EUVD-2026-76786

The BE REST Endpoints WordPress plugin through 1.0.0 does not perform any authorization check before allowing widgets to be read, created, updated and deleted, and does not sanitize the values it stores in them, allowing unauthenticated users to inject arbitrary web scripts which will execute in...

CVE-2026-77752

Temporary Login Without Password is a WordPress plugin for managing temporary user access. Versions 1.5 through 1.9.8 fail to verify that a user requesting a temporary login already holds network super admin rights before granting those rights to the new or existing account. In a multisite networ...

CVE-2026-77705

The Amelia (Booking for Appointments and Events Calendar) WordPress plugin before 2.4.10 contains an authorization flaw in its customer/employee record editing feature. The plugin does not verify whether the user editing a record is entitled to modify the linked WordPress account. Users with Amel...

CVE-2024-34444-Exploit-Poc

CVE-2024-34444 - Slider Revolution Missing Authorization Scanner Professional mass scanner for CVE-2024-34444 affecting Slider Revolution WordPress plugin 6.7.0 Banner 🎯 Description CVE-2024-34444 is a Missing Authorization vulnerability in the Slider Revolution WordPress plugin versions 6.7.0...

CVE-2025-29927

CVE-2025-29927 Reproducción y corrección de la vulnerabilidad CVE-2025-29927. root@kitploit: git clone [email protected]:Bongni/CVE-2025-29927.git cd CVE-2025-29927 En vulnerable/ hay una versión de la aplicación que es vulnerable al ataque. En fixed/ hay una versión de la aplicación que est...

CVE-2024-30896

CVE-2024-30896 Summary A business logic flaw in influxdb allows users who own a valid allAccess token to escalate their privileges at operator level by listing current authorization tokens. Scenario Attacker might be a user which was gained access by an administrator via an allAccess token only...

CVE-2022-1203

CVE-2022-1203 Content Mask 1.8.4 - Actualización arbitraria de opciones por Suscriptor+ Descripción El plugin de WordPress Content Mask anterior a la versión 1.8.4.1 no realiza comprobaciones de autorización y CSRF en varias acciones AJAX, y tampoco valida que la opción a actualizar pertenezca al...

CVE-2025-65669

CVE-2025-65669 Se descubrió un problema en classroomio 0.1.13. Las cuentas de estudiantes pueden eliminar cursos desde la página Explorar sin ninguna comprobación de autorización o autenticación, omitiendo la restricción de eliminación exclusiva para administradores que se esperaba. Descubierto...

CVE-2025-34171

CVE-2025-34171: Exposición no autenticada de archivos y datos de depuración en CasaOS Resumen de la vulnerabilidad Campo| Valor ---|--- CVE ID| CVE-2025-34171 Afecta| CasaOS ≤ 0.4.15 Corregido en| No hay parche disponible Gravedad| Media CVSS 4.0|...

Exploit-CVE-2023-22518

Exploit-CVE-2023-22518 Confluence における CVE-2023-22518 CVE-2023-22518 : この脆弱性は、「Confluence のデータベースとサーバーにおける不適切な認可の脆弱性」として説明されています。このバグは、Atlassian 製品のオンプレミスバージョンに影響します。 環境のセットアップ 脆弱性のあるバージョン 8.0.4 を使用 ダウンロードURL :...

EUVD-2026-76743

The application's role-authorization lookup defaults to granting access when a request handler's name is not present in its table of role requirements, rather than defaulting to deny. Any request handler that is not explicitly registered in this table is reachable by any authenticated user...

EUVD-2026-76746

A routing rule selects between two different authentication mechanisms for the same downstream service based on the value of a client-supplied request header, rather than on any property the client cannot control. An authenticated user in possession of a shared service credential can set this...

cve-2025-29927

CVE-2025-29927 1. ve a /api/flag 2. añade x-middleware-subrequest: src/middleware:src/middleware:src/middleware:src/middleware:src/middleware como encabezado 3. ve la respuesta...

cve-2026-29204-whmcs-clientarea-addonid

CVE-2026-29204 — Guardia de complemento del área de cliente de WHMCS Notas no oficiales de la comunidad para CVE-2026-29204: en clientarea.php?action=productdetails, un cliente autenticado puede proporcionar un addonId externo con modop=custom y acceder al contexto del módulo que no pertenece a l...

CVE-2026-90454

A read-only deployment mode for a product with a bundled packet-analysis component (per the CISA ICS-CERT advisory reference) uses a pattern-based deny list to block write-capable routes, but the pattern omits routes that modify tags on stored session records . Since the proxy otherwise permits t...

CVE-2026-90450

The application's role-authorization lookup defaults to granting access when a request handler's name is not present in its table of role requirements, rather than defaulting to deny. Any request handler that is not explicitly registered in this table is reachable by any authenticated user...

CVE-2026-90450

CVE-2026-90450 is a fail-open authorization flaw in which the application's role-authorization lookup grants access by default when a request handler is not present in its table of role requirements. Consequently, any request handler not explicitly registered in the table is reachable by any auth...

CVE-2026-90448

CVE-2026-90448 affects a read-only deployment mode that proxies a set of API routes without restricting allowed request methods. One of these routes accepts a request that creates or overwrites a stored record with an attacker-chosen identifier, using the application's own elevated backend creden...

CVE-2026-90447

This ICS-CERT advisory (CSAF reference: ICSA-26-254-01) describes a privilege escalation vulnerability in a downstream service where a routing rule selects between two authentication mechanisms based on a client-supplied request header . An authenticated user possessing a shared service credentia...

CVE-2026-90447

A routing rule selects between two different authentication mechanisms for the same downstream service based on the value of a client-supplied request header, rather than on any property the client cannot control. An authenticated user in possession of a shared service credential can set this...