110170 matches found
CVE-2024-50395
CVE-2024-50395 CVE 정보 사용자 제어 키를 통한 권한 부여 우회 취약점이 Media Streaming 추가 기능에 영향을 미치는 것으로 보고되었습니다. 악용될 경우 이 취약점으로 인해 로컬 네트워크 공격자가 권한을 획득할 수 있습니다. 다음 버전에서 이미 취약점을 수정했습니다: Media Streaming 추가 기능 500.1.1.6 2024/08/02 이상 PoC GIF 근본 원인 GET 메서드 인증 우회 Ghidra에서 FUN001293f0 원본 소스 코드에서는 ParseHttpHeaders 함수로 호출될 수...
CVE-2026-73179 Apache CXF: JPA authorization-code consume is non-atomic
Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider in Apache CXFallows a remote attacker to obtain multiple valid access tokens from a single authorization code via concurrent token exchange requests that race the non-atomic...
CVE-2026-73179
The Apache CXF JPA OAuth2 authorization code grant provider contains a race condition (CWE-367) due to non-atomic find-then-delete operations against a shared relational database under READ_COMMITTED isolation. This flaw allows a remote attacker to bypass single-use semantics and obtain multiple ...
EUVD-2026-95695
Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider in Apache CXFallows a remote attacker to obtain multiple valid access tokens from a single authorization code via concurrent token exchange requests that race the non-atomic...
CVE-2026-96518
Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3...
CVE-2026-96461
Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10...
CVE-2026-96337
Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3...
CVE-2026-95589
Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-payment-or-deposit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Deposits and Partial Payments for WooCommerce: from n...
CVE-2026-78341
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Authorization vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Unauthorized access...
CVE-2026-78026
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2026-78023
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2022-22978-PoC
CVE 2022-22978: RegexRequestMatcher 인증 우회 🥶 개요 제가 조사한 정보에 따르면, 이 취약점은 Spring Security 프레임워크의 RegexRequestMatcher 클래스와 관련이 있습니다. 구체적으로, 정규 표현식에 마침표.가 포함된 RegexRequestMatcher를 사용하는 애플리케이션은 \r%0a , \n%0d 문자를 사용하여 우회될 수 있습니다. 이로 인해 공격자는 인증 없이 허용되지 않은 경로에 접근할 수 있습니다. 취약한 Spring Security 프레임워크 버전: 5.5....
better-auth
Discord · 웹사이트 · 이슈 Better Auth Better Auth는 TypeScript용 프레임워크에 구애받지 않는 인증및 권한 부여 프레임워크입니다. 기본 제공되는 포괄적인 기능 세트를 제공하며, 짧은 시간 안에 최소한의 코드로 고급 기능을 추가할 수 있게 해주는 플러그인 생태계를 포함합니다. 2FA, 멀티테넌트 지원 또는 기타 복잡한 기능이 필요하든, 바퀴를 다시 발명하는 대신 실제 애플리케이션 구축에 집중할 수 있게 해줍니다. 왜 Better Auth인가? TypeScript 생태계에서 인증은 절반만 해결된...
EUVD-2026-95629
Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.7...
EUVD-2026-95623
Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-payment-or-deposit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Deposits and Partial Payments for WooCommerce: from n...
CVE-2026-95597 WordPress 워드프레스 결제 심플페이 plugin <= 5.5.17 - Settings Change vulnerability
Missing Authorization vulnerability in codemstory 워드프레스 결제 심플페이 pgall-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 워드프레스 결제 심플페이: from n/a through 5.5.17...
CVE-2026-95597
The codemstory 워드프레스 결제 심플페이 pgall-for-woocommerce WordPress plugin is vulnerable to a Missing Authorization issue in versions up to and including 5.5.17 . This vulnerability allows for Exploiting Incorrectly Configured Access Control Security Levels , specifically enabling a Settings Change vuln...
EUVD-2026-95603
Missing Authorization vulnerability in codemstory 워드프레스 결제 심플페이 pgall-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 워드프레스 결제 심플페이: from n/a through 5.5.17...