WordPress Restore PayPal Standard for WooCommerce plugin < 3.1.1 - Payment Bypass via Unvalidated receiver_email vulnerability

Payment Bypass via Unvalidated receiveremail vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Accept PayPal & Stripe with Subscriptions for WooCommerce versions 3.1.1...

vivo-root-build

PD2415 6.6.89 Candidato de Fluxo Completo Esta fonte é baseada no mecanismo IonStack PD2415 6.6.57 do mesmo dispositivo/mesmo SoC: perf KASLR, pselect GhostLock, CFI fops, pipe physrw. O fechamento do portador dumpstate é mantido do método PD2241 validado. O alvo arquivado 6.6.89 mantém...

cve-checker-2026

CVE Checker 2026 Scanner di vulnerabilità multi-OS per: CVE-2026-31431 — difetto del kernel Linux crypto/algifaead CVE-2026-41940 — bypass dell'autenticazione cPanel & WHM CVSS 9.8 Sistemi Operativi Supportati...

CVE-2026-5615

CVE-2026-5615 — VvvebJs Cross-Site Scripting Armazenado RXSS Visão Geral Este repositório contém um script de prova de conceito PoC em Python que demonstra uma vulnerabilidade de Cross-Site Scripting Armazenado RXSS que afeta o VvvebJs ⚠️ Este projeto destina-se estritamente a testes de segurança...

CVE-2026-34159-Vulnerability-Research-Analysis-Detection

CVE-2026-34159-Ricerca-Analisi-Rilevamento-Vulnerabilità Bypass critico della validazione del buffer in deserializetensor llama.cpp b8492. Il buffer tensore nullo salta il controllo dei limiti, consentendo R/W arbitrario non autenticato tramite GRAPHCOMPUTE. Bypass ASLR + RCE su TCP 50052...

CVE-2026-23918-Elite-Auditor

☣️ CVE-2026-23918-Elite-Auditor ☣️ Ferramenta Profissional de Inteligência e Reconhecimento para a Vulnerabilidade de Double-Free no Apache HTTP/2. 📌 Visão Geral CVE-2026-23918 CVSS 8.8 é uma falha crítica de corrupção de memória no Apache HTTP Server 2.4.66. Este auditor foi projetado para...

CVE-2026-17562

CVE-2026-17562 is an IDOR (Insecure Direct Object Reference) vulnerability in Summit Security Systems AdisyonPro prior to v5.21.0 . The root cause is an authorization bypass through a user-controlled key , allowing attackers to access functionality that is not properly constrained by ACLs. The vu...

CVE-2026-17562 IDOR in Zirve Security's AdisyonPro

Authorization bypass through User-Controlled key vulnerability in Summit Security Systems AdisyonPro allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects AdisyonPro: before v5.21.0...

CVE-2026-17562 IDOR in Zirve Security's AdisyonPro

Authorization bypass through User-Controlled key vulnerability in Summit Security Systems AdisyonPro allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects AdisyonPro: before v5.21.0...

EUVD-2026-67001

Authorization bypass through User-Controlled key vulnerability in Summit Security Systems AdisyonPro allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects AdisyonPro: before v5.21.0...

CVE-2026-68820_Mass_Exploit

CVE-2026-68820 — Edição Mass Exploit Framework. Módulo automatizado para escalonamento local de privilégios LPE em massa para NT AUTHORITY\SYSTEM por meio de uma vulnerabilidade de use-after-free no driver AFD.sys driver de função auxiliar. Este exploit foi projetado para ambientes corporativos:...

CVE-2026-31431

CopyFail CVE-2026-31431 Visão Geral CopyFail é uma prova de conceito de exploit para a CVE-2026-31431, que visa uma vulnerabilidade de corrupção de memória na API de Criptografia do Kernel Linux AFALG. O exploit utiliza a chamada de sistema splice para realizar a modificação não autorizada do...

cPanel-CVE-2026-41940-Scanner

cPanel-CVE-2026-41940-Scanner Dieses Hochleistungs-Sicherheitstool wurde entwickelt, um CVE-2026-41940 zu identifizieren und auszunutzen, eine kritische CRLF-Injection-Schwachstelle in cPanel & WHM. Es automatisiert den gesamten Prozess von der Shodan-Erkennung bis zur Erstellung administrativer...

Principal-HackTheBox

HackTheBox — Principal Schwierigkeit: Mittel Betriebssystem: Linux Plattform: HackTheBox Übersicht Webanwendung, die pac4j-jwt v6.0.3 ausführt — anfällig für CVE-2026-29000. Der öffentliche RSA-Schlüssel ist unauthentifiziert über einen JWKS-Endpunkt zugänglich und kann verwendet werden, um ein...

CVE-2026-41940-cPanel-Auth-Bypass-Exploit

CVE-2026-41940: Análise de Bypass de Autenticação no cPanel/WHM Visão Geral da Vulnerabilidade A CVE-2026-41940 é uma vulnerabilidade crítica de bypass de autenticação no cPanel & WHM que afeta todas as versões atualmente suportadas. Ela permite que um atacante não autenticado contorne a...

CVE-2026-74233 Zbtlink MQWrt infosrvd Command Injection

Zbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware 19.1101, Zbtlink WE2426-C firmware 19.1112, Zbtlink WE5926-ECQP firmware 20.0516, Zbtlink WF3526-P firmware 19.051, CTN720-W1, LF-1541, and MT7620N firmware 19.1101, and WRC1 firmware 20.0622 contain...

EUVD-2026-67000

Zbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware 19.1101, Zbtlink WE2426-C firmware 19.1112, Zbtlink WE5926-ECQP firmware 20.0516, Zbtlink WF3526-P firmware 19.051, CTN720-W1, LF-1541, and MT7620N firmware 19.1101, and WRC1 firmware 20.0622 contain...

CVE-2026-74233 Zbtlink MQWrt infosrvd Command Injection

Zbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware 19.1101, Zbtlink WE2426-C firmware 19.1112, Zbtlink WE5926-ECQP firmware 20.0516, Zbtlink WF3526-P firmware 19.051, CTN720-W1, LF-1541, and MT7620N firmware 19.1101, and WRC1 firmware 20.0622 contain...

CVE-2026-74233

CVE-2026-74233 affects multiple Zbtlink wireless devices running MQWrt firmware (e.g., WE1326, WE357, WE5926, WG108, and others) due to an unauthenticated command injection in the infosrvd service on UDP/9992 . The service's authentication is rendered ineffective by a hardcoded salt and an all-ze...

keyhog v0.5.86

Website · Documentation · Architecture · Vyre GPU engine KeyHog: GPU-accelerated secret scanner for code, cloud, and CI KeyHog is an open-source secret scanner in Rust that finds and verifies leaked API keys, tokens, passwords, and credentials across source code, Git history, containers, cloud...