CVE-2024-44313

Exploit 🛠️ Estudio de Caso: CVE-2024-44313 y el EPSS en la Priorización de Vulnerabilidades Este estudio de caso fue desarrollado para una charla sobre EPSS Exploit Prediction Scoring System, demostrando cómo la puntuación puede influir en la priorización de vulnerabilidades en la práctica. La...

CVE-2026-9612 WhatsOrder <= 1.0.1 - Unauthenticated Sensitive Information Exposure via Predictable Invoice File URLs

The WhatsOrder – Instant Checkout for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.1 via the yapacdevgenerateorderpdf. This makes it possible for unauthenticated attackers to extract sensitive customer PII and order...

TastyIgniter 安全漏洞

TastyIgniter is an online ordering software from TastyIgniter open source. A security vulnerability exists in TastyIgniter version 3.7.6, which stems from improper access control of the invoice function in Orders.php, which could lead to unauthorized users accessing and generating invoices...