CVE-2026-89013

CVE-2026-89013 — Dolibarr hashp=shared 인가 우회 CVE-2026-89013 익스플로잇: document.php와 viewimage.php는 hashp 파라미터가 존재할 때 NOLOGIN을 강제합니다. 내부 마커 값 shared는 공유 토큰 해석을 건너뛰지만, 접근 제어 오버라이드는 비어 있지 않은 모든 값에 대해 여전히 작동하여 $accessallowed = 1로 설정하고 dolchecksecureaccessdocument의 결과를 폐기합니다. 따라서 인증되지 않은 요청으로 모든 modulepa...

CVE-2024-5326-Poc

CVE-2024-5326 CVE-2024-5326 Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX = 4.1.2 - 인증 누락으로 인한 임의 옵션 업데이트 설명 WordPress용 Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX 플러그인은 버전 4.1.2 이하에서 'postxpresetscallback' 함수에 대한 기능 점검capability check이 누락되어 데이터의 무단 수정에 취약합니다. 이로 인...

CVE-2024-54378

CVE-2024-54378 Quietly Insights = 1.2.2 - Отсутствие авторизации для аутентифицированных Subscriber+ произвольных обновлений опций Описание Плагин Quietly Insights для WordPress уязвим к несанкционированному изменению данных, что может привести к повышению привилегий из-за отсутствия проверки пра...

CVE-2025-29927

CVE-2025-29927 Уязвимость обхода прав доступа Next.Js CVE-2025-29927 Больше POC по адресу: https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X path по умолчанию /, многопоточность по умолчанию 10 Массовая проверка: python poc.py -f url.txt -p /path -t 10 Одиночная проверка: python poc.py -u...

CVE-2026-8337

CVE-2026-8337 CVE-2026-8337은 Concrete CMS의 설문 조사 기능에 영향을 미치는 안전하지 않은 직접 객체 참조IDOR 취약점입니다. CVE-2026-8347Express 연관 관계와 관련됨과 달리, 이 취약점은 특정 사이트 구성에서 인증되지 않은 공격자가 제한된/비공개 설문 조사에 참여할 수 있게 합니다. 개요 Concrete CMS 9.5.0 및 이전 버전에는 설문 조사 기능에 권한 부여 결함이 있습니다. 웹사이트에 공개 설문 조사와 제한된비공개 설문 조사가 모두 구성된 경우, 공격자는 제한된 설...

CVE-2026-90552

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate playlist ownership in the Playlists_schedules/list.json.php and Live/calendar.json.php endpoints. This missing authorization check allows both authenticated users with canStream privileges and unauthenticated us...

CVE-2026-90551

WWBN AVideo (through commit c3edcc274) has a missing authorization flaw in its video_from_program API endpoint, which fails to validate playlist ownership before returning results. An unauthenticated network attacker can query the endpoint to enumerate private playlist names, owner information, a...

CVE-2026-90550

WWBN AVideo (through commit c3edcc27) is affected by a missing authorization vulnerability in the PlayerSkins mediaSession.json.php endpoint. The endpoint fails to verify user authorization before returning video metadata, allowing unauthenticated attackers to supply a video ID parameter and retr...

CVE-2026-90549

WWBN AVideo , a PHP-based video platform, is vulnerable to missing authorization on the videosAndroid.json.php endpoint in versions through commit c3edcc274c389816d434acadac07ee78eaf330c1. Unauthenticated attackers can send a simple GET request to the endpoint and retrieve metadata of password-pr...

CVE-2026-90548

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization flaw in the ImageGallery list.json.php endpoint. The endpoint fails to validate user permissions, allowing unauthenticated attackers to retrieve filenames and URLs of password-protected image gall...

CVE-2026-90547

WWBN AVideo (through commit c3edcc274c389816d434acadac07ee78eaf330c1) contains an authorization flaw in the Bookmark plugin 's getBookmarks.json.php endpoint. The endpoint fails to validate user permissions, allowing unauthenticated attackers to query it with a video ID parameter and retrieve cha...

CVE-2026-90545

WWBN AVideo (through commit c3edcc274c389816d434acadac07ee78eaf330c1 ) fails to validate video access permissions in the commentAddNew.json.php endpoint. This missing authorization check allows authenticated users to post comments on videos that are password-protected or group-restricted, effecti...

CVE-2026-90546

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization flaw in the like.json.php endpoint. The application fails to validate video access permissions before processing like requests, allowing any logged-in user to submit likes on password-protected an...

CVE-2026-90544

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video access permissions in the videoAddViewCount.json.php endpoint before updating view statistics. Authenticated attackers with low privileges can increment view counts and watch-time on videos they cannot acc...

CVE-2026-90542

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization flaw in remindMe.json.php . The application fails to verify that a logged-in user can actually access a given live schedule before allowing the creation of a reminder. As a result, any authenticat...

EUVD-2026-76860

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate that logged-in users can access live schedules before creating reminders via remindMe.json.php. Authenticated attackers can create scheduler reminders for private live schedules they cannot view and learn the...

CVE-2026-90540

WWBN AVideo (through commit c3edcc274c389816d434acadac07ee78eaf330c1) contains a missing authorization flaw in the playListAddVideo.json.php endpoint. The endpoint fails to validate watch permissions when adding videos to playlists, allowing authenticated attackers to add password-protected video...

CVE-2026-90538

WWBN AVideo versions through commit c3edcc274c389816d434acadac07ee78eaf330c1 contain a missing authorization vulnerability in playlistsFromUser.json.php . The root cause is improper cache keying that conflates requests across different user contexts, allowing unauthenticated attackers to retrieve...

EUVD-2026-76856

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in playlistsFromUser.json.php that allows unauthenticated attackers to read private playlists by requesting another user's identifier. Attackers can retrieve Favorite and Watch Later...

CVE-2026-90537

CVE-2026-90537 affects WWBN AVideo (through commit c3edcc274c389816d434acadac07ee78eaf330c1) in the file plugin/Scheduler/sendEmail.json.php . The root cause is a missing authorization check : an unauthenticated attacker can access scheduler email jobs by supplying any valid site-wide daily token...