Lucene search
+L

2081 matches found

Kitploit
Kitploit
added 2026/09/15 5:29 p.m.9 views

kangaroo

Kangaroo GPU-accelerated Pollard's Kangaroo algorithm for solving the Elliptic Curve Discrete Logarithm Problem ECDLP on secp256k1. Features 🖥️ Cross-platform GPU — Vulkan AMD, NVIDIA, Intel, Metal Apple Silicon, DX12 Windows via wgpu 🦀 Pure Rust + WGSL — no CUDA dependency, compute shaders...

6.1AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/15 4:44 p.m.17 views

batchOverflow

batchOverflow A fix for the batchOverflow bug found by the PeckShield team. a fix The original contract only did a check to ensure the sender has enough whatever to pay the total amount input value x number of addresses. If an overflow ocurred this amount can be zero, which would allow the test o...

7.5CVSS7.2AI score0.02665EPSS
SaveExploits2
Debian CVE
Debian CVE
added 2026/09/15 3:18 p.m.6 views

CVE-2026-91953

FreeRDP versions before 3.31.0 contain a heap buffer overflow vulnerability in negosendnegotiationrequest that fails to validate the LBLOADBALANCEINFO field length before writing to a fixed 512-byte buffer. A malicious RDP server or man-in-the-middle can send a Server Redirection PDU with an...

7.1CVSS6.4AI score
SaveExploits0
EUVD
EUVD
added 2026/09/09 6:00 a.m.6 views

EUVD-2026-74703

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not verify that the user redeeming a gift card is its intended recipient, allowing any authenticated user, such as a subscriber, to redeem gift cards belonging to other users, zeroing their balance and crediting the value...

6.5CVSS5.7AI score0.00212EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/09 6:00 a.m.17 views

CVE-2026-75861

The Ultimate Gift Cards for WooCommerce WordPress plugin (versions before 3.2.10 ) fails to verify that the user redeeming a gift card is its intended recipient. This allows any authenticated user with subscriber-level access to redeem another user's gift card, zeroing the original owner's balanc...

6.5CVSS5.7AI score0.00212EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 4:18 p.m.6 views

CVE-2026-86724

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in plugin/YPTWallet/view/saveBalance.php that allows attackers to set arbitrary wallet balances by relying only on session cookies without token validation. Attackers can craft a...

7.1CVSS0.00128EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/08 3:13 p.m.26 views

CVE-2026-86724 AVideo YPTWallet saveBalance.php Cross-Site Request Forgery

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in plugin/YPTWallet/view/saveBalance.php that allows attackers to set arbitrary wallet balances by relying only on session cookies without token validation. Attackers can craft a...

7.1CVSS0.00128EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/08 3:13 p.m.13 views

CVE-2026-86724

AVideo (through commit c3edcc274c389816d434acadac07ee78eaf330c1) contains a cross-site request forgery (CSRF) vulnerability in plugin/YPTWallet/view/saveBalance.php . The flaw arises because the endpoint relies solely on session cookies without token validation , allowing an attacker to craft a m...

7.1CVSS5.8AI score0.00128EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/08 3:13 p.m.7 views

EUVD-2026-72860

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in plugin/YPTWallet/view/saveBalance.php that allows attackers to set arbitrary wallet balances by relying only on session cookies without token validation. Attackers can craft a...

7.1CVSS5.8AI score0.00128EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/29 6:00 a.m.43 views

CVE-2026-18234 MStore API < 4.21.1 - Subscriber+ Arbitrary Order Payment Bypass via Wallet

The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by its wallet payment handling belongs to the requester, and does not deduct the wallet balance for most payment methods, allowing any authenticated user, including Subscribers, to mark arbitrary orders as paid...

0.00174EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/26 8:17 p.m.7 views

CVE-2026-46369

Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Through 1.5.0, the validity store uses a strict lower-bound comparison that expires a stored transaction too early relative to Transaction::isvalidat, allowing a remote attacker to repl...

7.5CVSS0.00392EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/26 7:32 p.m.9 views

CVE-2026-46369 Nimiq: Validity store off by one error

Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Through 1.5.0, the validity store uses a strict lower-bound comparison that expires a stored transaction too early relative to Transaction::isvalidat, allowing a remote attacker to repl...

7.5CVSS5.6AI score
SaveExploits0References5
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.6 views

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net: dsa: bcmsf2: Fixed a possible memory leak in bcmsf2mdioregister. The bcmsf2mdioregister function calls ofPhyFindDevice and then phydeviceRemove in a loop to remove existing PHY devices. ofPhyFindDevice eventually calls...

5.5CVSS6.1AI score0.00212EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.6 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: btrfs: Fixed a race condition between balance operations and cancel/pause requests. Syzbot reported a panic that occurred as follows: Assertion failed: fsinfo-exclusiveoperation == BTRFSEXCLOPBALANCEPAUSED, in fs/btrfs/ioctl.c:46...

6AI score0.0018EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.7 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: btrfs: fixed the BUGON condition in btrfscancelbalance. Pausing and canceling balance can race to interrupt balance, leading to a BUGON panic in btrfscancelbalance. The BUGON condition in btrfs CancelBalance does not take this ra...

5.5CVSS5.8AI score0.00201EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.3 views

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

A vulnerability related to deallocation was discovered in the preparetorelocate function in fs/btrfs/relocation.c within btrfs in the Linux Kernel. This potential flaw can be triggered by calling btrfsioctlbalance before calling btrfsioctldefrag...

7.8CVSS6.5AI score0.00438EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/21 6:00 a.m.21 views

EUVD-2026-63819

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not validate a client-supplied payment amount against the vendor's actual outstanding balance when recording a reverse-withdrawal payment, allowing a vendor to credit their reverse-withdrawal...

2.7CVSS5.5AI score0.00168EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/21 6:00 a.m.46 views

CVE-2026-16577 Dokan < 5.0.14 - Vendor+ Reverse Withdrawal Ledger Manipulation via Client-Supplied Amount

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not validate a client-supplied payment amount against the vendor's actual outstanding balance when recording a reverse-withdrawal payment, allowing a vendor to credit their reverse-withdrawal...

0.00168EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/21 6:00 a.m.37 views

CVE-2026-16577

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin, versions before 5.0.14 , fails to validate a client-supplied payment amount against the vendor's actual outstanding balance when recording a reverse-withdrawal payment. This allows an authenticated vendor to cred...

2.7CVSS5.5AI score0.00168EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/16 6:00 a.m.39 views

CVE-2026-19711

The Premium Packages WordPress plugin before 7.0.7 fails to validate withdrawal requests against the requesting user's earned balance, letting any authenticated subscriber submit a payout for an arbitrary amount an administrator may approve. Fix: upgrade to version 7.0.7 or later. No exploit code...

6.5CVSS5.5AI score0.00212EPSS
SaveExploits0References1
Rows per page
Query Builder