17697 matches found
Malicious Package
Overview a-lbum-do-wnload-avai-lable-file-playing-the-angel-l9tng-nkbcwn is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection...
Malicious Package
Overview a-lbum-do-wnload-avai-lable-file-11522-seven-and-the-ragged-tiger-bkmqg-xorids is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is...
A-xex
A-xex This project is part of a school work focusing on network security. Author not responsable for malicious use. The project is always updating About A-xex Framework A-xex is a simple and intuitive tool, it joins many important tools that can help in a hack action. The goal is to provide a...
CVE-2026-98683
In the Linux kernel, the following vulnerability has been resolved: smb: client: flush dirty data before zeroing a range smb3zerorange emulates FALLOCFLZERORANGE by invalidating the page cache over the target range with truncatepagecacherange and then issuing FSCTLSETZERODATA to the server. Dirty...
CVE-2009-0473-check
Description Simple script to exploit open redirection vulnerability in Rockwell ControlLogix 1756-ENBT/A. Vulnerability Details https://www.cvedetails.com/cve/CVE-2009-0473/ Requirements Python 2.7 You must be running an X Windows environment before executing this script. It will use Python’s...
CVE-2026-18649
CVE-2026-18649 - GStreamer rtph264depay Unbounded Memory Growth DoS Proof of concept for a resource exhaustion vulnerability in GStreamer's H.264 RTP depayloader rtph264depay. The same pattern also affects rtph265depay. What it is During H.264 FU-A fragmented RTP reassembly, each incoming fragmen...
CVE-2026-80092
Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privileges over a network...
EUVD-2026-102953
Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privileges over a network...
CVE-2026-80092
The Microsoft Identity Web component is affected by an authentication bypass vulnerability caused by assumed-immutable data . This flaw allows an authorized attacker to achieve privilege elevation over a network. The vulnerability is associated with CWE-302 . No specific exploit details or remedi...
CVE-2026-18143
CVE-2026-18143 — Request a Quote for WooCommerce Addify Arbitrary File Upload Python 3 PoC for CVE-2026-18143 in Request a Quote for WooCommerce woocommerce-request-a-quote, Addify / WooCommerce.com. Description PoCbit / GitHub CVE-2026-18143 — Request a Quote for WooCommerce ≤ 2.9.2 allows...
CVE-2026-95686
The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'targetUrl' parameter in all versions up to, and including, 1.9.2.1 due to insufficient input sanitization and...
CVE-2026-103525
The FluentCart A New Era of eCommerce WordPress plugin (versions ≤ 1.7.0 ) is vulnerable to an Insecure Direct Object Reference (IDOR) . The issue stems from a lack of validation on the order_id and billing_address_id (or shipping_address_id) parameters within an unauthenticated AJAX entry point....
CVE-2026-103525 FluentCart A New Era of eCommerce <= 1.7.0 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'order_id' and 'billing_address_id' Parameters
The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.7.0 via the 'orderid + billingaddressid also shippingaddressid' parameter due to missing validation on a user...
CVE-2026-103518
The FluentCart WordPress plugin (versions up to and including 1.7.0 ) is vulnerable to a generic SQL Injection flaw. The root cause is insufficient escaping of user-supplied parameters and a lack of sufficient preparation on existing SQL queries involving the 'products[*].variants[*].' parameter....
PT-2026-115978
Name of the Vulnerable Software and Affected Versions Microsoft Identity Web affected versions not specified Description An authentication bypass exists due to the use of assumed-immutable data, which allows an authorized attacker to elevate privileges over a network. Recommendations At the momen...
CVE-2026-80092: Authentication Bypass by Assumed-Immutable Data
Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privileges over a network...
CVE-2026-108446
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-108449
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...