dmi-tcat

DMI TCAT 디지털 방법론 이니셔티브 트위터 캡처 및 분석 도구 세트DMI-TCAT는 트위터에서 트윗을 검색 및 수집하고 다양한 방식으로 분석할 수 있게 해줍니다. 설치 자세한 설치 지침은 위키에서 확인할 수 있습니다. 요구 사항 Twitter API 자격 증명 https://apps.twitter.com에서 얻을 수 있음 다음 Linux 배포판 중 하나: Ubuntu 18.04 Debian 9. ... 또는 Docker 실험적 Debian 및 Ubuntu 실행: curl...

PT-2026-108872

The Shipping for Nova Poshta WordPress plugin through 1.19.8 does not perform any authorisation, nonce or ownership checks on one of its AJAX actions available to unauthenticated users, allowing anyone to delete the shipment records of arbitrary orders and to make the store issue the carrier's...

EUVD-2026-94334

wger is a free, open-source workout and fitness manager. Versions prior to 2.6 have a vulnerability in the authentication/session lifecycle of wger where bearer-style API credentials remain valid after a user logs out and after a user changes their password. An attacker who steals a victim’s DRF...

CVE-2026-46437

The open-source fitness manager wger contains a vulnerability in its authentication and session lifecycle affecting versions prior to 2.6 . Specifically, bearer-style API credentials —including DRF authtokens and JWT refresh tokens —remain valid even after a user performs a logout or a password c...

CVE-2023-5359

CVE-2023-5359 - W3 Total Cache 平文保存の脆弱性 説明 CVE-2023-5359 は、WordPress プラグイン W3 Total Cache のバージョン ≤ 2.7.5 に影響する平文保存の脆弱性です。この脆弱性により、リモートの攻撃者は、公開されている暗号化されていない PHP ファイルに保存された機密の認証情報にアクセスできます。 深刻度 CVSS スコア : 7.5 高 ベクター : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N タイプ : 機密情報の露出 技術的な脆弱性 根本原因 W3 Total...

CVE-2026-104119

The Simple Shopping Cart WordPress plugin, in versions before 5.2.6 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to escape certain settings field values before they are rendered on an admin settings page . This flaw allows high-privilege users, such as admi...

CVE-2026-104119 Simple Shopping Cart < 5.2.6 - Admin+ Stored XSS via PayPal API Credentials

The Simple Shopping Cart WordPress plugin before 5.2.6 does not escape some of its settings field values before outputting them on an admin settings page, allowing high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks, which is notably impactful on multisite...

CVE-2026-104119 Simple Shopping Cart < 5.2.6 - Admin+ Stored XSS via PayPal API Credentials

The Simple Shopping Cart WordPress plugin before 5.2.6 does not escape some of its settings field values before outputting them on an admin settings page, allowing high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks, which is notably impactful on multisite...

CVE-2026-96255

The Payments for Hubtel WordPress plugin before 1.0.2 does not prevent public access to a debug log in which it records payment requests, including the store's payment gateway API credentials in plain text, allowing unauthenticated attackers to obtain those credentials...

CVE-2026-96255

The Payments for Hubtel WordPress plugin, in versions prior to 1.0.2 , is vulnerable to an unauthenticated information disclosure flaw. The plugin fails to restrict public access to a debug log that records payment requests. This log contains the store's payment gateway API credentials in plain t...

EUVD-2026-90520

The Payments for Hubtel WordPress plugin before 1.0.2 does not prevent public access to a debug log in which it records payment requests, including the store's payment gateway API credentials in plain text, allowing unauthenticated attackers to obtain those credentials...

PT-2026-103710

The Payments for Hubtel WordPress plugin before 1.0.2 does not prevent public access to a debug log in which it records payment requests, including the store's payment gateway API credentials in plain text, allowing unauthenticated attackers to obtain those credentials...

CVE-2026-96255: Exposure of Sensitive Information to an Unauthorized Actor

The Payments for Hubtel WordPress plugin before 1.0.2 does not prevent public access to a debug log in which it records payment requests, including the store's payment gateway API credentials in plain text, allowing unauthenticated attackers to obtain those credentials...

PT-2026-105837

Summary The OAuth token fallback file storage in OAuthConfig. save tokens to file creates token files containing access tokens, refresh tokens, and cloud IDs with default filesystem permissions typically 0644 on Linux, world-readable. Any local user on a shared system can read these files to obta...

CVE-2026-100859

Heym before 0.0.106 contains a credential exfiltration vulnerability in the POST /api/credentials/test endpoint that allows collaborators with shared credential access to exfiltrate the credential owner's secret. Attackers can override the destination URL in the config parameter to cause the serv...

CVE-2026-100859

The Heym application (versions before 0.0.106 ) is vulnerable to a credential exfiltration flaw in the POST /api/credentials/test endpoint. The root cause is an URL override vulnerability where collaborators with shared credential access can manipulate the config parameter. By overriding the dest...

CVE-2026-100859 Heym before 0.0.106 Credential Exfiltration via URL Override

Heym before 0.0.106 contains a credential exfiltration vulnerability in the POST /api/credentials/test endpoint that allows collaborators with shared credential access to exfiltrate the credential owner's secret. Attackers can override the destination URL in the config parameter to cause the serv...

CVE-2026-100859 Heym before 0.0.106 Credential Exfiltration via URL Override

Heym before 0.0.106 contains a credential exfiltration vulnerability in the POST /api/credentials/test endpoint that allows collaborators with shared credential access to exfiltrate the credential owner's secret. Attackers can override the destination URL in the config parameter to cause the serv...

EUVD-2026-87824

Heym before 0.0.106 contains a credential exfiltration vulnerability in the POST /api/credentials/test endpoint that allows collaborators with shared credential access to exfiltrate the credential owner's secret. Attackers can override the destination URL in the config parameter to cause the serv...

CVE-2026-100859: Server-Side Request Forgery (SSRF)

Heym before 0.0.106 contains a credential exfiltration vulnerability in the POST /api/credentials/test endpoint that allows collaborators with shared credential access to exfiltrate the credential owner's secret. Attackers can override the destination URL in the config parameter to cause the serv...