Lucene search
+L

678 matches found

Kitploit
Kitploit
added 2026/09/14 7:53 a.m.7 views

scansploit

=SCANSPLOIT= バーコードに悪意のあるペイロードを注入するためのツール バーコード code128 QRCodes DataMatrix EAN13 必要条件 Python3 PyStrich pip3 install pystrich JPEGエラーが発生した場合: sudo apt-get install libtiff5-dev zlib1g-dev libfreetype6-dev liblcms2-dev libwebp-dev tcl8.6-dev tk8.6-dev python-tk Pillow pip3 install pillow...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 11:55 p.m.8 views

AAMVA-PDF417-Vulnerability-Research

PDF417 ID検証の脆弱性研究 概要 このリポジトリは、政府発行ID、企業向けソリューション、コンシューマアプリケーションに影響を与える、AAMVA標準PDF417バーコード検証システムにおける重大な脆弱性を文書化した包括的なセキュリティ研究です。この研究には、運転免許証のバーコードを処理するID検証システムに存在する体系的な欠陥を実証する、完全に機能する概念実証(PoC)が含まれています。 重要: このコードはセキュリティ研究目的のみで提供されています。使用許容についてはLICENSE.mdファイルを参照してください。 研究倫理声明 この研究は以下の原則に従って実施されました。...

5.9AI score
SaveExploits1References1
NVD
NVD
added 2026/09/08 4:18 p.m.7 views

CVE-2026-86737

snipe-it versions before 8.7.0 fail to enforce asset view authorization in the GET /hardware/asset/barcode endpoint. Authenticated attackers can iterate asset IDs to retrieve barcodes and enumerate asset tags across tenants, including soft-deleted and cross-company assets...

5.3CVSS0.00168EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/08 3:14 p.m.8 views

CVE-2026-86737

snipe-it versions before 8.7.0 fail to enforce asset view authorization in the GET /hardware/{asset}/barcode endpoint. An authenticated attacker can iterate asset IDs to retrieve barcodes and enumerate asset tags across tenants, including soft-deleted and cross-company assets. The vulnerability i...

5.3CVSS0.00168EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/09/08 3:14 p.m.7 views

CVE-2026-86737 snipe-it before 8.7.0 Missing Authorization via barcode endpoint

snipe-it versions before 8.7.0 fail to enforce asset view authorization in the GET /hardware/asset/barcode endpoint. Authenticated attackers can iterate asset IDs to retrieve barcodes and enumerate asset tags across tenants, including soft-deleted and cross-company assets...

5.3CVSS5.8AI score
SaveExploits0References4
EUVD
EUVD
added 2026/09/08 3:14 p.m.8 views

EUVD-2026-72873

snipe-it versions before 8.7.0 fail to enforce asset view authorization in the GET /hardware/asset/barcode endpoint. Authenticated attackers can iterate asset IDs to retrieve barcodes and enumerate asset tags across tenants, including soft-deleted and cross-company assets...

5.3CVSS0.00168EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/08 3:14 p.m.30 views

CVE-2026-86737 snipe-it before 8.7.0 Missing Authorization via barcode endpoint

snipe-it versions before 8.7.0 fail to enforce asset view authorization in the GET /hardware/asset/barcode endpoint. Authenticated attackers can iterate asset IDs to retrieve barcodes and enumerate asset tags across tenants, including soft-deleted and cross-company assets...

5.3CVSS0.00168EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/31 9:17 p.m.9 views

CVE-2026-81280

Subscriber Sensitive Data Exposure in Print Barcode Labels for your WooCommerce products/orders = 4.0.0 versions...

6.5CVSS0.00355EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/31 8:30 p.m.17 views

CVE-2026-81280

Print Barcode Labels for your WooCommerce products/orders is a WordPress plugin vulnerable to Sensitive Data Exposure in versions 4.0.0 and below . The vulnerability requires Subscriber-level privileges (low) and can be exploited over the network with low complexity and no user interaction, resul...

6.5CVSS5.9AI score0.00355EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/31 8:30 p.m.12 views

EUVD-2026-68776

Subscriber Sensitive Data Exposure in Print Barcode Labels for your WooCommerce products/orders = 4.0.0 versions...

6.5CVSS5.9AI score0.00355EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/31 8:30 p.m.35 views

CVE-2026-81280 WordPress Print Barcode Labels for your WooCommerce products/orders plugin <= 4.0.0 - Sensitive Data Exposure vulnerability

Subscriber Sensitive Data Exposure in Print Barcode Labels for your WooCommerce products/orders = 4.0.0 versions...

6.5CVSS0.00355EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/17 8:16 p.m.11 views

CVE-2026-75014

A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/getbarcodedata.php. This manipulation of the argument barcode causes sql injection. The attack may be initiated remotely. The exploit has been published and may...

7.5CVSS0.00328EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/17 7:45 p.m.29 views

CVE-2026-75014

SourceCodester Pet Grooming Management Software 1.0 has a SQL injection in /admin/get_barcode_data.php via the barcode parameter, exploitable remotely without authentication. CVSS 7.5 HIGH (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:P/I:P/A:P), proof-of-concept published; no patch version or vendor fix d...

7.5CVSS7.3AI score0.00328EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/23 6:16 p.m.15 views

CVE-2026-47743

Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, three related defects on admin Livewire components allowed data tampering, sensitive data disclosure, and stored XSS. First, several Livewire components in the admin panel exposed Eloquent model identifiers as public properties without...

8.7CVSS0.00384EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/23 5:20 p.m.75 views

CVE-2026-47743

The CVE-2026-47743 issue affects Shopper’s admin Livewire components prior to v2.8.0. The root causes are: (1) IDOR-like vulnerability where public Eloquent identifiers could be rewritten in the wire payload due to missing #[Locked], enabling targeting of arbitrary records; (2) leakage of plainte...

8.7CVSS5.4AI score0.00384EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/07/23 5:20 p.m.15 views

CVE-2026-47743 Shopper: Multiple data integrity and disclosure issues in admin Livewire components

Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, three related defects on admin Livewire components allowed data tampering, sensitive data disclosure, and stored XSS. First, several Livewire components in the admin panel exposed Eloquent model identifiers as public properties without...

8.7CVSS5.5AI score0.00384EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/23 5:20 p.m.20 views

CVE-2026-47743

Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, three related defects on admin Livewire components allowed data tampering, sensitive data disclosure, and stored XSS. First, several Livewire components in the admin panel exposed Eloquent model identifiers as public properties without...

8.7CVSS5.4AI score0.00384EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/07/23 5:20 p.m.16 views

CVE-2026-47743 Shopper: Multiple data integrity and disclosure issues in admin Livewire components

Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, three related defects on admin Livewire components allowed data tampering, sensitive data disclosure, and stored XSS. First, several Livewire components in the admin panel exposed Eloquent model identifiers as public properties without...

8.7CVSS5.4AI score
SaveExploits0References4
OSV
OSV
added 2026/07/08 7:30 p.m.17 views

MAL-2026-7018 Malicious code in n8n-nodes-barcode-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb55ae2b864b933ae071cb33e8f53a52005ff0dc26487d15639f3b07fa7d9849 The package presents itself as an n8n community node for barcode generation, but dist/credentials/BarcodeGeneratorApi.credentials.js contains a...

6.1AI score
SaveExploits0References1
NVD
NVD
added 2026/06/21 9:16 a.m.22 views

CVE-2026-12788

A vulnerability was determined in zhilink 智互联深圳科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. This vulnerability affects unknown code of the file /adpweb/a/base/barcodeDetail/import of the component XML Parser. This manipulation causes xml external entity reference. It is possible to...

6.5CVSS0.004EPSS
SaveExploits0References5
Rows per page
Query Builder