Lucene search
+L

128654 matches found

NVD
NVD
added 2026/08/25 12:16 p.m.5 views

CVE-2026-79664

Ech0 before 4.7.3 fails to properly revoke access tokens created with never-expire option, allowing attackers to maintain perpetual authenticated access after token theft. Three independent revocation mechanisms fail: logout panics on nil ExpiresAt field, RevokeToken skips when remainTTL is zero,...

9.1CVSS
SaveExploits0References2
NVD
NVD
added 2026/08/25 12:16 p.m.5 views

CVE-2026-79659

Ech0 before 4.7.3 contains a server-side request forgery vulnerability in the fetchPeerConnectInfo function that uses unvalidated HTTP requests instead of safe request methods with URL validation. Authenticated attackers can supply arbitrary URLs to access internal services and cloud metadata...

8.3CVSS
SaveExploits0References2
NVD
NVD
added 2026/08/25 12:16 p.m.4 views

CVE-2026-77997

Joomla Extension - yootheme.com - Authenticated, privileged information disclosure in YOOtheme Pro 1.0.0-5.0.41 - A missing access check allowed users with comtemplate editing permissions to access information about arbitrary modules without the respective commodules permissions...

5.1CVSS
SaveExploits0References1
NVD
NVD
added 2026/08/25 12:16 p.m.5 views

CVE-2026-77824

The Media Sweep – WordPress Media Cleaner plugin for WordPress is vulnerable to generic SQL Injection via the 'fields' parameter in all versions up to, and including, 1.1.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...

4.9CVSS
SaveExploits0References8
NVD
NVD
added 2026/08/25 12:16 p.m.5 views

CVE-2026-77996

Joomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41 - Lack of escaping in the location custom field lead to a XSS vector...

7.5CVSS
SaveExploits0References1
CVE
CVE
added 2026/08/25 11:53 a.m.7 views

CVE-2026-77997

YOOtheme Pro (a Joomla extension by yootheme.com) versions 1.0.0 through 5.0.41 contain a missing access check that allows authenticated users holding com_template editing permissions to view information about arbitrary site modules without the corresponding com_modules permissions. This constitu...

5.1CVSS5.6AI score
SaveExploits0References1
EUVD
EUVD
added 2026/08/25 11:53 a.m.4 views

EUVD-2026-65472

Joomla Extension - yootheme.com - Authenticated, privileged information disclosure in YOOtheme Pro 1.0.0-5.0.41 - A missing access check allowed users with comtemplate editing permissions to access information about arbitrary modules without the respective commodules permissions...

5.1CVSS5.5AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/25 11:53 a.m.7 views

CVE-2026-77997 Joomla Extension - yootheme.com - Authenticated, privileged information disclosure about site modules YOOtheme Pro 1.0.0-5.0.40

Joomla Extension - yootheme.com - Authenticated, privileged information disclosure in YOOtheme Pro 1.0.0-5.0.41 - A missing access check allowed users with comtemplate editing permissions to access information about arbitrary modules without the respective commodules permissions...

5.1CVSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/25 11:52 a.m.3 views

CVE-2026-77996 Joomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41

Joomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41 - Lack of escaping in the location custom field lead to a XSS vector...

7.5CVSS5.3AI score
SaveExploits0References1
CVE
CVE
added 2026/08/25 11:52 a.m.11 views

CVE-2026-77996

YOOtheme Pro (a Joomla extension) is affected by an authenticated, privileged stored XSS in versions 1.0.0 through 5.0.41 . The root cause is a lack of escaping in the location custom field , which allows a privileged user to inject a cross-site scripting payload. The CVSS 4.0 base score is 7.5 (...

7.5CVSS5.3AI score
SaveExploits0References1
EUVD
EUVD
added 2026/08/25 11:52 a.m.4 views

EUVD-2026-65477

Joomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41 - Lack of escaping in the location custom field lead to a XSS vector...

7.5CVSS5.2AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/25 11:52 a.m.6 views

CVE-2026-77996 Joomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41

Joomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41 - Lack of escaping in the location custom field lead to a XSS vector...

7.5CVSS
SaveExploits0References1
CVE
CVE
added 2026/08/25 11:33 a.m.9 views

CVE-2026-79666

Ech0 versions before 4.4.3 fail to enforce administrator authorization on dashboard log endpoints. Any authenticated user can query GET /api/system/logs and subscribe to SSE and WebSocket log streams, retrieving sensitive operational data including file paths, stack traces, and internal URLs . Th...

7.1CVSS5.4AI score
SaveExploits0References2
EUVD
EUVD
added 2026/08/25 11:33 a.m.6 views

EUVD-2026-65448

Ech0 before 4.4.3 fails to enforce administrator authorization on dashboard log endpoints, allowing any authenticated user to access system logs. Attackers with valid user sessions can query GET /api/system/logs and subscribe to SSE and WebSocket log streams to retrieve sensitive operational data...

7.1CVSS5.4AI score
SaveExploits0References2
CVE
CVE
added 2026/08/25 11:33 a.m.10 views

CVE-2026-79664

Ech0 versions before 4.7.3 contain an access token revocation bypass. When tokens are created with the never-expire option, three independent revocation mechanisms all fail: the logout handler panics on a nil ExpiresAt field, RevokeToken skips when remainTTL is zero, and the admin delete action d...

9.1CVSS5.4AI score
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/25 11:33 a.m.5 views

CVE-2026-79664 Ech0 before 4.7.3 Access Token Revocation Bypass

Ech0 before 4.7.3 fails to properly revoke access tokens created with never-expire option, allowing attackers to maintain perpetual authenticated access after token theft. Three independent revocation mechanisms fail: logout panics on nil ExpiresAt field, RevokeToken skips when remainTTL is zero,...

9.1CVSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/25 11:33 a.m.6 views

CVE-2026-79659 Ech0 before 4.7.3 Server-Side Request Forgery via fetchPeerConnectInfo

Ech0 before 4.7.3 contains a server-side request forgery vulnerability in the fetchPeerConnectInfo function that uses unvalidated HTTP requests instead of safe request methods with URL validation. Authenticated attackers can supply arbitrary URLs to access internal services and cloud metadata...

8.3CVSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/25 11:33 a.m.4 views

EUVD-2026-65455

Ech0 before 4.7.3 contains a server-side request forgery vulnerability in the fetchPeerConnectInfo function that uses unvalidated HTTP requests instead of safe request methods with URL validation. Authenticated attackers can supply arbitrary URLs to access internal services and cloud metadata...

8.3CVSS5.7AI score
SaveExploits0References2
CVE
CVE
added 2026/08/25 11:33 a.m.12 views

CVE-2026-79659

Ech0 before 4.7.3 is affected by a Server-Side Request Forgery (SSRF) vulnerability in the fetchPeerConnectInfo function. The root cause is the use of unvalidated HTTP requests instead of safe request methods with URL validation. An authenticated attacker can supply arbitrary URLs to reach intern...

8.3CVSS5.7AI score
SaveExploits0References2
NVD
NVD
added 2026/08/25 10:18 a.m.6 views

CVE-2026-12878

In affected versions of the Codefresh platform an authenticated user can utilize an API endpoint to elevate to Admin permissions...

8.6CVSS
SaveExploits0References1
Rows per page
Query Builder