111874 matches found
CVE-2026-100623 Capgo Authentication Bypass via Direct PostgREST org_users Table Write
Capgo capgo.app exposes the legacy membership table public.orgusers directly through Supabase PostgREST. The table's row-level security policies "Allow org admin to insert" and "Allow org admin to update" only verify that the caller has admin rights in the target organization...
CVE-2026-100617
The Cap-go capgo.app application contains an authorization bypass vulnerability due to a failure to validate that principals in channel_permission_overrides belong to the organization. Authenticated users with app or organization admin privileges can exploit this by inserting override rows with a...
CVE-2026-100617 Cap-go capgo.app Authorization Bypass via channel_permission_overrides
Cap-go capgo.app fails to validate that principals in channelpermissionoverrides belong to the organization, allowing authenticated app/org admins to grant channel permissions to non-member users. Attackers with admin privileges can insert override rows with arbitrary external user UUIDs to grant...
CVE-2026-100608
Flowise versions through 3.1.4 contain an authorization bypass in the BullMQ admin dashboard . When running in queue mode with the dashboard enabled (and not in cloud mode), the /admin/queues mount fails to perform role, permission, or workspace scoping checks because it only validates the JWT vi...
EUVD-2026-87703
Flowise through 3.1.4 does not enforce authorization on the BullMQ admin dashboard. When the server runs in queue mode with the dashboard enabled and not in cloud mode MODE=queue, ENABLEBULLMQDASHBOARD=true, and !isCloud, the /admin/queues mount is protected only by the...
Exploit for CVE-2026-93485
Laboratorio pedagógico — CVE-2026-93485 "Comment2Shell" W...
Exploit for CVE-2026-13249
CVE-2026-13249 — Honeywell PD45 Unauthenticated File Upload R...
LetsDefend-SOC235-Atlassian-Confluence-Broken-Access-Control-0-Day-CVE-2023-22515-EventID-197
LetsDefend-SOC235-Atlassian-Confluence-Broken-Access-Control-0-Day-CVE-2023-22515-EventID-197 I was presented with a high-severity alert indicating a potential exploit attempt of CVE-2023-22515, a zero-day vulnerability in Atlassian Confluence. The alert showed a suspicious GET request from an...
WordPress WP Directory Kit plugin < 1.5.8 - Listing Admin+ Stored XSS vulnerability
Listing Admin+ Stored XSS vulnerability discovered by Yaswanth Reddy Sunkara in WordPress Plugin WP Directory Kit versions 1.5.8...
Triofox - Improper Access Control
The Gladinet Triofox solution before 12.91.1126.65588 and CentreStack before 12.10.595.65696 allow unauthenticated access to the /management/admindatabase.aspx endpoint, exposing sensitive database management functionality to anyone with network access. An unauthenticated attacker can remotely...
EUVD-2026-87367
Flame through 2.4.0 contains an improper restriction of excessive authentication attempts vulnerability in the POST /api/auth login endpoint that allows unauthenticated attackers to brute-force the admin password. Attackers can submit unlimited password guesses without rate limiting, attempt...
PT-2026-99279
Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.5 Description When the server operates in queue mode with the dashboard enabled and is not in cloud mode MODE=queue, ENABLE BULLMQ DASHBOARD=true, and !isCloud, the /admin/queues endpoint is protected only by the...
CVE-2026-85081: Improper Neutralization of Input During Web Page Generation
The File Manager WordPress plugin before 8.0.5, FileOrganizer WordPress plugin before 1.2.1, File Manager Pro WordPress plugin before 2.1.3 do not correctly validate the origin of window messages received by the file browser they load on their admin screens, accepting any origin that is a leading...
CVE-2026-100673: Improper Neutralization of Input During Web Page Generation
The Grav Data Manager plugin getgrav/grav-plugin-datamanager versions 1.0.1 through 1.4.4 render stored data entries in the item-detail view admin/templates/partials/item.html.twig without escaping, applying Twig's raw filter — in some cases after a striptags' ' call that PHP's striptags bypasses...
CVE-2026-100608: Missing Authorization
Flowise through 3.1.4 does not enforce authorization on the BullMQ admin dashboard. When the server runs in queue mode with the dashboard enabled and not in cloud mode MODE=queue, ENABLEBULLMQDASHBOARD=true, and !isCloud, the /admin/queues mount is protected only by the...
PT-2026-99283
Name of the Vulnerable Software and Affected Versions Capgo capgo.app versions prior to 12.261.0 Description An incomplete access-control fix in the public.sso providers table allows a user with org admin permissions and the org.update settings permission to perform vertical privilege escalation...
PT-2026-99344
Name of the Vulnerable Software and Affected Versions Grav Data Manager versions 1.0.1 through 1.4.4 Description Stored data entries in the item-detail view admin/templates/partials/item.html.twig are rendered without proper escaping due to the use of Twig's raw filter. In certain instances, a...
PT-2026-99377
Name of the Vulnerable Software and Affected Versions kyverno versions prior to 1.19.1 Description Insufficient validation of URL-encoded path segments in the Policy apiCall urlPath allows namespace tenants to bypass the per-namespace clamp. This enables the creation of objects in other namespace...
CVE-2026-100686: Improper Privilege Management
Budibase versions before 3.45.0 fail to validate per-app authorization in the POST /api/global/groups/:groupId/apps endpoint, allowing builders to assign application roles across workspace boundaries. A builder of a single workspace can exploit missing per-app authorization checks to grant...
CVE-2026-100706: Unintended Proxy or Intermediary
kyverno before 1.19.1 fails to properly validate URL-encoded path segments in Policy apiCall urlPath, allowing namespace tenants to bypass the per-namespace clamp and create objects in other namespaces as the admission-controller ServiceAccount. Attackers can exploit this by using percent-encoded...