EUVD-2026-97831

REST API Mass Assignment vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to version 1.22.0, which fixes the issue...

DEBIAN-CVE-2026-109243

FreeRDP from 3.0.0 before 3.32.0 contains an incorrect permission assignment vulnerability that allows local users to read private keys written by cryptowritepem without owner-only permissions. Attackers on multi-user Unix hosts can enumerate the shared temporary directory during soft-smartcard...

CVE-2026-109329

The Admidio software versions 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 are vulnerable to a broken access control flaw in the members_assignment.php component. This vulnerability allows role administrators to perform a Cross-Organization Access Control Bypass by submitting crafted assign reque...

CVE-2026-109243

FreeRDP from 3.0.0 before 3.32.0 contains an incorrect permission assignment vulnerability that allows local users to read private keys written by cryptowritepem without owner-only permissions. Attackers on multi-user Unix hosts can enumerate the shared temporary directory during soft-smartcard...

EUVD-2026-97687

FreeRDP from 3.0.0 before 3.32.0 contains an incorrect permission assignment vulnerability that allows local users to read private keys written by cryptowritepem without owner-only permissions. Attackers on multi-user Unix hosts can enumerate the shared temporary directory during soft-smartcard...

hdwebmobile-booking-appointments

HDWebmobile Booking & Appointments Sell bookable services and appointments through WooCommerce, with a per-slot capacity that can never be oversold. WordPress.org: https://wordpress.org/plugins/hdwebmobile-booking-appointments/ Requires: WordPress 6.9+, WooCommerce, PHP 7.4+ License: GPLv2 or lat...

CVE-2026-109186

The jshERP application (versions through 3.6 ) is susceptible to a mass assignment vulnerability within the UserController update handler. This flaw allows authenticated users to overwrite protected fields, specifically tenant_id and password , by sending a crafted PUT /user/update request. Pract...

EUVD-2026-97390

jshERP through 3.6 contains a mass assignment vulnerability in the UserController update handler that allows authenticated users to overwrite protected fields including tenantid and password. Attackers can send a crafted PUT /user/update body to switch into another tenant on next login or overwri...

CVE-2026-109186 jshERP through 3.6 Mass Assignment via PUT /user/update

jshERP through 3.6 contains a mass assignment vulnerability in the UserController update handler that allows authenticated users to overwrite protected fields including tenantid and password. Attackers can send a crafted PUT /user/update body to switch into another tenant on next login or overwri...

CVE-2026-109185

The software jshERP (through version 3.6 ) is vulnerable to a missing authorization flaw in the UserController updateUser handler. This vulnerability allows authenticated users to assign arbitrary roles to any user account. Specifically, low-privilege attackers can escalate their own privileges b...

CVE-2026-109185 jshERP through 3.6 Privilege Escalation via PUT /user/updateUser

jshERP through 3.6 contains a missing authorization vulnerability in the UserController updateUser handler that allows authenticated users to assign arbitrary roles to any user. Low-privilege attackers can send their own user id with the tenant administrator roleId to escalate privileges or rebin...

EUVD-2026-97389

jshERP through 3.6 contains a missing authorization vulnerability in the UserController updateUser handler that allows authenticated users to assign arbitrary roles to any user. Low-privilege attackers can send their own user id with the tenant administrator roleId to escalate privileges or rebin...

CVE-2025-2304

Camaleon CMS v2.9.1 - Mass Assignment leads to Privilege Escalation Exploit Tool - PoC Description This project is a Python-based exploitation proof of concept tool that demonstrates and analyzes a privilege escalation vulnerability affecting v2.9.1 of Camaleon CMS. The script automates the proce...

CVE-2025-2304-CamaleonCMS-PoC

PoC: CVE-2025-2304 - Camaleon CMS Privilege Escalation Technical Overview This repository contains a Functional Proof of Concept PoC for a Mass Assignment vulnerability in Camaleon CMS versions prior to 2.8.1. The vulnerability resides in the updatedajax endpoint of the User Management module,...

CVE-2026-109567: Improper Privilege Management

Rapyd Admin from 9.0.0 before 9.20.0 contains an improper privilege management vulnerability in the UsersEdit Livewire component that allows users with the edit users permission to assign themselves the admin role. Attackers holding roles such as the shipped operator role can submit the admin rol...

CVE-2025-2304

Camaleon CMS -p Arguments -t, --target Base target URL -u, --username Valid low-privileged username -p, --password User password Exploit Flow 1. Retrieve login page and extract CSRF token 2. Authenticate with provided credentials 3. Access profile edit page 4. Extract password update endpoint and...

CVE-2025-2304-PoC

Exploit CVE-2025-2304 Camaleon CMS vulnerable a escalada de privilegios mediante una asignación masiva Descripción de la vulnerabilidad Existe una escalada de privilegios mediante una asignación masiva en Camaleon CMS Cuando un usuario desea cambiar su contraseña, se llama al método 'updatedajax'...

CVE-2025-15602-PoC

CVE-2025-15602-PoC CVE-2025-15602-PoC is a proof of concept for the vulnerability CVE-2025-15602 in Snipe-IT. One script to list all users and one script to take over an superadmin account. Context A user as only the right to edit users, he can abuse it to list and to do an account takeover of th...

Exploit-for-CVE-2025-2304

Exploit-for-CVE-2025-2304 usage: exploit.py -h --url URL --username USERNAME --password PASSWORD Description Camaleon CMS is affected by a privilege escalation vulnerability due to unsafe mass assignment. The updatedajax method in UsersController uses the permit! function, allowing unfiltered...

CVE-2024-54363-Exploit

CVE-2024-54363-Exploit Incorrect Privilege Assignment vulnerability in nssTheme Wp NssUser Register allows Privilege Escalation.This issue affects Wp NssUser Register: from n/a through 1.0.0. Description The nssTheme Wp NssUser Register plugin for WordPress is vulnerable to an Incorrect Privilege...