104795 matches found
EUVD-2026-84867
Unleash is an open-source feature management platform. Prior to 8.0.3, the Unleash admin API contains five authorization vulnerabilities. POST /api/admin/segments/strategies assigns the Promise returned by hasPermission without awaiting it, allowing authenticated users to modify segment assignmen...
CVE-2026-77426 Unleash: Missing await on permission check + cross-project IDOR in admin API
Unleash is an open-source feature management platform. Prior to 8.0.3, the Unleash admin API contains five authorization vulnerabilities. POST /api/admin/segments/strategies assigns the Promise returned by hasPermission without awaiting it, allowing authenticated users to modify segment assignmen...
CVE-2026-77426 Unleash: Missing await on permission check + cross-project IDOR in admin API
Unleash is an open-source feature management platform. Prior to 8.0.3, the Unleash admin API contains five authorization vulnerabilities. POST /api/admin/segments/strategies assigns the Promise returned by hasPermission without awaiting it, allowing authenticated users to modify segment assignmen...
CVE-2026-76910 Unleash: Clone-feature lets a user copy a feature from a project they cannot read
Unleash is an open-source feature management platform. Prior to 8.0.3, cloneFeatureToggle and POST /api/admin/projects/:projectId/features/:featureName/clone authorize creation in the destination project but do not verify access to the source project. Because feature names are globally unique, a...
CVE-2026-76910 Unleash: Clone-feature lets a user copy a feature from a project they cannot read
Unleash is an open-source feature management platform. Prior to 8.0.3, cloneFeatureToggle and POST /api/admin/projects/:projectId/features/:featureName/clone authorize creation in the destination project but do not verify access to the source project. Because feature names are globally unique, a...
CVE-2026-76910
The open-source feature management platform Unleash (versions prior to 8.0.3 ) is vulnerable to an authorization bypass in the cloneFeatureToggle function and the POST /api/admin/projects/:projectId/features/:featureName/clone endpoint. The root cause is that the system validates permissions for ...
CVE-2022-35501
CVE-2022-35501 Amasty Blog Pro for Magento 2 中博客文章创建功能存在存储型跨站脚本（XSS）漏洞 描述 Amasty Blog Pro 2.10.3 和 2.10.4 插件（适用于 Magento 2）的文章创建功能允许在 title 字段中注入 JavaScript 代码，通过复制文章功能导致针对管理面板用户的 XSS 攻击，该功能使用了 data.title 字段并执行了 JavaScript 代码。 受影响端点（上述参数的注入点）： POST /admin/amastyblog/posts/save/key/somekey/ 受影响版本...
EUVD-2026-84624
Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains an authorization bypass vulnerability in the billing module handler that allows unauthenticated remote attackers to modify any tenant's account balance by supplying crafted act and frombillingmodule parameters to the admin panel...
CVE-2026-43643
Softaculous Virtualizor versions before 3.2.9 (Patch 9) and 3.0.0 are susceptible to an authorization bypass vulnerability in the billing module handler. An unauthenticated remote attacker can modify any tenant's account balance by sending a POST request to the admin panel dispatcher with crafted...
CVE-2026-75607 Frigate: WebSocket Missing Authorization — Viewer Can Execute Admin-Only Operations
Frigate is an open source network video recorder. Prior to 0.17.2, the WebSocket handler in frigate/comms/ws.py forwards attacker-selected message topics to the dispatcher without checking the authenticated user's role because the nginx authentication subrequest does not provide role-aware...
CVE-2026-95703
MISP is affected in the OrganisationsController::__uploadLogo method, which processes a caller-supplied tmp_name value using filesystem probes (file_exists, MIME type detection, EXIF reading) before verifying the value via is_uploaded_file. An authenticated site-admin user can supply an arbitrary...
EUVD-2026-84497
In MISP, the OrganisationsController::uploadLogo method processed a caller-supplied tmpname value with filesystem probes fileexists, MIME type detection, EXIF reading before verifying that the value corresponded to a genuine PHP file upload via isuploadedfile. An authenticated site-admin user cou...
CVE-2026-95682
MISP contains a stored cross-site scripting XSS vulnerability in the admin email composition screen. The MISP.org organization name setting was interpolated directly into a JavaScript string literal using an unescaped PHP echo: var org = "";. Because the value was placed inside a double-quoted...
CVE-2026-95682
MISP contains a stored XSS in the admin email composition screen . The MISP.org organization name was interpolated into a JavaScript string literal via an unescaped PHP echo (var org = ""), so a name containing a double-quote or backslash could terminate the literal and inject arbitrary script. T...
EUVD-2026-84399
MISP contains a stored cross-site scripting XSS vulnerability in the admin email composition screen. The MISP.org organization name setting was interpolated directly into a JavaScript string literal using an unescaped PHP echo: var org = "";. Because the value was placed inside a double-quoted...
CVE-2026-26719
Descripción Resumen Existe una vulnerabilidad de Cross‑Site Scripting almacenado en xxl-job-admin JobInfoController.java donde el parámetro addressList acepta JavaScript codificado en URL sin sanitizar. El payload se almacena y posteriormente se ejecuta en los navegadores de los usuarios, lo que...
CVE-2026-1645
The Hostel plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 1.1.8 . The root cause is insufficient input sanitization and output escaping related to the 'custom_currency' parameter and the 'locale_url' setting. This flaw allows authentica...
CVE-2026-88788 Text Styler <= 1.1.1 - Contributor+ Stored XSS
The Text Styler WordPress plugin through 1.1.1 does not sanitise and escape user-supplied styling values before outputting them within a front-end style block, and does not verify that a user may edit the target post, allowing users with contributor-level access or above to store JavaScript that...
