발견하고 기본 비밀번호 "admin"이 사용 중인지만 확인합니다. 다...
@orpc/zod: Prototype injection in smart coercion
Summary ZodSmartCoercionPlugin and experimentalZodSmartCoercionPlugin mishandle object keys that name Object.prototype members. Both coerce request input before validation, so any client that can reach a procedure whose input schema contains an object or a record can: 1. replace the prototype of...
WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Pedro Pinho in WordPress Plugin StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart versions = 2.0.6...
dameflare
DameFlare Неаутентифицированное удалённое выполнение кода через обход аутентификации смарт-карты в SolarWinds Dameware MRC CVE-2019-3980 | CVSS 9.8 Критический | TCP/6129 Оригинальное исследование и POC: Tenable, Inc. TRA-2019-43 Инструмент на Python 3: David Boyd @Fir3d0g Как это работает Damewa...
Astra Linux – Vulnerability in opensc
The TCOS smart card software driver in OpenSC before version 0.21.0-rc1 has a stack-based buffer overflow in the tcosdecipher function...
Astra Linux – Vulnerability in opensc
A stack overflow vulnerability exists in the OpenSC smart card middleware before version 0.23, due to improper responses to APDUs...
Astra Linux – Vulnerability in mbedtls
A vulnerability was discovered in Arm Mbed TLS before versions 2.16.6 and 2.7.x, prior to 2.7.15. An attacker who can obtain precise side-channel measurements can recover the long-term ECDSA private key by 1 reconstructing the projective coordinates of the result of scalar multiplication by...
OpenSC.tokend
OpenSC.tokend 오픈 소스 OS X 스마트 카드 드라이버 tokend 는 스마트 카드의 키와 인증서가 Keychain Access.app 에 표시되고 Safari나 Chrome 같은 애플리케이션에서 사용할 수 있게 해줍니다. OpenSC.tokend는 OpenSC의 오픈 소스 tokend 구현체로, 실제로 볼 수 있는 다양한 실사용 PKI 스마트 카드를 지원합니다. OS X에서의 tokend 지원 역사 2005년 OS X 10.4 "Tiger"에서 Apple은 서드파티 스마트 카드를 다른 네이티브 OS X 애플리케이션...