CVE-2026-36720

The Bookcars car rental management platform, developed by Akram El Assas, contains an access control vulnerability in version 8.3 . Due to improper permission settings , an authenticated attacker can perform a privilege escalation by modifying their user type to gain administrator-level permissio...

EUVD-2022-36720

Malicious code in bioql PyPI...

MAL-2025-36720 Malicious code in testdtb (npm)

The package testdtb was found to contain malicious code...

CVE-2023-36720

creationtimestamp| type| source ---|---|--- 2023-10-10 22:22:51+00:00| seen| https://t.me/cibsecurity/72009 2024-01-03 18:07:00+00:00| seen| https://t.me/arpsyndicate/2336...

CVE-2023-36720

Windows Mixed Reality Developer Tools Denial of Service Vulnerability...

CVE-2023-36720

Windows Mixed Reality Developer Tools Denial of Service Vulnerability...

CVE-2023-36720

CVE-2023-36720 is a DoS vulnerability in Windows Mixed Reality Developer Tools with a CVSS v3.1 base score of 7.5 (HIGH). It requires network access, has no user interaction, and does not require privileges, with the impact limited to availability (I/N; A=HIGH). The available sources identify the...

CVE-2023-36720 Windows Mixed Reality Developer Tools Denial of Service Vulnerability

...

CVE-2020-36720

The Kali Forms plugin for WordPress is vulnerable to Authenticated Options Change in versions up to, and including, 2.1.1. This is due to the updateoption lacking proper authentication checks. This makes it possible for any authenticated attacker to change or delete the plugin's settings...

CVE-2020-36720 Kali Forms <= 2.1.1 - Missing Authorization to Settings Update

The Kali Forms plugin for WordPress is vulnerable to Authenticated Options Change in versions up to, and including, 2.1.1. This is due to the updateoption lacking proper authentication checks. This makes it possible for any authenticated attacker to change or delete the plugin's settings...

CVE-2020-36720

The Kali Forms plugin for WordPress is vulnerable to Authenticated Options Change in versions up to and including 2.1.1 . The root cause is that the update_option function lacks proper authentication checks, which allows any authenticated attacker to modify or delete the plugin's settings without...

CVE-2020-36720 Kali Forms <= 2.1.1 - Missing Authorization to Settings Update

The Kali Forms plugin for WordPress is vulnerable to Authenticated Options Change in versions up to, and including, 2.1.1. This is due to the updateoption lacking proper authentication checks. This makes it possible for any authenticated attacker to change or delete the plugin's settings...

CVE-2022-36720

CVE-2022-36720 affects Library Management System v1.0, with a SQL injection vulnerability in the id parameter of /admin/modify1.php. The CVSS v3.1 vector indicates a network-attackable, low-privileges, no user interaction, with high impact on confidentiality, integrity, and availability (8.8 base...

CVE-2021-36720

creationtimestamp| type| source ---|---|--- 2021-12-08 22:23:04+00:00| seen| https://t.me/cibsecurity/33642...

CVE-2021-36720

PineApp - Mail Secure - Attacker sending a request to :/blocking.php?url=alert1 and stealing cookies...

CVE-2021-36720

PineApp - Mail Secure - Attacker sending a request to :/blocking.php?url= and stealing cookies...

CVE-2021-36720

PineApp - Mail Secure contains a cross-site scripting (XSS) vulnerability in the /blocking.php?url= parameter that allows injection of arbitrary script code (e.g., ). This can lead to cookie theft and related session information exposure as described in multiple sources. The vulnerability is tied...