1805 matches found
conti-pentester-guide-leak
conti-pentester-guide-leak This repository was created to archive leaked leaked pentesting materials, which were previously given to Conti ransomware group affilates: obraz Mentioned materials covers topics such us: configure the Rclone software with a MEGA for data exfiltration configure the...
Joomla! Component Affiliate Datafeeds 880 - Local File Inclusion
A directory traversal vulnerability in the Affiliate Datafeeds comdatafeeds component build 880 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1979 info: name: Joomla! Component Affiliate Datafeeds 880 - Local Fi...
WP AmASIN – The Amazon Affiliate Shop - Local File Inclusion
Absolute path traversal vulnerability in reviews.php in the WP AmASIN - The Amazon Affiliate Shop plugin 0.9.6 and earlier for WordPress allows remote attackers to read arbitrary files via a full pathname in the url parameter. id: CVE-2014-4577 info: name: WP AmASIN – The Amazon Affiliate Shop -...
AffiliateImporterEb <= 1.0.6 - Reflected XSS
AffiliateImporterEb WordPress plugin through 1.0.6 contains a reflected XSS caused by unsanitized and unescaped parameter output, letting attackers execute scripts against high privilege users such as admin, exploit requires crafted request. id: CVE-2024-12732 info: name: AffiliateImporterEb =...
LockBit-Tattoo
LockBit-Tattoo Electronic: ID: 272784 Joined: Jul 20, 2022 Male: BTC: 3HeNJmgecLNHEhVn3JMcboybTgiFx4DGe3 Media: photo2022-09-0822-15-38.jpg Female: BTC: 3HC5eCcYtW27jhD59mg4U3haWr36teiLXB Media: photo2022-09-1101-07-49.jpg photo2022-09-1101-07-54.jpg DegB2W: ID: 272203 Joined: Jul 16, 2022 Male:...
CVE-2026-120835
Deserialization of Untrusted Data vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo allows Object Injection.This issue affects AFFI – Affiliate Marketing for WooCommerce: from n/a through 1.0.11...
CVE-2026-120835 WordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.11 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo allows Object Injection.This issue affects AFFI – Affiliate Marketing for WooCommerce: from n/a through 1.0.11...
EUVD-2026-125416
Deserialization of Untrusted Data vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo allows Object Injection.This issue affects AFFI – Affiliate Marketing for WooCommerce: from n/a through 1.0.11...
CVE-2026-120835
The VillaTheme AFFI – Affiliate Marketing for WooCommerce plugin (affi-affiliate-marketing-for-woo) is vulnerable to a PHP Object Injection flaw caused by the deserialization of untrusted data . This issue affects versions from n/a through 1.0.11 . Successful exploitation can lead to significant ...
PT-2026-146898
Deserialization of Untrusted Data vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo allows Object Injection.This issue affects AFFI – Affiliate Marketing for WooCommerce: from n/a through 1.0.11...
WordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.11 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Siyang Wu in WordPress Plugin AFFI – Affiliate Marketing for WooCommerce versions = 1.0.11...
CVE-2026-106015
The Ecommerce Affiliate WordPress plugin through 1.0.0 does not restrict one-time password issuance and verification to the legitimate account owner, nor limit verification attempts, allowing unauthenticated attackers to take over any account, including administrators...
EUVD-2026-119475
The Ecommerce Affiliate WordPress plugin through 1.0.0 does not restrict one-time password issuance and verification to the legitimate account owner, nor limit verification attempts, allowing unauthenticated attackers to take over any account, including administrators...
CVE-2026-106015
The Ecommerce Affiliate WordPress plugin versions up to and including 1.0.0 is vulnerable to an unauthenticated account takeover. The root cause is that the plugin fails to restrict one-time password (OTP) issuance and verification to the legitimate account owner and does not implement limits on ...
CVE-2026-106015 Ecommerce Affiliate <= 1.0.0 - Unauthenticated Account Takeover via Email OTP Brute Force
The Ecommerce Affiliate WordPress plugin through 1.0.0 does not restrict one-time password issuance and verification to the legitimate account owner, nor limit verification attempts, allowing unauthenticated attackers to take over any account, including administrators...
PT-2026-139906
The Ecommerce Affiliate WordPress plugin through 1.0.0 does not restrict one-time password issuance and verification to the legitimate account owner, nor limit verification attempts, allowing unauthenticated attackers to take over any account, including administrators...
CVE-2026-111070
The Content Pilot – Autoblogging & Affiliate Marketing Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.2.4. This is due to the plugin extracting the HTML meta description from each remotely-fetched article WPCPReadability::parsemeta,...
PT-2026-134473
Name of the Vulnerable Software and Affected Versions The Content Pilot – Autoblogging & Affiliate Marketing Suite versions prior to 2.2.5 Description Stored Cross-Site Scripting occurs when the plugin extracts HTML meta descriptions from remotely-fetched articles using the parse meta function in...
CVE-2026-111070: pluginever Content Pilot – Autoblogging & Affiliate Marketing Suite: The Content Pilot – Autoblogging & Affiliate Marketing Suite plugin for WordPress is vulnerable to Stored Cross-Site…
The Content Pilot – Autoblogging & Affiliate Marketing Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.2.4. This is due to the plugin extracting the HTML meta description from each remotely-fetched article WPCPReadability::parsemeta,...
WordPress Content Pilot – Autoblogging & Affiliate Marketing Suite plugin <= 2.2.4 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Adrien Brunner in WordPress Plugin WP Content Pilot versions = 2.2.4...