community-scripts

Scripts Communautaires Une collection de scripts ZAP fournis par la communauté, c'est-à-dire vous tous : La façon la plus simple d'utiliser ce dépôt dans ZAP est d'installer le module complémentaire 'Community Scripts' depuis le marketplace ZAP. !CAUTION Bien que nous examinions tous les scripts...

CVE-2019-15233

CVE-2019-15233 FAB-2019-00157 Уязвимость, обнаруженная мной, CVE-2019-15233 Рекомендация: advisory Основная информация Advisory ID: FAB-2019-00157 Product: Live Input Macros Manufacturer: Old Street Solutions Affected Versions: 2.10 and before Tested Versions: 2.10 Vulnerability Type: Cross-Site...

cve-lite-cli

Most tools tell you what's wrong. CVE Lite CLI tells you what to run. CVE Lite CLI 🏆 Officially recognized as anOWASP Lab Project Vulnerability scanning that starts in your terminal and fits cleanly into CI. Scan your lockfile, get copy-and-run fix commands, and ship clean code. Scan. Understand...

skills

Marketplace de compétences Trail of Bits Un marketplace de plugins Claude Code de Trail of Bits fournissant des compétences pour améliorer les workflows d'analyse de sécurité, de test et de développement assistés par IA. Codex peut charger ce marketplace grâce à sa compatibilité avec le marketpla...

idacode

IDACode IDACode makes it easy to execute and debug Python scripts in your IDA environment without leaving Visual Studio Code. The VS Code extension can be found on the marketplace. IDACode is still in a very early state and bugs are to be expected. Please open a new issue if you encounter any...

security-skills

Compétences de sécurité pour Claude Code Un marché de plugins de compétences Claude Code qui automatisent les opérations de sécurité. Installez des compétences individuelles pour automatiser des plateformes spécifiques, ou combinez-en plusieurs pour une intégration de bout en bout dans votre pile...

Liferay Portal - Cross-Site Scripting

A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.5, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 7.4 GA through update 92 allows an remote non-authenticated...

WCFM WooCommerce Multivendor Marketplace < 3.4.12 - SQL Injection

The wcfmajaxcontroller AJAX action of the WCFM Marketplace WordPress plugin before 3.4.12, available to unauthenticated and authenticated user, does not properly sanitise multiple parameters before using them in SQL statements, leading to SQL injections. id: CVE-2021-24849 info: name: WCFM...

fastfuz-chrome-ext

FastFuzz Chrome Extension Fast fuzzing websites with chrome extension Screenshot Install Add Your Custom Files Open files.txt Paste your file or directory name in line by line Happy Hunting TODO Add response size foundings Add new specific file and directory names Add Extension to chrome extensio...

CVE-2024-58290-Xhibiter-SQLi

CVE-2024-58290-Xhibiter-SQLi Preuve de concept PoC pour l'injection SQL dans Xhibiter NFT Marketplace 1.10.2 point de terminaison Collections. Découverte par Sohel Yousef. CVE-2024-58290 : Injection SQL dans Xhibiter NFT Marketplace Titre de l'exploit : Xhibiter NFT Marketplace 1.10.2 - Injection...

Meta’s Muse sent a Facebook Marketplace buyer to a seller’s home

A Facebook Marketplace buyer arrived at a seller’s apartment to collect a keyboard. The seller wasn’t home and didn’t know anyone was coming. Meta’s AI assistant Muse had handled the conversation, shared his address, and arranged the visit without telling him. We often write about AI misalignment...

CVE-2024-8289

CVE-2024-8289 CVE-2024-8289 https://vulners.com/cve/CVE-2024-8289, Vendeur wcmp Produit MultiVendorX – La solution ultime de marketplace multivendeur WooCommerce...

GHSA-26R5-4MM2-PX5C Klever-Go: Zombie-order theft: `Buy` missing `IsClaimed` guard in native marketplace

Location: core/kapp/market/market.go — Buy approx. L281–436\ Severity: High The native marketplace enforces an IsClaimed guard in Claim market.go:752, CancelOrder market.go:1125, and orderEscrowAmount market.go:251, but not in Buy. Marketplace escrow is virtual: the market KApp account never...

Klever-Go: Zombie-order theft: `Buy` missing `IsClaimed` guard in native marketplace

Location: core/kapp/market/market.go — Buy approx. L281–436\ Severity: High The native marketplace enforces an IsClaimed guard in Claim market.go:752, CancelOrder market.go:1125, and orderEscrowAmount market.go:251, but not in Buy. Marketplace escrow is virtual: the market KApp account never...

CVE-2026-82406

The Klever-Go blockchain protocol implementation contains a high-severity vulnerability in the native marketplace function located at core/kapp/market/market.go. The Buy() function fails to verify the IsClaimed status before accepting a bid, while other functions like Claim and CancelOrder do enf...

CVE-2026-82406: Improper Enforcement of Behavioral Workflow

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the native marketplace function core/kapp/market/market.go Buy does not check IsClaimed before accepting a bid. A seller can use the Claim seller-accept branch to settle a resting-bid auction while leaving the...

PT-2026-96732

Name of the Vulnerable Software and Affected Versions MarketKing plugin for WordPress versions prior to 2.1.72 Description An authorization flaw exists in the marketking send refund AJAX action. Authenticated users with subscriber-level access or higher can create fraudulent refund requests for a...

WordPress WCFM Marketplace – Multivendor Marketplace for WooCommerce plugin <= 3.8.2 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Jonah Burgess CryptoCat in WordPress Plugin WCFM Marketplace versions = 3.8.2...

CVE-2026-18442

The WCFM Marketplace – Multivendor Marketplace for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'wcfmmpuserlocationlng' parameter in all versions up to, and including, 3.8.2 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2026-18442 WCFM Marketplace <= 3.8.2 - Unauthenticated SQL Injection via 'wcfmmp_user_location_lat' / 'wcfmmp_user_location_lng' Parameter

The WCFM Marketplace – Multivendor Marketplace for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'wcfmmpuserlocationlng' parameter in all versions up to, and including, 3.8.2 due to insufficient escaping on the user supplied parameter and lack of sufficient...