deephack

docs/man/man1/pythontruss.1.ronn...

advisories

This is deprecated. All advisories can be found on https://www.rcesecurity.com/advisories/...

zencart_auth_rce_poc

zencartauthrcepoc CVE-2021-3291 1- iniciar sesión como administrador 2- ir a la página de edición de cualquier módulo 3- inspeccionar el elemento de cualquier radiobox con valor true 4- cambiar true a true','MODULEORDERTOTALTOTALSTATUS'; echo id; // 5- hacer clic en actualizar 6- para ejecutar el...

CVE-2026-81786

Unauthenticated Broken Access Control in Thank You Page Customizer for WooCommerce = 1.2.2 versions...

CVE-2026-81795 WordPress Page Visits Counter – Lite plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Page Visits Counter Lite = 1.2.3 versions...

CVE-2026-81795

CVE-2026-81795 affects the WordPress plugin Page Visits Counter – Lite in versions ≤ 1.2.3 , introducing an unauthenticated Cross Site Scripting (XSS) vulnerability. The flaw requires user interaction and has a CHANGED scope , meaning successful exploitation can impact the victim's browser sessio...

EUVD-2026-75526

Unauthenticated Cross Site Scripting XSS in Page Visits Counter Lite = 1.2.3 versions...

CVE-2026-81786 WordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.2 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Thank You Page Customizer for WooCommerce = 1.2.2 versions...

CVE-2026-81786

Unauthenticated Broken Access Control in the Thank You Page Customizer for WooCommerce WordPress plugin (versions ≤ 1.2.2 ) allows an unauthenticated remote attacker to access resources without proper authorization. The vulnerability carries a CVSS 3.1 base score of 7.5 (HIGH) , with high confide...

EUVD-2026-75519

Unauthenticated Broken Access Control in Thank You Page Customizer for WooCommerce = 1.2.2 versions...

CVE-2026-12683

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Stored XSS. This issue affects LIBRID/LIBREF: from 2.01.0.2183 through 10092026. NOTE: The vendor was contacted early about this disclosu...

CVE-2026-12682

Ankaref Innovation and Technology Inc. LIBRID/LIBREF is affected by a Stored XSS vulnerability caused by improper input neutralization during web page generation. The issue affects versions from 2.01.0.2183 through 10092026 . The CVSS v3.1 score is 5.4 (Medium) with a network attack vector, low c...

CVE-2026-12682 Stored XSS in Ankaref's LIBRID/LIBREF

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Stored XSS. This issue affects LIBRID/LIBREF: from 2.01.0.2183 through 10092026. NOTE: The vendor was contacted early about this disclosu...

EUVD-2026-75452

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Stored XSS. This issue affects LIBRID/LIBREF: from 2.01.0.2183 through 10092026. NOTE: The vendor was contacted early about this disclosu...

EUVD-2026-75447

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Stored XSS. This issue affects LIBRID/LIBREF: from 2.01.0.2183 through 10092026. NOTE: The vendor was contacted early about this disclosu...

CVE-2026-31431-Copy-Fail-R-pertoire-de-Pr-vention

🔴 CVE-2026-31431 — Copy Fail Escalada de Privilegios Local en el Kernel de Linux LPE — Repositorio de Investigación Defensiva 📖 Presentación Copy Fail CVE-2026-31431 es una vulnerabilidad de tipo Escalada de Privilegios Local LPE que afecta al kernel de Linux mediante una corrupción controlada de...

CVE-2025-63915-There-is-a-Reflected-xss-vulnerability-exists-in-DoraCMS

CVE-2025-63915 Objetivo:https://www.html-js.cn Github:https://github.com/doramart/DoraCMS Versión:V2.1.8 Nombre de la vulnerabilidad:Vulnerabilidad de Cross-Site Scripting Reflejado XSS Reflejado en DoraCMS V2.1.8 CWE-79 Tipo de vulnerabilidad: Cross-Site Scripting Reflejado XSS Reflejado Fecha d...

CVE-2025-62168

CVE-2025-62168 — Squid Proxy Token Leak PoC The author assumes no liability for misuse or damage caused by this tool. Research is provided strictly for educational and defensive purposes. Description This repository contains a Proof-of-Concept PoC for CVE-2025-62168 , an information-disclosure fl...

CVE-2026-78374

Joomla Extension - joomlart.com - Open mail relay via contact AJAX endpoint in T4 Page Builder extension 2.3.0 - The front-end JSON editor endpoint exposes an action called contact that requires no authentication, no CSRF token, no captcha when no captcha plugin is enabled and has no rate limitin...

CVE-2026-78374 Joomla Extension - joomlart.com - Open mail relay via contact AJAX endpoint in T4 Page Builder extension < 2.3.0

Joomla Extension - joomlart.com - Open mail relay via contact AJAX endpoint in T4 Page Builder extension 2.3.0 - The front-end JSON editor endpoint exposes an action called contact that requires no authentication, no CSRF token, no captcha when no captcha plugin is enabled and has no rate limitin...