444 matches found
CVE-2023-43148
CVE-2023-43148 著者 : Aitor Herrero Fuentes ベンダー: SPA-Cart ベンダーホームページ: https://spa-cart.com/ ソフトウェアリンク: https://demo.spa-cart.com/admin バージョン: 1.9.0.3 テスト環境: Windows 10 Pro CSRFによる全アカウント削除 demo.spa-cart.com アプリケーションにおける Cross Site Request Forgery の脆弱性により、リモート攻撃者が任意のコードを実行し、ワンクリックで "すべてのアカウント"...
fortinet-cve-2024-46671
CVE-2024-46671 FortiWeb（WAF）バージョン7.4.3 build 638GAで発見された0-day脆弱性 エクスプロイト このスクリプトは、主に認証済みIDOR脆弱性の悪用を自動化し、FortiWebの論理バグによりアカウントの削除とデフォルトアカウントのパスワードなしでの再作成を引き起こします。 エクスプロイトの使用方法 python3 CVE-2024-46671 IP USERNAME PASSWORD...
CVE-2026-80208
APITable through 1.13.0-beta.1 annotates both getUserHistories and closePausedUserAccount in InternalUserController with requiredLogin = false. ResourceInterceptor honours that annotation by returning before any session or API key is validated, and the nginx gateway shipped with the product proxi...
CVE-2025-25967
CVE-2025-25967: Cross-Site Request Forgery CSRF DDSN Interactive cm3 Acora CMS versione 10.1.1 è vulnerabile a Cross-Site Request Forgery CSRF. Questa falla consente agli attaccanti di indurre utenti autenticati a eseguire azioni non autorizzate, come l'eliminazione di account o la creazione di...
CVE-2026-80208
APITable through 1.13.0-beta.1 ships two internal endpoints (/api/v1/internal/getUserHistories and /api/v1/internal/users/{userId}/close) annotated with requiredLogin = false. Because the product's nginx gateway proxies all /api requests to the backend and the ResourceInterceptor returns before v...
EUVD-2026-67142
APITable through 1.13.0-beta.1 annotates both getUserHistories and closePausedUserAccount in InternalUserController with requiredLogin = false. ResourceInterceptor honours that annotation by returning before any session or API key is validated, and the nginx gateway shipped with the product proxi...
CVE-2026-78360
A missing authorization flaw was found in Anitya. The user deletion endpoint checks that the caller is logged in but does not check that the caller is an administrator. Any authenticated user can delete arbitrary user accounts, including administrator accounts, which can remove administrative...
CVE-2026-13174
The Eventin WordPress plugin before 4.1.21 does not verify ownership or capability before deleting user accounts, allowing users with contributor-level access and above to permanently delete other users' accounts...
CVE-2026-13174 Eventin < 4.1.21 - Contributor+ Speaker Account Deletion via IDOR
The Eventin WordPress plugin before 4.1.21 does not verify ownership or capability before deleting user accounts, allowing users with contributor-level access and above to permanently delete other users' accounts...
EUVD-2026-62260
The Eventin WordPress plugin before 4.1.21 does not verify ownership or capability before deleting user accounts, allowing users with contributor-level access and above to permanently delete other users' accounts...
CVE-2026-13174
The Eventin WordPress plugin before 4.1.21 has an IDOR flaw: contributor-level users can permanently delete other users' accounts. Update to 4.1.21 or later. No active exploitation reported. Patch via the Eventin plugin update page. Details: https://wpscan.com/vulnerability/849478d1-640f-49e0-8fa...
CVE-2026-65984
FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. In 1.3.2 and earlier, POST /api/refresh in server/api/auth/index.js falls back from current user data to decoded.groups, including when the user is deleted or groups is zero, and POST /api/heartbeat in server/api/index.js...
CVE-2026-19716
Stored Cross-site Scripting CWE-79 in the user management component in maalfer Pentestify before 1.1.1 allows an authenticated attacker to execute arbitrary JavaScript in the browser of another authenticated user via a crafted username, because the frontend escapes the username with escapeHTML...
CVE-2026-19716 Stored Cross-site Scripting in Pentestify user account deletion via unescaped username
Stored Cross-site Scripting CWE-79 in the user management component in maalfer Pentestify before 1.1.1 allows an authenticated attacker to execute arbitrary JavaScript in the browser of another authenticated user via a crafted username, because the frontend escapes the username with escapeHTML...
EUVD-2026-57930
Stored Cross-site Scripting CWE-79 in the user management component in maalfer Pentestify before 1.1.1 allows an authenticated attacker to execute arbitrary JavaScript in the browser of another authenticated user via a crafted username, because the frontend escapes the username with escapeHTML...
CVE-2026-18366
The Events Manager WordPress plugin before 7.4.1 does not properly scope its capability mapping, discarding the access control decisions WordPress already made for unrelated privileged actions, which allows unauthenticated users to change the password of, escalate to Administrator, or delete any...
CVE-2026-18366 Events Manager < 7.4.1 - Unauthenticated Privilege Escalation to Administrator
The Events Manager WordPress plugin before 7.4.1 does not properly scope its capability mapping, discarding the access control decisions WordPress already made for unrelated privileged actions, which allows unauthenticated users to change the password of, escalate to Administrator, or delete any...
CVE-2026-18366 Events Manager < 7.4.1 - Unauthenticated Privilege Escalation to Administrator
The Events Manager WordPress plugin before 7.4.1 does not properly scope its capability mapping, discarding the access control decisions WordPress already made for unrelated privileged actions, which allows unauthenticated users to change the password of, escalate to Administrator, or delete any...
PT-2026-71024
The Events Manager WordPress plugin before 7.4.1 does not properly scope its capability mapping, discarding the access control decisions WordPress already made for unrelated privileged actions, which allows unauthenticated users to change the password of, escalate to Administrator, or delete any...
CVE-2026-71206
Shiori CVE-2026-71206 affects the JWT CheckToken flow: it validates only the HMAC signature and returns the embedded claims.Account without re-fetching from the DB, with no session store or token revocation. Deletion or demotion of an account does not invalidate existing tokens, so an attacker co...