Lucene search
+L

992 matches found

Kitploit
Kitploit
added 2026/09/14 1:55 a.m.11 views

bordair-multimodal

Conjunto de Datos de Inyección de Prompts Multimodal 516,588 muestras etiquetadas 251,782 de ataque + 251,576 benignas, más una división de validación del mundo real de 13,230 muestras en cinco versiones del conjunto de datos, más la ingesta de conjuntos de datos externos, cubriendo ataques de...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 8:10 p.m.7 views

Adrenaline

Adrenaline BOF Kit A C2-agnostic collection of Beacon Object Files BOFs for red team and offensive security operations. BOFs are organized by attack chain phase and designed to be small, modular, and automation-friendly for use in reconnaissance, enumeration, and post-exploitation workflows. Tabl...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 7:05 p.m.3 views

network-threats-taxonomy

Network Threats And Tools Taxonomy Machine Learning based Intrusion Detection Systems are difficult to evaluate due to a shortage of datasets representing accurately network traffic and their associated threats. In this project we attempt at solving this problem by presenting two taxonomies "A...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 5:47 p.m.7 views

CVE-2024-12025

CVE-2024-12025 Collapsing Categories = 3.0.8 - Inyección SQL no autenticada Descripción El plugin Collapsing Categories para WordPress es vulnerable a Inyección SQL a través del parámetro 'taxonomy' de la API REST /wp-json/collapsing-categories/v1/get en todas las versiones hasta la 3.0.8...

7.5CVSS7.9AI score0.02572EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 5:26 p.m.9 views

IntelligentProcessLifecycle

IntelligentProcessLifecycle El ciclo de vida inteligente de procesos de los defensores cibernéticos activos Descripción Este GitHub aloja los archivos del póster relacionados con las categorías de falsos positivos y errores en los servicios de operaciones de seguridad. El objetivo es definir un...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 3:45 p.m.9 views

CVE-2024-12270

CVE-2024-12270 Beautiful Taxonomy Filters = 2.4.3 - Inyección SQL no autenticada Descripción El plugin Beautiful taxonomy filters para WordPress es vulnerable a inyección SQL a través del parámetro 'selects0term' en todas las versiones hasta la 2.4.3 incluida, debido a un escape insuficiente del...

7.5CVSS8.1AI score0.03714EPSS
SaveExploits1
NVD
NVD
added 2026/09/12 6:16 a.m.12 views

CVE-2026-84023

The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce or check user capabilities before updating taxonomy terms, allowing an attacker to modify arbitrary terms by tricking a logged-in privileged user into visiting a crafted page...

6.5CVSS0.00112EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/12 6:00 a.m.33 views

CVE-2026-84023 BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Taxonomy Term Modification via CSRF

The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce or check user capabilities before updating taxonomy terms, allowing an attacker to modify arbitrary terms by tricking a logged-in privileged user into visiting a crafted page...

0.00112EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/12 6:00 a.m.10 views

CVE-2026-84023

BEAR – Bulk Editor and Products Manager Professional for WooCommerce , a WordPress plugin, is affected in versions before 1.2.2 . The vulnerability stems from the plugin's failure to verify a CSRF nonce or check user capabilities before allowing updates to taxonomy terms. An attacker can modify a...

6.5CVSS0.00112EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/12 6:00 a.m.7 views

EUVD-2026-76790

The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce or check user capabilities before updating taxonomy terms, allowing an attacker to modify arbitrary terms by tricking a logged-in privileged user into visiting a crafted page...

6.5CVSS0.00112EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/09/12 12:00 a.m.12 views

PT-2026-90574

I discovered a CSRF vulnerability in BEAR – Bulk Editor and Products Manager Professional for WooCommerce. CVE-2026-84023 — Taxonomy Term Modification via CSRF Affected versions: 1.2.2 Fixed in: 1.2.2 https://t.co/VqYeibaeDi BugBounty CyberSecurity CVE WordPress...

6.5CVSS0.00112EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/09 5:24 p.m.5 views

DRUPAL-CONTRIB-2026-152

This module adds automatic highlighting of taxonomy terms in content. The module doesn't sufficiently check access on taxonomy terms. As a result, anonymous users can view any of the site's taxonomy terms at the module's JSON endpoint, including taxonomy terms that are unpublished or otherwise...

5.8AI score
SaveExploits0References1
EUVD
EUVD
added 2026/09/07 12:29 p.m.8 views

EUVD-2026-72365

The Flamingo plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-level access a...

5.4CVSS0.0031EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2026/09/07 12:00 a.m.9 views

PT-2026-86751

The Flamingo plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-level access a...

5.4CVSS0.0031EPSS
SaveExploits0References13
NVD
NVD
added 2026/09/05 7:17 a.m.7 views

CVE-2026-84901

The Eventin WordPress plugin before 4.1.22 does not properly check authorization on several of its event-management REST routes, allowing users with contributor-level access and above to change the site's front-page setting to an event they do not own and to create, edit and delete global event a...

4.9CVSS0.00193EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/05 6:00 a.m.34 views

CVE-2026-84901 Eventin < 4.1.22 - Contributor+ Site Homepage Hijack and Event Taxonomy Manipulation via Missing Authorization

The Eventin WordPress plugin before 4.1.22 does not properly check authorization on several of its event-management REST routes, allowing users with contributor-level access and above to change the site's front-page setting to an event they do not own and to create, edit and delete global event a...

0.00193EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/05 6:00 a.m.8 views

EUVD-2026-71868

The Eventin WordPress plugin before 4.1.22 does not properly check authorization on several of its event-management REST routes, allowing users with contributor-level access and above to change the site's front-page setting to an event they do not own and to create, edit and delete global event a...

5.2AI score0.00193EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/05 6:00 a.m.11 views

CVE-2026-84901

The Eventin WordPress plugin (a.k.a. WP Event Solution) versions before 4.1.22 lack proper authorization checks on several event-management REST routes. Users with contributor-level access or above can change the site's front-page setting to an event they do not own and create, edit, or delete gl...

4.9CVSS5.2AI score0.00193EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/09/05 6:00 a.m.6 views

WordPress Eventin plugin < 4.1.22 - Contributor+ Site Homepage Hijack and Event Taxonomy Manipulation vulnerability

Contributor+ Site Homepage Hijack and Event Taxonomy Manipulation vulnerability discovered by Sai Praneeth Koti in WordPress Plugin WP Event SOlution versions 4.1.22...

4.9CVSS5.2AI score0.00193EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/09/05 12:00 a.m.12 views

PT-2026-86352

🚨 CVE-2026-84901 The Eventin WordPress plugin before 4.1.22 does not properly check authorization on several of its event-management REST routes, allowing users with contributor-level access and above to change the site's front-page setting to an event they do not own and to create, edit and dele...

4.9CVSS5.2AI score0.00193EPSS
SaveExploits0References3
Rows per page
Query Builder