111875 matches found
CVE-2026-51119
CVE-2026-51119 - Invixium IXM WEB v2.3.85.25 में विशेषाधिकार वृद्धि अवलोकन Invixium IXM WEB v2.3.85.25 में POST /SystemUsers/CreateAppUser एंडपॉइंट पर प्राधिकरण जांच की कमी के कारण एक विशेषाधिकार वृद्धि भेद्यता मौजूद है। एक प्रमाणित निम्न-विशेषाधिकार उपयोगकर्ता इस एंडपॉइंट का दुरुपयोग करके एक नया...
CVE-2026-105305
A flaw was found in the OIDC implementation of Keycloak, specifically within the Device Authorization Grant flow. This component allows devices with limited input capabilities to obtain security tokens. The issue occurs because the flow fails to check the minimum authentication level required by ...
CVE-2026-66418-OpenClaw-Dashboard-v3.0.0-Stored-XSS-via-Failed-Login-Username-Field
نشرة أمنية: XSS مخزّن غير مصادق عليه يؤدي إلى الاستيلاء على حساب المسؤول openclaw-dashboard العنوان: ثغرة XSS مخزّنة في OpenClaw Dashboard v3.0.0 عبر حقل اسم المستخدم في تسجيل الدخول الفاشل معرّف CVE المعيّن: CVE-2026-66418 المستودع المستهدف: https://github.com/tugcantopaloglu/openclaw-dashboard...
EUVD-2026-93019
A flaw was found in the OIDC implementation of Keycloak, specifically within the Device Authorization Grant flow. This component allows devices with limited input capabilities to obtain security tokens. The issue occurs because the flow fails to check the minimum authentication level required by ...
CVE-2026-105305 Keycloak-services: keycloak-services: device authorization grant bypasses per-client minimum.acr.value enforcement
A flaw was found in the OIDC implementation of Keycloak, specifically within the Device Authorization Grant flow. This component allows devices with limited input capabilities to obtain security tokens. The issue occurs because the flow fails to check the minimum authentication level required by ...
CVE-2026-105305 Keycloak-services: keycloak-services: device authorization grant bypasses per-client minimum.acr.value enforcement
A flaw was found in the OIDC implementation of Keycloak, specifically within the Device Authorization Grant flow. This component allows devices with limited input capabilities to obtain security tokens. The issue occurs because the flow fails to check the minimum authentication level required by ...
CVE-2026-105305
A flaw exists in the OIDC implementation of Keycloak , specifically within the Device Authorization Grant flow . The root cause is that the flow fails to validate the minimum authentication level defined in client configurations. Consequently, an attacker possessing a stolen user password can byp...
CVE-2026-105305
A flaw was found in the OIDC implementation of Keycloak, specifically within the Device Authorization Grant flow. This component allows devices with limited input capabilities to obtain security tokens. The issue occurs because the flow fails to check the minimum authentication level required by ...
CVE-2026-6741
CVE-2026-6741 CVE-2026-6741, CVSS 8.8 उच्च स्तर की एक प्रमाणित एजेंट+ विशेषाधिकार वृद्धि प्रिविलेज एस्केलेशन भेद्यता है, जो LatePoint – कैलेंडर बुकिंग प्लगइन में पाई गई है। CVE-2026-6741 — LatePoint विशेषाधिकार वृद्धि स्कैनर प्लगइन: LatePoint – कैलेंडर बुकिंग प्लगइन फॉर अपॉइंटमेंट्स एंड इवेंट्स...
CVE-2026-23550
██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗ ███████╗ ███████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ╚════██╗██╔═████╗╚════██╗██╔════╝ ╚════██╗╚════██╗██╔════╝ ██╔════╝██╔═████╗ ██║ ██║ ██║█████╗ █████╔╝██║██╔██║ █████╔╝███████╗ █████╔╝ █████╔╝███████╗ ███████╗██║██╔██║ ██║ ╚█...
WordPress Gloria Admin Panel plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Gloria Admin Panel versions = 1.3...
CVE-2026-8181
CVE-2026-8181 تسمح هذه الثغرة للمهاجمين غير الموثّقين الذين يعرفون اسم مستخدم مسؤول صالح بانتحال شخصية ذلك المسؤول أثناء طلبات REST API باستخدام أي كلمة مرور غير صحيحة في رأس Basic Authentication. يمكن للمهاجمين استغلال هذا العيب لإنشاء حساب مسؤول جديد دون مصادقة مسبقة...
CVE-2026-105705
A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/adddrug.php. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the...
CVE-2026-105705
The SourceCodester Drug Recommendation System 1.0 is vulnerable to a Cross-Site Scripting (XSS) flaw via an unknown function in the Admin/add_drug.php file. This vulnerability allows for remote manipulation resulting in XSS. The documents indicate that an exploit has been released to the public a...
EUVD-2026-92948
A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/adddrug.php. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the...
CVE-2026-105705 SourceCodester Drug Recommendation System add_drug.php cross site scripting
A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/adddrug.php. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the...
CVE-2026-105705 SourceCodester Drug Recommendation System add_drug.php cross site scripting
A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/adddrug.php. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the...
CVE-2015-9357-POC
CVE-2015-9357 वर्डप्रेस स्माइली/इमोटिकॉन पार्सर में संग्रहित XSS, जाली नॉन्स अनुरोध के माध्यम से एडमिन उपयोगकर्ता निर्माण। यह इमोटिकॉन regex के माध्यम से विशेषता संदर्भ से बाहर निकलता है, JS को onerror हैंडलर में डालता है। स्क्रिप्ट टैग की आवश्यकता नहीं, प्रभावित फ़ील्ड पर wpkses फ़िल्टरिंग से बच...
CVE-2026-105703
A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem/admin/change-password.php of the component Change Password Handler. This manipulation of the argument currentpassword causes...
EUVD-2026-92938
A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem/admin/change-password.php of the component Change Password Handler. This manipulation of the argument currentpassword causes...