503 matches found
pe-bear-old
PE-bear リリース PE-bear は、PE ファイル用のフリーウェアのリバースエンジニアリングツールです。その目的は、マルウェアアナリスト向けに高速かつ柔軟な「ファーストビュー」を提供し、不正な PE ファイルにも安定して対応できることです。 PE-bear 用シグネチャ: SIG.txt 更新日: 22.01.2014 - PEid の UserDB のシグネチャを含みます - crashish が提供するスクリプトで変換されました Chocolatey からも入手できます !!! 更新 !!! - 18 September 2022 以降、PE-bear...
CVE-2026-84023
The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce or check user capabilities before updating taxonomy terms, allowing an attacker to modify arbitrary terms by tricking a logged-in privileged user into visiting a crafted page...
CVE-2026-84025
The BEAR WordPress plugin before 1.2.2 does not perform ownership checks on several handlers that return product data by a user-supplied identifier, allowing users who are restricted to their own products to read other owners' product information, including protected downloadable file URLs and...
CVE-2026-84024
The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce before saving its meta field configuration, allowing an attacker to overwrite that configuration by tricking a logged-in administrator into visiting a crafted page...
CVE-2026-84024 BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Meta Field Configuration Update via CSRF
The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce before saving its meta field configuration, allowing an attacker to overwrite that configuration by tricking a logged-in administrator into visiting a crafted page...
CVE-2026-84025 BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Authenticated Product Download URL and Meta Disclosure via IDOR
The BEAR WordPress plugin before 1.2.2 does not perform ownership checks on several handlers that return product data by a user-supplied identifier, allowing users who are restricted to their own products to read other owners' product information, including protected downloadable file URLs and...
EUVD-2026-76792
The BEAR WordPress plugin before 1.2.2 does not perform ownership checks on several handlers that return product data by a user-supplied identifier, allowing users who are restricted to their own products to read other owners' product information, including protected downloadable file URLs and...
EUVD-2026-76791
The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce before saving its meta field configuration, allowing an attacker to overwrite that configuration by tricking a logged-in administrator into visiting a crafted page...
CVE-2026-84024
The BEAR – Bulk Editor and Products Manager Professional for WooCommerce plugin (WordPress) before 1.2.2 fails to verify a CSRF nonce before saving its meta field configuration. An attacker can exploit this by tricking a logged-in administrator into visiting a crafted page, resulting in an unauth...
CVE-2026-84023 BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Taxonomy Term Modification via CSRF
The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce or check user capabilities before updating taxonomy terms, allowing an attacker to modify arbitrary terms by tricking a logged-in privileged user into visiting a crafted page...
CVE-2026-84025
BEAR – Bulk Editor and Products Manager Professional for WooCommerce (WordPress plugin) versions before 1.2.2 are affected by an IDOR (Insecure Direct Object Reference) vulnerability. Several handlers that return product data by a user-supplied identifier fail to perform ownership checks, allowin...
EUVD-2026-76790
The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce or check user capabilities before updating taxonomy terms, allowing an attacker to modify arbitrary terms by tricking a logged-in privileged user into visiting a crafted page...
CVE-2026-84023
BEAR – Bulk Editor and Products Manager Professional for WooCommerce , a WordPress plugin, is affected in versions before 1.2.2 . The vulnerability stems from the plugin's failure to verify a CSRF nonce or check user capabilities before allowing updates to taxonomy terms. An attacker can modify a...
PT-2026-90576
The BEAR WordPress plugin before 1.2.2 does not perform ownership checks on several handlers that return product data by a user-supplied identifier, allowing users who are restricted to their own products to read other owners' product information, including protected downloadable file URLs and...
PT-2026-90575
I discovered a CSRF vulnerability in BEAR – Bulk Editor and Products Manager Professional for WooCommerce. CVE-2026-84024 — Meta Field Configuration Update via CSRF Affected versions: 1.2.2 Fixed in: 1.2.2 https://t.co/yjQ4aFRkjb BugBounty CyberSecurity CVE WordPress...
PT-2026-90574
I discovered a CSRF vulnerability in BEAR – Bulk Editor and Products Manager Professional for WooCommerce. CVE-2026-84023 — Taxonomy Term Modification via CSRF Affected versions: 1.2.2 Fixed in: 1.2.2 https://t.co/VqYeibaeDi BugBounty CyberSecurity CVE WordPress...
BEAR-C2
BEAR-C2 敵対者シミュレーションフレームワーク BEAR-C2 は、ロシア、中国、北朝鮮、イランの APT グループに触発された実世界の TTP を中心に構築された敵対者シミュレーションおよびエミュレーションフレームワークです。多様なエンゲージメントシナリオに対応する柔軟な環境を提供し、APT Attack Simulation Repository における関連するシミュレーション研究から得られた知見を活かし、レッドチーム運用および敵対者エミュレーションのための現実的な基盤を提供します。防御回避技術や複数の暗号化オプションをサポートし、実世界の侵入シナリオを正確に再現します。...
WordPress Teddy Bear Customize Addon plugin <= 1.0.5 - Unauthenticated Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload vulnerability discovered by 0xBassia in WordPress Plugin Teddy Bear Customize Addon versions = 1.0.5...
WordPress Teddy Bear Customize Addon plugin <= 1.0.5 - Unauthenticated Account Takeover vulnerability
Unauthenticated Account Takeover vulnerability discovered by 0xBassia in WordPress Plugin Teddy Bear Customize Addon versions = 1.0.5...