EUVD-2026-80118

GitLab has remediated an issue in GitLab EE affecting all versions from 18.11 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user with the Security Manager role to execute arbitrary CI/CD jobs and access protected...

CVE-2026-87860

The Subscriptions for WooCommerce WordPress plugin before 2.0.3 does not verify the security token on the request that cancels a subscription, allowing attackers to make a logged-in customer cancel their own active subscription through a crafted request they are tricked into making...

CVE-2026-89328

The FluentBoards WordPress plugin before 2.0.15 does not properly verify that a user holds board-manager privileges before performing several board-management operations, checking only board membership. This allows any member of a board to carry out manager-only actions on it, including adding or...

CVE-2026-85572

The Tutor LMS WordPress plugin before 4.0.8 does not check that a user has access to a course before returning its lesson discussion content, allowing any authenticated user, such as a subscriber, to read comments from courses they are not enrolled in, including comments awaiting moderation...

CVE-2026-84907

The Eventin WordPress plugin before 4.1.24 does not properly authorise order finalisation when its offline local payment method is enabled, relying on a nonce that is exposed to unauthenticated visitors and never checking that the caller owns the order, allowing unauthenticated attackers to reset...

EUVD-2026-80215

The FluentBoards WordPress plugin before 2.0.15 does not properly verify that a user holds board-manager privileges before performing several board-management operations, checking only board membership. This allows any member of a board to carry out manager-only actions on it, including adding or...

EUVD-2026-80211

The Rox Appointment Booking WordPress plugin before 1.2.8 does not perform any authorization check on the endpoints that return booking service and category records, allowing unauthenticated attackers to read the private internal notes stored on each service and category...

CVE-2026-85572 Tutor LMS 4.0.0 - < 4.0.8 - Subscriber+ Cross-Course Lesson Comment Disclosure

The Tutor LMS WordPress plugin before 4.0.8 does not check that a user has access to a course before returning its lesson discussion content, allowing any authenticated user, such as a subscriber, to read comments from courses they are not enrolled in, including comments awaiting moderation...

EUVD-2026-80198

The Tutor LMS WordPress plugin before 4.0.8 does not check that a user has access to a course before returning its lesson discussion content, allowing any authenticated user, such as a subscriber, to read comments from courses they are not enrolled in, including comments awaiting moderation...

EUVD-2026-80186

The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not have any authentication or authorisation checks on one of its report-printing routines, allowing unauthenticated users to retrieve WooCommerce order details and customer contact information, to target an individual order, and ...

CVE-2026-74926 MultiVendorX 5.0.0 - 5.0.15 - Subscriber+ Arbitrary Store Data and Ownership Overwrite via stores REST Endpoint

The MultiVendorX WordPress plugin before 5.0.16 does not verify that a user owns the store they are acting on in one of its REST API routes, allowing any authenticated user, such as a subscriber, to overwrite any store's details and payout settings and to replace the record of who owns it...

CVE-2025-69459

CVE-2025-69459 – 映画評価システム 1.0 のアクセス制御不備による未認証管理者アカウント作成 WriteUp CVE-2025-69459 – ExploitDB 50621...

CVE-2026-22014-GraphQL-Persisted-Queries-Injection-via-ID-Manipulation

CVE-2026-22014 – ID 조작을 통한 GraphQL Persisted Queries 인젝션 프로그램 코드Node.js root@kitploit: // graphqlpersisted.js - Accepts persisted query IDs const express = require'express'; const graphqlHTTP = require'express-graphql'; const queries = "abc": "query user name " ; app.post'/graphql', graphqlHTTP...

CVE-2025-29927_demo

CVE-2025-29937 재현 절차 root@kitploit: npm i npm run dev curl -H "x-middleware-subrequest: middleware:middleware:middleware:middleware:middleware" http://localhost:3000/protected...

k8s-CVE-2021-43557-poc

Installation minikube 설치 apisix 설치: root@kitploit: helm repo add apisix https://charts.apiseven.com helm repo add bitnami https://charts.bitnami.com/bitnami helm repo update kubectl create ns ingress-apisix helm install apisix apisix/apisix \ --set gateway.type=NodePort \ --set...

CVE-2024-20767-Adobe-ColdFusion

CVE-2024-20767-Adobe-ColdFusion Adobe ColdFusion은 웹 및 모바일 애플리케이션을 구축하고 배포하기 위한 신속한 개발 플랫폼입니다. CVE-2024-20767 - ColdFusion 2023.6, 2021.12 및 이전 버전은 임의 파일 시스템 읽기로 이어질 수 있는 부적절한 접근 제어 취약점의 영향을 받습니다. 공격자는 이 취약점을 악용하여 보안 조치를 우회하고 민감한 파일에 대한 무단 접근 권한을 얻을 수 있습니다. 영향을 받는 버전: Adobe ColdFusion 2023.6,...

CVE-2019-19550

CVE-2019-19550 説明 Senior Rubiweb 6.2.34.28 および 6.2.34.37 におけるリモート認証バイパスにより、脆弱なバージョンを使用する影響を受けたユーザーの機密情報への管理者アクセスが許可されます。攻撃者は正しいURLを提供するだけで済みます。 重要な日付 ベンダーへの通知: 2019-12-02 公開日: 2020-01-30 脆弱性の種類 不適切なアクセス制御 製品ベンダー Senior 影響を受ける製品コードベース Rubiweb - 6.2.34.37 Rubiweb - 6.2.34.28...

CVE-2020-24029

CVE-2020-24029 설명 ForLogic Qualiex v1 및 v3에서 인증되지 않은 비밀번호 변경으로 인해, 간단한 요청만으로 고객 및 관리자 권한과 데이터에 접근할 수 있습니다. 중요 날짜 공지공급업체: 2020-07-12 공개 공개일: 2020-08-31 취약점 유형 잘못된 접근 제어 제품 공급업체 ForLogic 영향을 받는 제품 코드 베이스 Qualiex - v1 Qualiex - v3 다른 버전도 영향을 받을 수 있으며, 특히 동일 계열의 제품이 해당됨 아직 테스트되지 않음 영향을 받는 구성 요소 Quali...

CVE-2020-24030

CVE-2020-24030 설명 ForLogic Qualiex v1 및 v3에는 취약한 토큰 만료가 있습니다. 이로 인해 원격의 인증되지 않은 권한 상승이 가능하며 토큰 재사용을 통해 민감한 데이터에 접근할 수 있습니다. 중요 날짜 공지공급업체: 2020-07-12 공개 공시일: 2020-08-31 취약점 유형 잘못된 접근 제어 제품 공급업체 ForLogic 영향받는 제품 코드 베이스 Qualiex - v1 Qualiex - v3 다른 버전도 영향을 받을 수 있으며, 특히 같은 제품군에서 그럴 수 있습니다아직 테스트되지 않음...

kernel: selinux: fix overlayfs mmap() and mprotect() access checks

A flaw was found in the Linux kernel's SELinux security module when handling overlayfs. The existing security model for overlayfs does not properly enforce access controls for mmap and mprotect operations. This oversight could allow a local attacker to bypass intended security policies, potential...