BIT-KEYCLOAK-2026-11986 Keycloak-rest-admin-ui-ext: authorization bypass vulnerability in the admin-ui-ext bulk role-mapping-delete endpoints of keycloak

A flaw was found in the admin-ui-ext component of Keycloak, which provides extended administrative user interface capabilities. The issue occurs because certain bulk role-removal endpoints fail to perform granular permission checks when deleting role mappings. This allows a delegated administrato...

EUVD-2026-65442

Ech0 before 4.4.3 fails to enforce scope-based authorization on nine comment panel admin endpoints, allowing access tokens with minimal scopes to perform full comment moderation operations. Attackers with a limited-scope access token can list, approve, reject, delete comments, and modify comment...

EUVD-2026-65443

Ech0 through 4.2.1 contains a server-side request forgery vulnerability in the validateWebhookURL function webhooksettingservice.go, which only validates literal IP addresses via net.ParseIP and fails to reject hostnames that DNS-resolve to private or internal IPs e.g., 169.254.169.254.nip.io. An...

CVE-2026-79671

Ech0 versions through 4.2.1 contain a server-side request forgery (SSRF) vulnerability in the validateWebhookURL function (webhook_setting_service.go). The validation only rejects literal IP addresses via net.ParseIP() but fails to reject hostnames that DNS-resolve to private or internal addresse...

EUVD-2026-65447

Ech0 version 4.3.4 and earlier fails to reliably enforce scoped access token least-privilege restrictions on several privileged admin routes. Multiple privileged endpoints e.g., /api/inbox, /api/panel/comments, /api/backup/export omit scope checks and authorize based only on the user's admin role...

CVE-2026-79667 Ech0 before 4.4.3 Authentication Bypass via Scope Enforcement

Ech0 version 4.3.4 and earlier fails to reliably enforce scoped access token least-privilege restrictions on several privileged admin routes. Multiple privileged endpoints e.g., /api/inbox, /api/panel/comments, /api/backup/export omit scope checks and authorize based only on the user's admin role...

CVE-2026-79665 Ech0 before 4.5.1 Authorization Bypass via Session Tokens

Ech0 before 4.5.1 contains an authorization bypass vulnerability where session tokens skip scope validation in RequireScopes middleware, allowing logged-in non-admin users to access admin endpoints. Attackers can read system logs, visitor statistics, user emails, and subscribe to live WebSocket...

EUVD-2026-65449

Ech0 before 4.5.1 contains an authorization bypass vulnerability where session tokens skip scope validation in RequireScopes middleware, allowing logged-in non-admin users to access admin endpoints. Attackers can read system logs, visitor statistics, user emails, and subscribe to live WebSocket...

CVE-2026-79665

Ech0 before 4.5.1 is affected by an authorization bypass vulnerability. The root cause is that session tokens skip scope validation in the RequireScopes middleware , enabling logged-in non-admin users to access admin endpoints. An attacker with a valid low-privilege session token can read system ...

CVE-2026-79663 Ech0 before 4.7.3 Stored XSS via RSS feed tag names

Ech0 before 4.7.3 contains a stored cross-site scripting vulnerability in the public RSS feed where tag names and markdown content are rendered without HTML escaping. Attackers with admin privileges can inject malicious tag names or raw HTML in echo content that executes as JavaScript in RSS...

EUVD-2026-65451

Ech0 before 4.7.3 contains a stored cross-site scripting vulnerability in the public RSS feed where tag names and markdown content are rendered without HTML escaping. Attackers with admin privileges can inject malicious tag names or raw HTML in echo content that executes as JavaScript in RSS...

CVE-2025-26686-The-TCP-IP-Flaw-That-Opens-the-Gates

CVE-2025-26686-La-Peculiarita-del-Protocollo-TCP-IP-Che-Apre-i-Cancelli Una vulnerabilità critica di RCE nello stack TCP/IP di Windows CVE-2025-26686 lascia memoria sensibile sbloccata, consentendo a un attaccante remoto di dirottare i sistemi. Sfruttabile attraverso la rete, rischia la...

automato

automato.rb automato uses native LDAP libraries to automate the collection and enumeration of various directory objects. This is incredibly useful during an internal penetration test. automato can also conduct password spraying attacks, and identify if a user is a local administrator against any...

cve-2026-34472-auth-bypass-zte-h188a-router

CVE-2026-34472 Technische Analyse von CVE-2026-34472, einem Auth-Bypass durch durchgesickerte Anmeldedaten, die die Firmware ZTE ZXHN H188A V6 betreffen. Zusammenfassung In den getesteten H188A V6-Builds können nicht authentifizierte Anfragen an den Stammpfad auf Pre-Login-Wizard-Handler zugreife...

cve-2021-21735-zte-zxhn-h168n-admin-compromise

CVE-2021-21735: ZTE ZXHN H168N Informationsleck bis zur vollständigen Administratorübernahme Technische Fallstudie und für GitHub Pages bereite Ausarbeitung zu CVE-2021-21735 im ZTE ZXHN H168N V3.5. Dieses Repository konzentriert sich auf den Firmware-Routing-Fehler hinter den offengelegten...

thingsboard-ssrf-cve-2025-34282

CVE-2025-34282 — ThingsBoard SSRF über SVG-Bild-Upload Übersicht Sicherheitslücke zur Server-Side Request Forgery SSRF in ThingsBoard IoT-Plattform-Versionen vor 4.2.1. Ein Angreifer mit Tenant-Admin-Zugriff kann eine manipulierte SVG-Datei mit einer internen URL-Referenz über die...

bw-dump

BW-Dump Update 2 : Dieser Schwachstelle wurde CVE-2023-38840 zugewiesen. Update : Ein Patch wurde im GitHub-Pull-Request 5813 veröffentlicht, der die Schwachstelle behebt. Die betroffenen Versionen sind Bitwarden Desktop 2023.7.0 und älter. Beschreibung Ein Proof-of-Concept-Tool, das das...

CVE-2023-22515-Scan

CVE-2023-22515-Scan परिचय यह CVE-2023-22515 के लिए एक सरल स्कैनर है, जो Atlassian Confluence Data Center और Server में एक गंभीर कमजोरी है, जिसका शोषण वर्तमान में खतरा अभिनेताओं द्वारा 'अनधिकृत Confluence व्यवस्थापक खाते बनाने और Confluence इंस्टेंस तक पहुँचने' के लिए किया जा रहा है। इस कमजोरी को...

proofpoint-CVE-2023-0089

Über Sicherheitsforscher: ly1g3, ly1g3attuta.io GPG-Fingerabdruck: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Überblick: Remote Code Execution – Von einem niedrig privilegierten authentifizierten Benutzer zu Admin-RCE CVE: CVE-2023-0089 Zeitleiste:...

CVE-2023-28121-WordPress-Privilege-Escalation

🔐 CVE-2023-28121 — Escalation dei privilegi WordPress Esplorazione pratica di una vulnerabilità critica in WordPress utilizzando il plugin WooCommerce Payments. 📌 Riepilogo La CVE-2023-28121 consente di creare utenti amministratori senza autenticazione tramite API REST. Severità: Critica CVSS 9.8...