CVE-2026-32574

Unauthenticated Cross Site Scripting XSS in Smart Forms = 2.6.104 versions...

EUVD-2026-93259

Unauthenticated Cross Site Scripting XSS in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart = 2.0.6 versions...

CVE-2026-39750

The StoreGrowth: Smart Sales Booster for WooCommerce plugin (versions

CVE-2026-39750 WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart = 2.0.6 versions...

CVE-2026-39719

The WordPress PDF Smart Viewer for Elementor plugin (versions

CVE-2026-39719 WordPress PDF Smart Viewer for Elementor plugin <= 1.0.4 - Server Side Request Forgery (SSRF) vulnerability

Unauthenticated Server Side Request Forgery SSRF in PDF Smart Viewer for Elementor = 1.0.4 versions...

EUVD-2026-93243

Unauthenticated Server Side Request Forgery SSRF in PDF Smart Viewer for Elementor = 1.0.4 versions...

CVE-2026-32574 WordPress Smart Forms plugin <= 2.6.104 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Smart Forms = 2.6.104 versions...

EUVD-2026-93236

Unauthenticated Cross Site Scripting XSS in Smart Forms = 2.6.104 versions...

CVE-2026-32574

The WordPress Smart Forms plugin versions

CVE-2026-9998-Insecure-Deserialization-in-Blockchain-Oracle

10. CVE-2026-9998 – Insecure Deserialization in Blockchain Oracle Overview A blockchain oracle node deserializes data from a smart contract event using Python’s pickle, allowing an attacker to execute arbitrary commands. Severity: Critical Full Node Compromise Oracle Simulation & Exploit...

LinksysLeaks

LinksysLeaks Python3 script to scan for Linksys smart wifi devices that are vulnerable to CVE-2014-8244 This script was created to help me find vulnerable smart wifi devices that leak sensitive information,known as CVE-2014-8244. You have the option to either scan a single ip or a text file with...

WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Pedro Pinho in WordPress Plugin StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart versions = 2.0.6...

dameflare

DameFlare RCE no autenticado mediante omisión de autenticación de tarjeta inteligente en SolarWinds Dameware MRC CVE-2019-3980 | CVSS 9.8 Crítico | TCP/6129 Investigación original y POC: Tenable, Inc. TRA-2019-43 Herramienta Python 3: David Boyd @Fir3d0g Cómo Funciona Dameware MRC expone un...

batchOverflow

batchOverflow Una corrección para el batchOverflow bug encontrado por el equipo de PeckShield. una corrección El contrato original solo realizaba una verificación para asegurarse de que el remitente tuviera suficiente whatever para pagar la cantidad total valor de entrada x número de direcciones...

Astra Linux – Vulnerability in mbedtls

A vulnerability was discovered in Arm Mbed TLS before versions 2.16.6 and 2.7.x, prior to 2.7.15. An attacker who can obtain precise side-channel measurements can recover the long-term ECDSA private key by 1 reconstructing the projective coordinates of the result of scalar multiplication by...

OpenSC.tokend

OpenSC.tokend The open source OS X smart card driver A tokend makes the keys and certificates on your smart card appear in Keychain Access.app and available to applications like Safari or Chrome. OpenSC.tokend is the open source tokend implementation from OpenSC, with support for many different...

OpenSC

OpenSC documentation Wiki is available online Please take a look at the documentation before trying to use OpenSC. Build and test status of specific cards: Cards| Status ---|--- CAC| Coolkey|...

Smart Office Web 20.28 - Information Disclosure

An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to download sensitive information via the action name parameter to ExportEmployeeDetails.aspx, and to ExportReportingManager.aspx. id: CVE-2022-47075 info: name: Smart Office Web 20.28 - Information Disclosure author:...

CVE-2023-3836

Dahua Smart Campus Integrated Management Platform publishing File Upload POC Install Dependencies pip install argparse requests rich Note: Python3 environment is used. Usage python CVE-2023-3836.py -h URL format in the file Execution Results...