kangaroo

Kangaroo Algoritmo Pollard's Kangaroo acelerado por GPU para resolver el Problema del Logaritmo Discreto de Curva Elíptica ECDLP en secp256k1. Características 🖥️ GPU multiplataforma — Vulkan AMD, NVIDIA, Intel, Metal Apple Silicon, DX12 Windows mediante wgpu 🦀 Rust puro + WGSL — sin dependencia de...

batchOverflow

batchOverflow Una corrección para el batchOverflow bug encontrado por el equipo de PeckShield. una corrección El contrato original solo realizaba una verificación para asegurarse de que el remitente tuviera suficiente whatever para pagar la cantidad total valor de entrada x número de direcciones...

CVE-2026-97416 btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk()

In the Linux kernel, the following vulnerability has been resolved: btrfs: balance: fix potential bg lookup failure in btrfsmayallocdatachunk BUG Running btrfs balance can trigger a null-ptr-deref before relocating a data chunk when metadata corruption leaves a chunk in the chunk tree without a...

PT-2026-98050

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Running a btrfs balance operation can trigger a null-pointer dereference when metadata corruption causes a chunk in the chunk tree to exist without a corresponding block group in the...

CVE-2026-93510

The Points and Rewards for WooCommerce WordPress plugin before 2.10.4 does not validate the claimed reward amount or restrict who can call its Win Wheel claim handler, allowing authenticated users, Subscriber and above, to credit their own account with an arbitrary and unlimited amount of loyalty...

CVE-2026-93510 Points and Rewards for WooCommerce < 2.10.4 - Subscriber+ Arbitrary Points and Wallet Balance Manipulation via assign_claim_points

The Points and Rewards for WooCommerce WordPress plugin before 2.10.4 does not validate the claimed reward amount or restrict who can call its Win Wheel claim handler, allowing authenticated users, Subscriber and above, to credit their own account with an arbitrary and unlimited amount of loyalty...

CVE-2026-93510 Points and Rewards for WooCommerce < 2.10.4 - Subscriber+ Arbitrary Points and Wallet Balance Manipulation via assign_claim_points

The Points and Rewards for WooCommerce WordPress plugin before 2.10.4 does not validate the claimed reward amount or restrict who can call its Win Wheel claim handler, allowing authenticated users, Subscriber and above, to credit their own account with an arbitrary and unlimited amount of loyalty...

WordPress Points and Rewards for WooCommerce plugin < 2.10.4 - Subscriber+ Arbitrary Points and Wallet Balance Manipulation vulnerability

Subscriber+ Arbitrary Points and Wallet Balance Manipulation vulnerability discovered by Farid Narimanov in WordPress Plugin Points and Rewards for WooCommerce versions 2.10.4...

CVE-2026-93510

The Points and Rewards for WooCommerce WordPress plugin (versions before 2.10.4 ) is vulnerable to an arbitrary points and wallet balance manipulation. The root cause is a failure to validate the claimed reward amount or restrict access to the Win Wheel claim handler . Consequently, authenticated...

EUVD-2026-85062

The Points and Rewards for WooCommerce WordPress plugin before 2.10.4 does not validate the claimed reward amount or restrict who can call its Win Wheel claim handler, allowing authenticated users, Subscriber and above, to credit their own account with an arbitrary and unlimited amount of loyalty...

CVE-2026-93510: Missing Authorization

The Points and Rewards for WooCommerce WordPress plugin before 2.10.4 does not validate the claimed reward amount or restrict who can call its Win Wheel claim handler, allowing authenticated users, Subscriber and above, to credit their own account with an arbitrary and unlimited amount of loyalty...

PT-2026-97199

Name of the Vulnerable Software and Affected Versions Points and Rewards for WooCommerce WordPress plugin versions prior to 2.10.4 Description Authenticated users with Subscriber privileges or higher can credit their own accounts with an unlimited amount of loyalty points. This occurs because the...

CVE-2026-43643

Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains an authorization bypass vulnerability in the billing module handler that allows unauthenticated remote attackers to modify any tenant's account balance by supplying crafted act and frombillingmodule parameters to the admin panel...

EUVD-2026-84624

Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains an authorization bypass vulnerability in the billing module handler that allows unauthenticated remote attackers to modify any tenant's account balance by supplying crafted act and frombillingmodule parameters to the admin panel...

CVE-2026-43643 Softaculous Virtualizor Authorization Bypass via Billing Module Handler

Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains an authorization bypass vulnerability in the billing module handler that allows unauthenticated remote attackers to modify any tenant's account balance by supplying crafted act and frombillingmodule parameters to the admin panel...

CVE-2026-43643 Softaculous Virtualizor Authorization Bypass via Billing Module Handler

Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains an authorization bypass vulnerability in the billing module handler that allows unauthenticated remote attackers to modify any tenant's account balance by supplying crafted act and frombillingmodule parameters to the admin panel...

CVE-2026-43643

Softaculous Virtualizor versions before 3.2.9 (Patch 9) and 3.0.0 are susceptible to an authorization bypass vulnerability in the billing module handler. An unauthenticated remote attacker can modify any tenant's account balance by sending a POST request to the admin panel dispatcher with crafted...

CVE-2026-43643: Missing Authorization

Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains an authorization bypass vulnerability in the billing module handler that allows unauthenticated remote attackers to modify any tenant's account balance by supplying crafted act and frombillingmodule parameters to the admin panel...

PT-2026-96922

Name of the Vulnerable Software and Affected Versions Softaculous Virtualizor versions prior to 3.2.9 Patch 9 Softaculous Virtualizor version 3.0.0 Description An authorization bypass exists in the billing module handler. Unauthenticated remote attackers can modify any tenant's account balance by...

Race Condition

Overview Affected versions of this package are vulnerable to Race Condition via the doUpgrade process. An attacker can inflate their credit balance by sending multiple concurrent downgrade requests, resulting in multiple refunds for a single legitimate downgrade. Remediation Upgrade...