CVE-2026-14281

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.6. This is due to missing permission enforcement on the publicly accessible REST route POST...

grepmarx

Grepmarx - Application Security Platform Grepmarx is a web application providing a single platform to quickly understand, analyze and identify vulnerabilities in possibly large and unknown code bases. Features SAST Static Analysis Security Testing capabilities: Multiple languages support: C/C++, ...

The vulnerability of the platform for creating individual web applications in CRM systems is related to deficiencies in authentication procedures. This allows attackers to bypass existing security mechanisms and gain unauthorized access to protected information.

The vulnerability of the platform for creating individual web applications in CRM systems is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers, operating remotely, to circumvent existing security mechanisms and gain unauthorized access to...

natlas

Natlas Resumen Tienes muchos mapas y se están volviendo bastante difíciles de manejar. ¿Qué haces? Los pones en un libro y lo llamas atlas. Esto es similar, excepto que es un sitio web y es una colección de nmaps. El objetivo de Natlas es facilitar la realización de escaneos continuos y la revisi...

iris-web

Sistema de Investigación de Respuesta a Incidentes Versión actual v2.4.20 Demostración en línea IRIS Iris es una plataforma web colaborativa que tiene como objetivo ayudar a los respondedores de incidentes a compartir detalles técnicos durante las investigaciones. Tabla de contenido Primeros paso...

VolWeb

Introducción VolWeb es una plataforma de análisis de memoria forense digital que aprovecha el poder del framework Volatility 3. Está dedicada a ayudar en investigaciones y respuestas a incidentes. 🧬 Objetivos El objetivo de VolWeb es mejorar la eficiencia de la recolección de memoria y el análisi...

AperiSolve

Aperi'Solve Pruébalo ahora: https://www.aperisolve.com Apoya a Aperi'Solve: Aperi'Solve es una plataforma web de esteganálisis de código abierto que realiza análisis automatizados sobre imágenes para detectar y extraer datos ocultos mediante herramientas y técnicas de esteganografía comunes...

wvctf

WebVulnCTF WVCTF o WebVulnCTF es una plataforma web gamificada que promueve la formación en pentesting y seguridad en el desarrollo de aplicaciones web de forma entretenida. A través de un sistema de recompensas, el usuario debe buscar un conjunto de flags en la aplicación vulnerable, que...

CVE-2025-58780

CVE-2025-58780 Divulgación de vulnerabilidad: Inyección SQL en ScienceLogic Resumen Este documento describe una vulnerabilidad de inyección SQL divulgada de manera responsable encontrada en la plataforma web de ScienceLogic. La vulnerabilidad ha sido reportada a los mantenedores del proyecto de...

EUVD-2026-74189

The react-native-auth0 SDK's web platform implementation does not scope its in-memory token cache to individual user sessions when operating in a server-side rendering SSR environment where module state persists across HTTP requests. Under the listed preconditions, tokens cached in module memory...

CVE-2026-84685

The react-native-auth0 SDK 's web platform implementation fails to scope its in-memory token cache to individual user sessions in server-side rendering (SSR) environments where module state persists across HTTP requests. As a result, tokens cached in module memory can be retrieved by subsequent r...

CVE-2026-69708

Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-69708

CVE-2026-69708 is a use-after-free vulnerability in Windows Web Platform Storage that allows a locally authorized attacker to elevate privileges. The vulnerability is rated CVSS 3.1 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , meaning exploitation requires local access, low p...

EUVD-2026-73613

Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally...

Windows Web Platform Storage Elevation of Privilege Vulnerability

Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally...

PT-2026-87668

Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-69708: Use After Free

Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-77264

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code WordPress plugin (versions ≤ 4.8.6 ) contains a critical authentication bypass (CVSS 9.8). The handle_email_otp_return() function returns the secret magic login token directly in the HTTP response to a publ...

CVE-2026-77264 Automation Web Platform <= 4.8.6 - Unauthenticated Authentication Bypass via 'otp_transient' Token Disclosure

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 4.8.6. This is due to the handleemailotpreturn function returning the secret magic login token in the response t...

CVE-2026-77264 Automation Web Platform <= 4.8.6 - Unauthenticated Authentication Bypass via 'otp_transient' Token Disclosure

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 4.8.6. This is due to the handleemailotpreturn function returning the secret magic login token in the response t...