privacybadger

プライバシーバッジャー Privacy Badgerは、隠れたトラッカーを自動的に学習してブロックするブラウザ拡張機能です。Privacy Badgerは、主要なデジタル権利非営利団体であるEFFによって作られ、企業があなたをスパイするのを防ぎます。 Privacy Badgerは、データ共有と販売をオプトアウトするためにGlobal Privacy Controlシグナルを送信し、企業にあなたを追跡しないように伝えるためにDo Not Trackシグナルを送信します。トラッカーがこれらのシグナルを無視した場合、Privacy Badgerはそれらをブロックすることを学習します。...

social-engineer-toolkit

The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...

dependency-track

OWASP Dependency-Track Dependency-Trackは、組織がソフトウェアサプライチェーンにおけるリスクを特定し軽減することを可能にする、インテリジェントなコンポーネント分析プラットフォームです。Dependency-Trackは、ソフトウェア部品表（SBOM）の機能を活用するという、独自で非常に有益なアプローチを採用しています。 !Mastodonhttps://img.shields.io/badge/Mastodon-636...

CVE-2026-106200

An use after free flaw was found in the Track component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568422505...

Schneider Electric U.motion Builder - SQL Injection

The vulnerability exists within processing of trackimportexport.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the objectid input parameter. id: CVE-2018-7765 info: name: Schneider Electric U.motion...

cve-2026-25676

CVE-2026-25676 研究 M-Track Duo HD 安装程序中的 DLL 搜索路径劫持 概述 本仓库包含与 CVE-2026-25676 相关的初步研究和概念验证，该漏洞是影响 M-Track Duo HD 1.0.0 安装程序的 DLL 搜索路径劫持漏洞。 本项目的目标是记录此类漏洞的根本原因、影响和检测机会，重点关注对手模拟、防御可见性和安全研究。 本工作仅用于教育和防御性安全目的。 ⸻ 漏洞摘要 CVE-2026-25676 被归类为不受控制的搜索路径元素（CWE-427）。该安装程序在加载外部库时未强制执行安全且确定性的解析路径。因此，放置在可控目录中的恶意 DLL...

WordPress Track Orders for WooCommerce plugin < 1.2.7 - Unauthenticated PII Disclosure vulnerability

Unauthenticated PII Disclosure vulnerability discovered by Pedro Pinho in WordPress Plugin Track Orders for WooCommerce versions 1.2.7...

CVE-2026-94275

The Track Orders for WooCommerce WordPress plugin before 1.2.7 does not verify ownership of an order before returning its billing details, allowing unauthenticated attackers to obtain a customer's name, email address, phone number, postal address and order history by supplying that customer's ema...

CVE-2026-94275

The Track Orders for WooCommerce WordPress plugin (versions before 1.2.7 ) contains an unauthenticated PII disclosure vulnerability. The root cause is a failure to verify order ownership before returning billing details. An unauthenticated attacker can obtain sensitive information, including a cu...

EUVD-2026-94754

The Track Orders for WooCommerce WordPress plugin before 1.2.7 does not verify ownership of an order before returning its billing details, allowing unauthenticated attackers to obtain a customer's name, email address, phone number, postal address and order history by supplying that customer's ema...

CVE-2026-94275 Track Orders for WooCommerce < 1.2.7 - Unauthenticated PII Disclosure via 'email' Parameter

The Track Orders for WooCommerce WordPress plugin before 1.2.7 does not verify ownership of an order before returning its billing details, allowing unauthenticated attackers to obtain a customer's name, email address, phone number, postal address and order history by supplying that customer's ema...

CVE-2026-106347

An use after free flaw was found in the Track component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567936270...

PT-2026-107850

The Track Orders for WooCommerce WordPress plugin before 1.2.7 does not verify ownership of an order before returning its billing details, allowing unauthenticated attackers to obtain a customer's name, email address, phone number, postal address and order history by supplying that customer's ema...

Linux Distros Unpatched Vulnerability : CVE-2026-106200

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

CVE-2026-106200

Use after free in Track in Google Chrome prior to 155.0.8059.39 allowe...

CVE-2026-106347

Use after free in Track in Google Chrome prior to 155.0.8059.39 allowe...

Linux Distros Unpatched Vulnerability : CVE-2026-106347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

DEBIAN-CVE-2026-106347

Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-106347

Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

DEBIAN-CVE-2026-106200

Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...