Duplicate-of-CVE-2023-26982

Trudesk 버전 1.2.6 취약점 설명: Trudesk 버전 1.2.6은 관리자 역할의 티켓 Create/Modify Ticket Tags를 통해 저장형 XSSStored Cross-Site Scripting 취약점이 발견되었습니다. 공격 벡터: 공격자는 Settings 메뉴로 이동하여 티켓을 선택하고 아래로 스크롤하여 Ticket Tags를 찾습니다. CREATE를 클릭하고 Add Tags 입력란에 XSS 페이로드를 삽입한 후 Create Tag를 클릭하여 저장형 XSS를 악용합니다. XSS 페이로드는 저장 직후 실행됩니...

CVE-2025-39459

CVE-2025-39459 Real Estate 7 = 3.5.2 - 인증되지 않은 권한 상승 🧨 CVE-2025-39459 — Real Estate 7 = 3.5.2 인증되지 않은 권한 상승 📌 개요 이 저장소는 Real Estate 7 WordPress 테마의 = 3.5.2 버전에 영향을 미치는 CVE-2025-39459 에 대한 Python 개념 증명 도구를 포함합니다. 이 취약점은 인증되지 않은 공격자 가 새 사용자를 등록하고 권한을 관리자 로 상승시켜 전체 사이트를 손상시킬 수 있게 합니다. 제품: Real Estat...

GHSA-WVM9-9G5J-623F Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange

Summary Open WebUI's OAuth token exchange endpoint issues a session for a provider access token without running the OAuth role management that the normal OAuth login callback runs. A user whose provider roles the login callback would refuse, or would demote, could still obtain a working session a...

CVE-2026-54807

CVE-2026-54807 CVE-2026-54807 WooCommerce 권한 상승 ║ ║ 인증되지 않은 관리자 역할 할당 회원가입 양식 통해 PRİV8 도구 및 익스플로잇 채널: https://t.me/+zuUQbKSrHgwyZmI0...

PT-2026-89703

Summary Open WebUI's OAuth token exchange endpoint issues a session for a provider access token without running the OAuth role management that the normal OAuth login callback runs. A user whose provider roles the login callback would refuse, or would demote, could still obtain a working session a...

PoC-CVE-2022-4939-

PoC-CVE-2022-4939 공격자는 wpajaxnoprivwcfmajaxcontroller AJAX 액션에 특별히 조작된 요청을 전송하여 멤버십 등록 양식을 수정하고 등록 역할을 관리자로 설정합니다. 그런 다음 플러그인은 해당 요청을 처리하고 사용자가 관리자 역할로 등록할 수 있도록 멤버십 등록 양식을 수정합니다. 공격자는 수정된 멤버십 등록 양식을 제출하여 관리자 역할로 새로운 사용자로 등록할 수 있습니다...

CVE-2026-75169

CVE-2026-75169 is an arbitrary file upload vulnerability in the /cgi-bin/ugwupload.cgi endpoint of MBS-Solutions X-Serie Gateway firmware V6_00_05 . A remote authenticated user with Admin role can upload files with arbitrary content to hardcoded paths , enabling full compromise (CVSS 8.8 HIGH , C...

CVE-2026-75169

An arbitrary file upload vulnerability in /cgi-bin/ugwupload.cgi of MBS-Solutions X-Serie Gateway firmware V60005 allows a remote authenticated user with Admin role to upload files with arbitrary content to hardcoded paths...

CVE-2025-15692

CVE-2025-15692 affects the Icegram Express WordPress plugin prior to version 5.8.6 . The root cause is improper escaping of a list description setting before it is output within an HTML attribute , enabling Stored Cross-Site Scripting (XSS) attacks. Exploitation requires an authenticated user wit...

EUVD-2026-64955

rConfig 8.0.0 before 8.2.13 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register accounts with full Administrator privileges due to a duplicate bare Auth::routes call in routes/web.php that re-enables the POST /register route after it was explicit...

CVE-2026-76404

In Splunk MCP Server app versions below 1.2.1, a user who holds the "admin" Splunk role could execute arbitrary commands on the underlying operating system. The vulnerability is possible because of missing input validation in the app's credential management component, which deserializes stored da...

CVE-2026-76346

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store a malicious script in dashboard sparkline format options and execute unauthorized JavaScript in the browser of another user who views the dashboard. If the other user holds...

CVE-2026-76310

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has an embedded report token could download the associated search job dispatch archive, recover session material, and use it to access all relevant data available to the report owner and affect...

CVE-2026-76404

The Splunk MCP Server app deserializes stored credential data without type validation, allowing an admin-role user to trigger arbitrary OS command execution. Affected versions are below 1.2.1; no exploitation evidence is provided. Update to version 1.2.1 to remediate. Splunk advisory: https://adv...

CVE-2026-76404 Remote Code Execution (RCE) through Deserialization of Untrusted Data in Splunk MCP Server app

In Splunk MCP Server app versions below 1.2.1, a user who holds the "admin" Splunk role could execute arbitrary commands on the underlying operating system. The vulnerability is possible because of missing input validation in the app's credential management component, which deserializes stored da...

CVE-2026-76346 Stored Cross-Site Scripting (XSS) through Splunk Web Dashboard Sparkline Format Options in Splunk Enterprise

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store a malicious script in dashboard sparkline format options and execute unauthorized JavaScript in the browser of another user who views the dashboard. If the other user holds...

CVE-2026-76327

CVE-2026-76327 is an SPL injection vulnerability in Splunk Enterprise (below 10.4.2, 10.2.6, 10.0.9, 9.4.14) and Splunk Secure Gateway (below 3.10.9, 3.9.23, 3.8.70). The root cause is that Secure Gateway dashboards fail to neutralize caller-supplied values before embedding them in dashboard sear...

CVE-2026-76310 Improper Access Control through Embedded Report REST API Requests in Splunk Enterprise

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has an embedded report token could download the associated search job dispatch archive, recover session material, and use it to access all relevant data available to the report owner and affect...

PT-2026-78768

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Description A user with the "power" role can store malicious Search...

PT-2026-78831

Name of the Vulnerable Software and Affected Versions Splunk MCP Server app versions prior to 1.2.1 Description Users with the admin Splunk role can execute arbitrary commands on the underlying operating system. This occurs due to missing input validation within the credential management componen...