325 matches found
CVE-2026-116855
Missing Authorization vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My auctions allegro: from n/a through 4.0.3...
CVE-2026-116855
The wphocus My auctions allegro WordPress plugin (versions
EUVD-2026-112023
Missing Authorization vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My auctions allegro: from n/a through 4.0.3...
CVE-2026-116855 WordPress My auctions allegro plugin <= 4.0.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My auctions allegro: from n/a through 4.0.3...
WordPress My auctions allegro plugin <= 4.0.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by ashv4ni in WordPress Plugin My auctions allegro versions = 4.0.3...
PT-2026-128210
Missing Authorization vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My auctions allegro: from n/a through 4.0.3...
CVE-2026-111683
Allegro Ralph through 20260902.1 contains a missing authorization vulnerability that allows authenticated staff users to bypass rack model permissions because RalphPermission skips checks for views without a queryset. Attackers can call DCAssetsView and SRRacksAPIView at /api/rack/ and...
CVE-2026-111683 Allegro Ralph through 20260902.1 Missing Authorization in Data Center Rack API
Allegro Ralph through 20260902.1 contains a missing authorization vulnerability that allows authenticated staff users to bypass rack model permissions because RalphPermission skips checks for views without a queryset. Attackers can call DCAssetsView and SRRacksAPIView at /api/rack/ and...
CVE-2026-111683
The Allegro Ralph application, through version 20260902.1 , is vulnerable to a missing authorization flaw (CWE-862) in its Data Center Rack API. The root cause is that RalphPermission skips permission checks for views that do not include a queryset. Authenticated staff users can exploit this by c...
CVE-2026-111683 Allegro Ralph through 20260902.1 Missing Authorization in Data Center Rack API
Allegro Ralph through 20260902.1 contains a missing authorization vulnerability that allows authenticated staff users to bypass rack model permissions because RalphPermission skips checks for views without a queryset. Attackers can call DCAssetsView and SRRacksAPIView at /api/rack/ and...
CVE-2026-111683
Allegro Ralph through 20260902.1 contains a missing authorization vulnerability that allows authenticated staff users to bypass rack model permissions because RalphPermission skips checks for views without a queryset. Attackers can call DCAssetsView and SRRacksAPIView at /api/rack/ and...
EUVD-2026-102974
Allegro Ralph through 20260902.1 contains a missing authorization vulnerability that allows authenticated staff users to bypass rack model permissions because RalphPermission skips checks for views without a queryset. Attackers can call DCAssetsView and SRRacksAPIView at /api/rack/ and...
CVE-2026-111683 Allegro Ralph through 20260902.1 Missing Authorization in Data Center Rack API
Allegro Ralph through 20260902.1 contains a missing authorization vulnerability that allows authenticated staff users to bypass rack model permissions because RalphPermission skips checks for views without a queryset. Attackers can call DCAssetsView and SRRacksAPIView at /api/rack/ and...
CVE-2026-111683: Missing Authorization
Allegro Ralph through 20260902.1 contains a missing authorization vulnerability that allows authenticated staff users to bypass rack model permissions because RalphPermission skips checks for views without a queryset. Attackers can call DCAssetsView and SRRacksAPIView at /api/rack/ and...
PT-2026-116082
šØ CVE-2026-111683 Allegro Ralph through 20260902.1 contains a missing authorization vulnerability that allows authenticated staff users to bypass rack model permissions because RalphPermission skips checks for views without a queryset. Attackers can call DCAssetsView and SRRacksAPIView at...
Allegro Tech Ralph authorization issue vulnerability
Allegro Tech Ralph 20260902.1 and earlier versions have an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks. RalphPermission skips checks for views without a queryset, allowing authenticated employee users to bypass rack model permissions. Attackers...
Astra Linux ā Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: media: platform: allegro-dvt: Fixed a possible memory leak in allocatebuffersinternal. The buffer within the loop should be released under the exception path; otherwise, a memory leak may occur. To mitigate this issue, release th...
RomPager Misfortune Cookie Auth Bypass (CVE-2014-9222)
Exploits CVE-2014-9222 in Allegro RomPager: malformed C107373883 cookie bypasses authentication on embedded device admin interfaces. !/usr/bin/env python3 -- coding: utf-8 -- """Allegro RomPager Misfortune Cookie auth bypass CVE-2014-9222.""" from kittysploit import from...
Allegro RomPager - Panel Detection
Allegro RomPager was detected.This toolkit was commonly used in embedded devices such as routers, cameras, and IoT devices, often on historical hardware with possible default credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Allegro RomPager was detected.""" from kittysploit import from...
CVE-2026-16211
A vulnerability was determined in allegro up to bcf65b994ef29fb3fc2e10b660e6288723d5209e. This impacts the function AssetLastHostname.incrementhostname of the file src/ralph/assets/models/assets.py of the component Hostname Allocation Handler. Executing a manipulation of the argument counter can...