PT-2026-104630

ZITADEL 3.0.0 through 3.4.15 and 4.x before 4.17.3 contains an incorrect authorization flaw in the User Service API, which verifies user.read against the caller's organization rather than the organization owning the target user. An authenticated member holding org-scoped user.read can query GET...

CVE-2026-105131: Incorrect Authorization

ezBookkeeping 1.2.0 before 2.0.1 contains a privilege escalation vulnerability that allows attackers holding an API token to obtain a full session token via /api/v1/tokens/refresh.json. Because TokenRefreshHandler never checks token type, attackers can exchange short-lived or IP-restricted API...

CVE-2026-105097: Authorization Bypass Through User-Controlled Key

A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the file /customer-currency/ of the component Customer Information API. The manipulation of the argument ID leads to authorization bypass. Remote exploitation of the attack is possible. The...

CVE-2026-105098: Exposure of Sensitive Information to an Unauthorized Actor

A security flaw has been discovered in Omega Solution CoinEx Crypto 2025. Affected is an unknown function of the file /ticket/customer of the component Support Ticket API. The manipulation of the argument status/page/count results in information disclosure. The attack can be executed remotely. Th...

PT-2026-104656

The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets ssl verify peer to FALSE, which is passed to CURLOPT SSL VERIFYPEER. On-path attackers can present any certificate to intercept Google Maps web-service...

CVE-2026-105096: Authorization Bypass Through User-Controlled Key

A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /customer/ of the component Customer Profile API. Executing a manipulation of the argument ID can lead to authorization bypass. The attack may be launched remotely. The exploit has be...

CVE-2026-104118: Undefined Security Weakness

The Razorpay for WooCommerce WordPress plugin before 4.8.8 does not perform ownership or authorization checks on a REST API route used during checkout, allowing unauthenticated attackers to modify the shipping information stored on arbitrary orders...

CVE-2026-105129

LaraDashboard versions prior to 1.4.8 are vulnerable to an incorrect authorization flaw (CWE-863) in the settings API. Authenticated users possessing only the settings.view permission can perform GET requests to /api/settings or /api/settings/{option_name} to access sensitive data. This vulnerabi...

CVE-2026-105129 LaraDashboard before 1.4.8 Incorrect Authorization Exposes Secrets via Settings API

LaraDashboard before 1.4.8 contains an incorrect authorization vulnerability that allows authenticated users with only settings.view permission to read stored secrets through the settings API. Attackers can query GET /api/settings or /api/settings/optionname to retrieve plaintext AI provider API...

CVE-2026-105129 LaraDashboard before 1.4.8 Incorrect Authorization Exposes Secrets via Settings API

LaraDashboard before 1.4.8 contains an incorrect authorization vulnerability that allows authenticated users with only settings.view permission to read stored secrets through the settings API. Attackers can query GET /api/settings or /api/settings/optionname to retrieve plaintext AI provider API...

CVE-2026-105125 LaraDashboard before 1.4.8 Path Traversal via /api/translations/{lang} Endpoint

LaraDashboard before 1.4.8 contains a path traversal vulnerability that allows unauthenticated attackers to read JSON files by manipulating the lang route segment. On Windows hosts, attackers can send URL-encoded backslash sequences like ..%5C to escape resources/lang and read composer.json or...

CVE-2026-105125 LaraDashboard before 1.4.8 Path Traversal via /api/translations/{lang} Endpoint

LaraDashboard before 1.4.8 contains a path traversal vulnerability that allows unauthenticated attackers to read JSON files by manipulating the lang route segment. On Windows hosts, attackers can send URL-encoded backslash sequences like ..%5C to escape resources/lang and read composer.json or...

CVE-2026-105125

LaraDashboard versions prior to 1.4.8 are vulnerable to a path traversal vulnerability within the /api/translations/{lang} endpoint. This flaw allows unauthenticated attackers to read sensitive JSON files, such as composer.json, by manipulating the {lang} route segment. Specifically, on Windows h...

CVE-2026-63030-CVE-2026-60137-wp2shell-poc

wp2shell — WordPress REST API 시간 기반 블라인드 SQLi → RCE 개념 증명PoC 설명 pocwptot.py는 WordPress REST API 배치 엔드포인트의 시간 기반 블라인드 SQL 인젝션 취약점을 악용하여, 권한 상승 체인을 거쳐 Remote Code ExecutionRCE까지 도달하는 개념 증명PoC입니다. 테스트 대상 취약점: CVE-2026-63030 CVE-2026-60137 중요 경고 본 도구는 소유한 시스템 또는 명시적인 서면 테스트 승인을 받은 시스템에서만 사용하십시오. 오용 시...

westone-CVE-2021-37580-scanner

westone-CVE-2021-37580-scanner Apache Shenyu는 확장 가능하고 고성능이며 응답성이 뛰어난 API 게이트웨이 솔루션으로, 모든 마이크로서비스 시나리오에 적용됩니다. Apache Shenyu admin에 인증 우회 취약점이 존재합니다. Shenyu admin bootstrap에서 JWT를 부적절하게 사용하면 공격자가 인증을 우회할 수 있으며, 공격자는 이 취약점을 통해 시스템 백그라운드에 직접 진입할 수 있습니다. 설치 및 사용법 git clone...

CVE-2021-32819

CVE-2021-32819 CVE-2021-32819 : SquirrellyJS смешивает чистые данные шаблона с параметрами конфигурации движка через API рендеринга Express. Перезаписывая внутренние параметры конфигурации, может быть вызвано удаленное выполнение кода в нижележащих приложениях. Источник...

CVE-2026-13447

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-13447 CVE-2026-13447 MStore API 4.18.4 - inspireui I am @abraxasnull. Loopback lab. The client is CVE-2026-13447-Abraxas-Labs.py. The kid is not a signature. FirebasePhoneAuthHelper::verifyidtoken checks alg...

CVE-2025-44823

Уязвимость раскрытия API-ключей в Nagios Log Server 2024R1.3.1 ▶️ PoC Demo Идентификатор CVE: CVE-2025-44823 Дата: 2025-04-02 Авторы: Alex Tisdale, Seth Kraft Сайт вендора: https://www.nagios.com/ Журнал изменений вендора: https://www.nagios.com/changelog/log-server Ссылка на ПО:...

CVE-2026-105123 W (wcms) through 3.18.0 RCE and Arbitrary File Write via Media Upload API

W vincent-peugnet/wcms through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing the unvalidated path in POST /api/v0/media/upload/:path. Attackers can upload .php files executed by the web server, use encoded ../ sequences...

CVE-2026-105123 W (wcms) through 3.18.0 RCE and Arbitrary File Write via Media Upload API

W vincent-peugnet/wcms through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing the unvalidated path in POST /api/v0/media/upload/:path. Attackers can upload .php files executed by the web server, use encoded ../ sequences...