Azure-APIM-Cross-Tenant-Signup-Bypass

Bypass de registro entre inquilinos de Azure APIM Estado 01.12.2025: Esta vulnerabilidad sigue activa y explotable. Microsoft no ha corregido este problema y lo considera «por diseño». Aviso de seguridad GHSA-vcwf-73jp-r7mv CVE-2025-66390 Resumen Una vulnerabilidad de seguridad en el portal para...

Azure-APIM-Dev-Portal-Signup-Bypass

Un script de prueba de concepto para eludir el registro deshabilitado del portal para desarrolladores en Azure API Management APIM invocando directamente la API de registro del backend. Qué hace Los portales para desarrolladores de Azure APIM se pueden configurar para deshabilitar el registro de...

Viral Signup <= 2.1 - SQL Injection

The Viral Signup limited opt-in with viral referral sharing plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 2.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possibl...

CVE-2024-55963

CVE‑2024‑55963 PoC de RCE en Appsmith Exploit PoC para CVE‑2024‑55963 que ejecuta comandos arbitrarios o lanza una reverse shell en instancias Appsmith vulnerables. Maneja automáticamente tanto servidores modernos con la función environmentId como versiones mucho más antiguas «legacy» anteriores ...

CVE-2026-12416-CVE-2026-12417

CVE-2026-12416-CVE-2026-12417 Toma de control de cuenta no autenticada mediante validación débil de restablecimiento de contraseña a través del parámetro 'resetuserid' | Escalada de privilegios no autenticada mediante validación débil de restablecimiento de contraseña a través de...

Astra Linux – Vulnerability found in Python 3.11, Python 2.7, Python 3.7, and Pypy

The email module in Python, as of version 3.11.3, incorrectly parses email addresses that contain special characters. The incorrect portion of the RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism by allowing access to...

CVE-2025-49029

🚨 WordPress Custom Login And Signup Widget 插件 🔥 基础分数： 9.1（严重） CWE ID： CWE-94 – 生成代码的控制不当（'代码注入'） 🧠 描述 该插件允许管理员通过设置页面中的发件人名称 字段修改 sn.php 的内容。 用户提供的输入被直接写入 PHP 文件 ，未经清理或验证。 因此，在 text 参数中提供的任何PHP代码都将被存储到PHP文件中，并在直接请求时执行，导致远程代码执行（RCE） 。 📍 漏洞端点 root@kitploit:...

CVE-2024-5324

CVE-2024-5324 登录/注册弹窗（内联表单 + Woocommerce）2.7.1 - 2.7.2 - 缺少授权导致任意选项更新 描述： WordPress 的 Login/Signup Popup Inline Form + Woocommerce 插件在 2.7.1 至 2.7.2 版本中，由于 'importsettings' 函数缺少权限检查，容易受到未经授权的数据修改。这使得经过身份验证的攻击者（具有订阅者级别及更高级别的访问权限）能够更改受影响站点上的任意选项。这可用于启用新用户注册，并将新用户的默认角色设置为管理员。 root@kitploit: Severity...

CVE-2024-50475

CVE-2024-50475 Signup Page = 1.0 - 未认证的任意选项更新 描述： WordPress的Signup Page插件在所有版本（包括1.0）中因缺少权限检查而存在数据未授权修改漏洞，可导致权限提升。这使得未认证攻击者能够更新WordPress站点的任意选项。此漏洞可被利用将默认注册角色更新为管理员，并启用用户注册，从而使攻击者获得受影响站点的管理员用户访问权限。 root@kitploit: Published: 2024-10-25 00:00:00 CVE: CVE-2024-50475 CVSS:...

CVE-2026-83628

The Theme My Login plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 7.1.15 on Multisite installations. This is due to the tmlmssignuphandler function's gimmeanotherblog branch failing to enforce the network's activesignup registration policy, checking...

EUVD-2026-71840

The Theme My Login plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 7.1.15 on Multisite installations. This is due to the tmlmssignuphandler function's gimmeanotherblog branch failing to enforce the network's activesignup registration policy, checking...

WordPress Theme My Login plugin <= 7.1.15 - Authenticated (Subscriber+) Missing Authorization to Unauthorized Multisite Subsite Creation via 'gimmeanotherblog' Signup Stage vulnerability

Authenticated Subscriber+ Missing Authorization to Unauthorized Multisite Subsite Creation via 'gimmeanotherblog' Signup Stage vulnerability discovered by Maksim Hayder trjan - Iron Digital Labs LLC in WordPress Plugin Theme My Login versions = 7.1.15...

CVE-2026-19220

The Forminator Forms WordPress plugin before 1.57.1 does not verify that site registration is enabled on the network before creating a site signup, allowing unauthenticated visitors to create a new site on a WordPress multisite network and gain administrator privileges on it...

CVE-2026-15948

The CVE-2026-15948 entry concerns the Hydra Booking WordPress plugin. A Stored Cross-Site Scripting vulnerability exists in the first_name parameter for all versions up to and including 1.2.2 due to insufficient input sanitization and output escaping. The tfhb_host role can be self-assigned via t...

CVE-2026-72839

filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is enabled with default CreateUserDir setting. Unauthenticated attackers can register accounts that inherit the server root scope with full create, modify, delete, rename, share, and download permissions...

CVE-2026-72839

CVE-2026-72839 affects filebrowser up to version 2.63.16, where self-signup with default CreateUserDir permits accounts to inherit the server root scope with full create, modify, delete, rename, share, and download permissions. This unauthenticated access can reach all files, yielding high confid...

CVE-2026-72839 filebrowser through 2.63.16 Privilege Escalation via Signup

filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is enabled with default CreateUserDir setting. Unauthenticated attackers can register accounts that inherit the server root scope with full create, modify, delete, rename, share, and download permissions...

CVE-2026-72839 filebrowser through 2.63.16 Privilege Escalation via Signup

filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is enabled with default CreateUserDir setting. Unauthenticated attackers can register accounts that inherit the server root scope with full create, modify, delete, rename, share, and download permissions...

PT-2026-71902

filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is enabled with default CreateUserDir setting. Unauthenticated attackers can register accounts that inherit the server root scope with full create, modify, delete, rename, share, and download permissions...

CVE-2026-19211

A vulnerability was found in SourceCodester Photo Share Website 1.0. This affects an unknown function of the file /social/ajax.php?action=signup. Performing a manipulation of the argument email results in sql injection. Remote exploitation of the attack is possible. The exploit has been made publ...