EUVD-2026-76799

The Sprout Invoices WordPress plugin before 20.8.16 does not perform a capability or ownership check before allowing a private note to be overwritten through one of its AJAX actions, allowing any authenticated user such as a subscriber to overwrite private notes on records belonging to other user...

EUVD-2026-76786

The BE REST Endpoints WordPress plugin through 1.0.0 does not perform any authorization check before allowing widgets to be read, created, updated and deleted, and does not sanitize the values it stores in them, allowing unauthenticated users to inject arbitrary web scripts which will execute in...

CVE-2026-77752

Temporary Login Without Password is a WordPress plugin for managing temporary user access. Versions 1.5 through 1.9.8 fail to verify that a user requesting a temporary login already holds network super admin rights before granting those rights to the new or existing account. In a multisite networ...

CVE-2026-77705

The Amelia (Booking for Appointments and Events Calendar) WordPress plugin before 2.4.10 contains an authorization flaw in its customer/employee record editing feature. The plugin does not verify whether the user editing a record is entitled to modify the linked WordPress account. Users with Amel...

CVE-2024-34444-Exploit-Poc

CVE-2024-34444 - Slider Revolution Missing Authorization Scanner Professional mass scanner for CVE-2024-34444 affecting Slider Revolution WordPress plugin 6.7.0 Banner 🎯 Description CVE-2024-34444 is a Missing Authorization vulnerability in the Slider Revolution WordPress plugin versions 6.7.0...

CVE-2025-29927

CVE-2025-29927 Reproducción y corrección de la vulnerabilidad CVE-2025-29927. root@kitploit: git clone [email protected]:Bongni/CVE-2025-29927.git cd CVE-2025-29927 En vulnerable/ hay una versión de la aplicación que es vulnerable al ataque. En fixed/ hay una versión de la aplicación que est...

CVE-2022-1203

CVE-2022-1203 Content Mask 1.8.4 - Actualización arbitraria de opciones por Suscriptor+ Descripción El plugin de WordPress Content Mask anterior a la versión 1.8.4.1 no realiza comprobaciones de autorización y CSRF en varias acciones AJAX, y tampoco valida que la opción a actualizar pertenezca al...

CVE-2025-65669

CVE-2025-65669 Se descubrió un problema en classroomio 0.1.13. Las cuentas de estudiantes pueden eliminar cursos desde la página Explorar sin ninguna comprobación de autorización o autenticación, omitiendo la restricción de eliminación exclusiva para administradores que se esperaba. Descubierto...

CVE-2025-34171

CVE-2025-34171: Exposición no autenticada de archivos y datos de depuración en CasaOS Resumen de la vulnerabilidad Campo| Valor ---|--- CVE ID| CVE-2025-34171 Afecta| CasaOS ≤ 0.4.15 Corregido en| No hay parche disponible Gravedad| Media CVSS 4.0|...

EUVD-2026-76743

The application's role-authorization lookup defaults to granting access when a request handler's name is not present in its table of role requirements, rather than defaulting to deny. Any request handler that is not explicitly registered in this table is reachable by any authenticated user...

EUVD-2026-76746

A routing rule selects between two different authentication mechanisms for the same downstream service based on the value of a client-supplied request header, rather than on any property the client cannot control. An authenticated user in possession of a shared service credential can set this...

cve-2025-29927

CVE-2025-29927 1. ve a /api/flag 2. añade x-middleware-subrequest: src/middleware:src/middleware:src/middleware:src/middleware:src/middleware como encabezado 3. ve la respuesta...

cve-2026-29204-whmcs-clientarea-addonid

CVE-2026-29204 — Guardia de complemento del área de cliente de WHMCS Notas no oficiales de la comunidad para CVE-2026-29204: en clientarea.php?action=productdetails, un cliente autenticado puede proporcionar un addonId externo con modop=custom y acceder al contexto del módulo que no pertenece a l...

CVE-2026-90454

A read-only deployment mode for a product with a bundled packet-analysis component (per the CISA ICS-CERT advisory reference) uses a pattern-based deny list to block write-capable routes, but the pattern omits routes that modify tags on stored session records . Since the proxy otherwise permits t...

CVE-2026-90450

The application's role-authorization lookup defaults to granting access when a request handler's name is not present in its table of role requirements, rather than defaulting to deny. Any request handler that is not explicitly registered in this table is reachable by any authenticated user...

CVE-2026-90450

CVE-2026-90450 is a fail-open authorization flaw in which the application's role-authorization lookup grants access by default when a request handler is not present in its table of role requirements. Consequently, any request handler not explicitly registered in the table is reachable by any auth...

CVE-2026-90448

CVE-2026-90448 affects a read-only deployment mode that proxies a set of API routes without restricting allowed request methods. One of these routes accepts a request that creates or overwrites a stored record with an attacker-chosen identifier, using the application's own elevated backend creden...

CVE-2026-90447

This ICS-CERT advisory (CSAF reference: ICSA-26-254-01) describes a privilege escalation vulnerability in a downstream service where a routing rule selects between two authentication mechanisms based on a client-supplied request header . An authenticated user possessing a shared service credentia...

CVE-2026-90447

A routing rule selects between two different authentication mechanisms for the same downstream service based on the value of a client-supplied request header, rather than on any property the client cannot control. An authenticated user in possession of a shared service credential can set this...

auto-repeater

AutoRepeater: Burp Suite를 이용한 자동화된 HTTP 요청 반복 tl;dr Extender 내에서 AutoRepeater.jar를 import하세요. 간단한 지침 AutoRepeater는 정의된 치환replacement에 의해 변경된 요청만 재전송합니다. AutoRepeater가 특정 탭에 설정된 조건과 일치하는 요청을 수신하면, 먼저 정의된 모든 기본 치환base replacement을 요청에 적용한 다음, 각 정의된 치환에 대해 기본 치환이 수행된 요청을 복사하고 해당 치환을 요청에 적용합니다. 소개 Bu...