CVE-2026-85616

Snipe-IT versions before 8.6.2 contain an authorization bypass in checkout-acceptance report actions when Full Multiple Company Support is enabled. An authenticated user with the reports.view permission can exploit a null check on the legacy users.company_id column to enumerate sequential accepta...

CVE-2026-85616 Snipe-IT before 8.6.2 Authorization Bypass via Checkout-Acceptance

Snipe-IT versions before 8.6.2 contain an authorization bypass vulnerability in checkout-acceptance report actions when Full Multiple Company Support is enabled. Authenticated users with reports.view permission can enumerate sequential acceptance IDs and soft-delete or trigger reminder emails for...

hook

hook submodule pour gitrce : https://github.com/EQSTSeminar/gitrce Scénario d'attaque kali192.168.216.129 --Fournit l'adresse du dépôt distant-- Win192.168.216.130 kali192.168.216.129 --Exécution de git clone && hook scriptpost-checkout-- Win192.168.216.130 Avertissement Ce dépôt n'est pas destin...

CVE-2026-78065

Joomla Extension - j2commerce.com - Guest checkout address disclosure to any authenticated user IDOR in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6 - editAddress redirected non-owners away only when the loaded address row had a non-empty userid belonging to someone else. Guest-checkout addres...

EUVD-2026-70444

Joomla Extension - j2commerce.com - Guest checkout address disclosure to any authenticated user IDOR in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6 - editAddress redirected non-owners away only when the loaded address row had a non-empty userid belonging to someone else. Guest-checkout addres...

CVE-2026-78065

CVE-2026-78065 affects the J2Store Joomla extension (j2commerce.com), versions 1.0.0–3.3.21 , 4.0.0–4.0.21 , and 4.1.0–4.1.6 . The flaw is in the editAddress() function: its ownership check only redirected non-owners when the loaded address row had a non-empty user_id belonging to another user. S...

CVE-2026-78065 Joomla Extension - j2commerce.com - Guest checkout address disclosure to any authenticated user (IDOR) in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6

Joomla Extension - j2commerce.com - Guest checkout address disclosure to any authenticated user IDOR in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6 - editAddress redirected non-owners away only when the loaded address row had a non-empty userid belonging to someone else. Guest-checkout addres...

CVE-2025-68001

CVE-2025-68001 إضافة WordPress g-FFL Checkout 📡 ابق في المقدمة. انضم إلى @KNxploited على تيليغرام — مصدرك الحصري لأحدث CVEs والثغرات الصفرية وأبحاث الاستغلال المتطورة. يتم تحديثه باستمرار. ليس للجميع. 📋 نظرة عامة...

CVE-2026-47100-Analysis-Lab

CVE-2026-47100 — Lab XSS stocké — FunnelKit / Funnel Builder for WooCommerce Checkout Lab Docker local pour reproduire la CVE-2026-47100 de manière sûre et la moins dommageable possible. Ce lab compare une version vulnérable de FunnelKit à une version corrigée et vérifie le comportement à l'aide...

CVE-2026-83533

The WP Express Checkout WordPress plugin before 2.4.9 does not verify server-side that a payment was actually completed before marking an order as paid, allowing unauthenticated users to forge a completed order without paying...

EUVD-2026-70046

The WP Express Checkout WordPress plugin before 2.4.9 does not verify server-side that a payment was actually completed before marking an order as paid, allowing unauthenticated users to forge a completed order without paying...

CVE-2026-83533 WP Express Checkout < 2.4.9 - Unauthenticated Payment Bypass via wpec_process_payment

The WP Express Checkout WordPress plugin before 2.4.9 does not verify server-side that a payment was actually completed before marking an order as paid, allowing unauthenticated users to forge a completed order without paying...

CVE-2026-83533

WP Express Checkout WordPress plugin before 2.4.9 contains an unauthenticated payment bypass in the wpec_process_payment handler. The plugin does not verify server-side that a payment was actually completed before marking an order as paid, allowing unauthenticated users to forge a completed order...

CVE-2026-83533 WP Express Checkout < 2.4.9 - Unauthenticated Payment Bypass via wpec_process_payment

The WP Express Checkout WordPress plugin before 2.4.9 does not verify server-side that a payment was actually completed before marking an order as paid, allowing unauthenticated users to forge a completed order without paying...

CVE-2025-48384

CVE-2025-48384 PoC Avertissements Ce dépôt a été créé à des fins pédagogiques en matière de sécurité. Veuillez ne pas en faire un usage abusif. Cette vulnérabilité nécessite que le nom du répertoire contienne \r, les systèmes Linux/Unix sont donc concernés. Voici les versions de Git concernées :...

CVE-2024-50968

CVE-2024-50968 الوصف توجد ثغرة في منطق الأعمال في وظيفة "إضافة إلى السلة" في نظام التسوق عبر الإنترنت الزراعي Agrari-Trading Online Shopping System الإصدار 1.0، والتي تسمح للمهاجمين عن بُعد بالتلاعب بمعامل quant عند إضافة منتج إلى السلة. من خلال تعيين قيمة الكمية إلى -0، يمكن للمهاجم استغلال عيب ...

CVE-2026-19914

The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'customorder' parameter in all versions up to, and including, 2.12.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...

CVE-2025-48384-submodule

CVE-2025-48384 وحدة فرعية تحتوي هذه الوحدة الفرعية على خطاف post-checkout خبيث لأغراض العرض التوضيحي...

EUVD-2026-68997

The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'customorder' parameter in all versions up to, and including, 2.12.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...

CVE-2026-19914

Welcart e-Commerce (WordPress plugin) has a Stored Cross-Site Scripting vulnerability via the custom_order parameter , affecting all versions up to and including 2.12.1 . The root cause is insufficient input sanitization and output escaping . Unauthenticated attackers can inject arbitrary scripts...