110234 matches found
CVE-2025-47539
🚨 CVE-2025-47539 – WordPress Eventin प्लगइन गंभीर शोषण 🔥 भेद्यता सारांश WordPress के लिए Event Manager, Events Calendar, Tickets, Registrations – Eventin प्लगइन importitems फ़ंक्शन में अनुपलब्ध प्राधिकरण जाँच के कारण अनधिकृत विशेषाधिकार वृद्धि के प्रति संवेदनशील है। 🔓 प्रभावित संस्करण: ⚠️ यह...
CVE-2025-29927
CVE-2025-29927 ★ CVE-2025-29927 Next.js मिडलवेयर बायपास PoC ★ विवरण CVE-2025-29927 : Next.js मिडलवेयर बायपास PoC विवरण: Next.js एक React फ्रेमवर्क है जो फुल-स्टैक वेब एप्लिकेशन बनाने के लिए उपयोग किया जाता है। संस्करण 1.11.4 से शुरू होकर 12.3.5, 13.5.9, 14.2.25 और 15.2.3 से पहले के संस्करणों में,...
CVE-2025-29927
CVE-2025-29927 Next.js Middleware Bypass Scanner CVE-2025-29927 CVE-2025-29927 एक विशेष सुरक्षा उपकरण है जो Next.js मिडलवेयर बाईपास भेद्यता CVE-2025-29927 का पता लगाने के लिए है, जो Next.js संस्करण 11.1.4 से 15.2.2 को प्रभावित करती है। यह गंभीर भेद्यता हमलावरों को एक विशेष रूप से तैयार HTTP हेडर...
CrushFTP-CVE-2024-4040-illdeed
CVE-2024-4040 — CrushFTP प्रमाणीकरण बाईपास शोषण इस रिपॉजिटरी में CVE-2024-4040 के लिए एक गुप्त पायथन अवधारणा-प्रमाण PoC शोषण है, जो CrushFTP v10 और उससे नीचे में एक गंभीर भेद्यता है, जो हमलावर को नकली CrushAuth कुकी और AWS-शैली Authorization हेडर का उपयोग करके प्रमाणीकरण को बायपास करने की अनुमति...
NextSecureScan
NextSecureScan - ماسح ثغرات الوسيطة CVE-2025-29927 لـ Next.js NextSecureScan هو ماسح أمني شامل مصمم خصيصًا لتحديد ثغرات تجاوز التفويض المرتبطة بالوسيطة CVE-2025-29927 في تطبيقات Next.js. يستخدم هذا الماسح تقنيات معالجة رؤوس HTTP صريحة، كشف إعادة التوجيه للوسيطة، وطرق تجاوز متعددة اللغات متقدمة...
CVE-2026-12859
A Missing Authorization (CWE-862) vulnerability exists in Caz Informatics Services Trade Inc. Advancity ALMS Cloud . The flaw allows an attacker to access functionality that is not properly constrained by Access Control Lists (ACLs). This issue affects the product through 2026-10-08 . The CVSS v3...
CVE-2026-12859 IDOR in Caz Informatics' Advancity ALMS Cloud
Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advancity ALMS Cloud: through 2026-10-08. NOTE: The vendor was contacted early about this disclosure but did not...
EUVD-2026-95031
Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advancity ALMS Cloud: through 2026-10-08. NOTE: The vendor was contacted early about this disclosure but did not...
cve-2020-15956
cve-2020-15956 يسمح خادما ACTi NVR 2.3 Standard/Professional و ACTi NVR3 Standard/Professional للمهاجمين غير المصادقين عن بُعد بتنفيذ هجوم رفض الخدمة. لاستغلال هذه الثغرة، كل ما يلزم هو إرسال حمولة رأس تفويض غير صالحة مكونة من 760 بايت على الأقل إلى خادم الوسائط، مما يؤدي إلى تجاوز سعة المخزن...
CVE-2025-29927-PoC
CVE-2025-29927: إثبات مفهوم لتجاوز Middleware في Next.js يحتوي هذا المستودع على إثبات مفهوم PoC لثغرة CVE-2025-29927، وهي ثغرة في Middleware الخاص بـ Next.js تسمح بتجاوز عمليات التحقق من المصادقة والتفويض عبر التلاعب بالترويسات. تفاصيل الثغرة النسخ المتأثرة : = 11.1.4, 14.0.0, 15.0.0, 15.2.3 معرّ...
CVE-2026-6145
CVE-2026-6145 — WordPress के लिए User Registration & Membership: अनधिकृत एडमिन अनुमोदन बाईपास CVE-2026-6145 के लिए प्रूफ-ऑफ-कॉन्सेप्ट एक्सप्लॉइट, WordPress के User Registration & Membership प्लगइन ≤ 5.1.5 में एक लापता प्राधिकरण भेद्यता है, जो अनधिकृत हमलावरों को नए खाते बनाते समय एडमिन अनुमोदन...
EUVD-2026-95024
pH7Builder pH7 Social Dating CMS before 18.5.0 contains an improper authorization vulnerability in the note module delete action that allows authenticated members to delete other members' note comments and categories. Attackers can submit another member's note ID in the POST id parameter to remov...
CVE-2026-107637 pH7Builder before 18.5.0 Improper Authorization via Note Module delete() Action
pH7Builder pH7 Social Dating CMS before 18.5.0 contains an improper authorization vulnerability in the note module delete action that allows authenticated members to delete other members' note comments and categories. Attackers can submit another member's note ID in the POST id parameter to remov...
CVE-2026-107637 pH7Builder before 18.5.0 Improper Authorization via Note Module delete() Action
pH7Builder pH7 Social Dating CMS before 18.5.0 contains an improper authorization vulnerability in the note module delete action that allows authenticated members to delete other members' note comments and categories. Attackers can submit another member's note ID in the POST id parameter to remov...
CVE-2026-107637
pH7Builder (pH7 Social Dating CMS) versions prior to 18.5.0 are vulnerable to an improper authorization flaw within the note module delete() action . The root cause is a lack of profile ID checks in the database queries, which allows authenticated members to delete note comments and categories be...
EUVD-2026-94999
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a local attacker to obtain sensitive information due to improper authorization...
CVE-2026-14273 IBM DataPower Gateway Incorrect Authorization
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a local attacker to obtain sensitive information due to improper authorization...
CVE-2026-14273
IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 are vulnerable to an incorrect authorization flaw (CWE-863). This issue could allow a local attacker to obtain sensitive information . No specific root cause...
CVE-2026-14273 IBM DataPower Gateway Incorrect Authorization
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a local attacker to obtain sensitive information due to improper authorization...
