buyer-eval-skill

Buyer Eval An AI analyst for buying B2B software. Give it the vendors you're considering. Buyer Eval investigates what they claim, checks the evidence, finds the gaps and contradictions, and gives you the questions to ask before you buy. You get a Decision Brief you can forward to everyone else...

ibm-sterling-b2b-integrator-poc

IBM Sterling B2B Integrator PoC Proof of concept code for the exploitation of the vulnerabilities discovered against IBM Sterling B2B Integrator, versions 6.2.0.0 to 6.2.0.2, and 6.0.0.0 to 6.1.2.5 for Linux, Windows and AIX systems: LPE Command Injection - if authentication is disabled Pre-auth...

CVE-2026-96769

The Extend B2B - Companies and Users Management for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 via the registercompanyapi. This makes it possible for unauthenticated attackers to extract sensitive company data...

EUVD-2026-120751

The Extend B2B - Companies and Users Management for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 via the registercompanyapi. This makes it possible for unauthenticated attackers to extract sensitive company data...

CVE-2026-96769

The Extend B2B - Companies and Users Management for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to and including 2.1.4 . The root cause lies in the register_company_api (specifically the /wp/v2/aio_company REST endpoint), which allows unauth...

CVE-2026-96769 Extend B2B - Companies and Users Management for WooCommerce <= 2.1.4 - Unauthenticated Sensitive Information Exposure in /wp/v2/aio_company REST Endpoint

The Extend B2B - Companies and Users Management for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 via the registercompanyapi. This makes it possible for unauthenticated attackers to extract sensitive company data...

CVE-2026-96769: Codup Extend B2B - Companies and Users Management for WooCommerce: The Extend B2B - Companies and Users Management for WooCommerce plugin for WordPress is vulnerable to Sensitive…

The Extend B2B - Companies and Users Management for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 via the registercompanyapi. This makes it possible for unauthenticated attackers to extract sensitive company data...

WordPress Extend B2B - Companies and Users Management for WooCommerce plugin <= 2.1.4 - Unauthenticated Sensitive Information Exposure in /wp/v2/aio_company REST Endpoint vulnerability

WordPress Extend B2B - Companies and Users Management for WooCommerce plugin = 2.1.4 - Unauthenticated Sensitive Information Exposure in /wp/v2/aiocompany REST Endpoint vulnerability discovered by Luis Koleski luis0x2 in WordPress Plugin Extend B2B - Companies and Users Management for WooCommerce...

CVE-2026-81209

IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.21, 6.2.2.0 - 6.2.2.11 and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.21, 6.2.2.0 - 6.2.2.11 Standard Edition could allow a remote authenticated attacker to obtain sensitive information due to improper logging of sensitive credentials...

CVE-2026-19307

IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.21 and 6.2.2.0 through 6.2.2.11, and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.21 and 6.2.2.0 through 6.2.2.11 Standard Edition could allow a remote authenticated attacker to access unauthorized pages due to improper authorization...

EUVD-2026-119727

IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.21, 6.2.2.0 - 6.2.2.11 and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.21, 6.2.2.0 - 6.2.2.11 Standard Edition could allow a remote authenticated attacker to obtain sensitive information due to improper logging of sensitive credentials...

CVE-2026-81209

IBM Sterling B2B Integrator and IBM Sterling File Gateway (Standard Edition) are vulnerable to CVE-2026-81209 due to improper logging of sensitive credentials (CWE-532 ). This flaw could allow a remote authenticated attacker to obtain sensitive information. Affected versions include B2B Integrato...

CVE-2026-81209 Sensitive Information in Log files affects IBM Sterling B2B Integrator and IBM Sterling File Gateway

IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.21, 6.2.2.0 - 6.2.2.11 and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.21, 6.2.2.0 - 6.2.2.11 Standard Edition could allow a remote authenticated attacker to obtain sensitive information due to improper logging of sensitive credentials...

CVE-2026-19307

IBM Sterling B2B Integrator and IBM Sterling File Gateway (Standard Edition) are affected by an improper authorization vulnerability (CWE-285). A remote authenticated attacker could exploit this to access unauthorized pages. The affected versions include IBM Sterling B2B Integrator versions 6.2.1...

CVE-2026-19307 Improper Authorization vulnerability affects IBM Sterling B2B Integrator and IBM Sterling File Gateway

IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.21 and 6.2.2.0 through 6.2.2.11, and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.21 and 6.2.2.0 through 6.2.2.11 Standard Edition could allow a remote authenticated attacker to access unauthorized pages due to improper authorization...

EUVD-2026-119707

IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.21 and 6.2.2.0 through 6.2.2.11, and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.21 and 6.2.2.0 through 6.2.2.11 Standard Edition could allow a remote authenticated attacker to access unauthorized pages due to improper authorization...

CVE-2026-12737

IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.11 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.11 stores potentially sensitive information in log files that could be read by a local privileged user...

EUVD-2026-119677

IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.11 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.11 stores potentially sensitive information in log files that could be read by a local privileged user...

CVE-2026-12737 IBM Sterling B2B Integrator and IBM Sterling File Gateway affected by Exposure of Sensitive Information in Logs Vulnerability

IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.11 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.11 stores potentially sensitive information in log files that could be read by a local privileged user...

CVE-2026-12737

IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.2.2.0 through 6.2.2.1_1 are affected by a vulnerability (CWE-532) where potentially sensitive information is stored in log files. This information could be accessed by a local privileged user . To remediate this, users should ap...