Lucene search
+L

70 matches found

Kitploit
Kitploit
•added 2026/09/30 10:16 p.m.•15 views

YT-Spammer-Purge

YouTube Spammer Purge これは何? – あなたのチャンネルや他のチャンネルに投稿されたスパムコメントを、さまざまな方法でフィルター・検索し、一括で削除・報告できます(以下の機能を参照)。 ダウンロード方法: 右側の「Releases」リンクをクリックし、最新リリースの「Assets」の下にある「YTSpammerPurge.exe」をダウンロードします(Assetsをクリックしてリリースファイルを表示する必要がある場合があります)。 Linux セットアップ手順 MacOS セットアップ手順 (exe ファイルを使用する場合、Windows...

6.2AI score
SaveExploits0References8
OSV
OSV
•added 2026/09/02 4:39 p.m.•10 views

DRUPAL-CONTRIB-2026-133

This module enables you to delete Webform submissions in bulk using a specified date range. The module doesn't sufficiently restrict access to the delete form. A separate PHP fatal error issue may prevent exploitation in practice on Drupal 10+...

5.9AI score
SaveExploits0References1
NVD
NVD
•added 2026/07/30 3:16 p.m.•30 views

CVE-2026-41187

Calico's apiserver wraps tier-scoped resources so that every operation runs through AuthorizeTierOperation, but the Delete override on NetworkPolicy, GlobalNetworkPolicy, and their staged variants is not invoked for DeleteCollection requests. A user holding the deletecollection verb or wildcard...

6.5CVSS0.00388EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/07/30 2:45 p.m.•14 views

CVE-2026-41187

Calico's apiserver wraps tier-scoped resources so that every operation runs through AuthorizeTierOperation, but the Delete override on NetworkPolicy, GlobalNetworkPolicy, and their staged variants is not invoked for DeleteCollection requests. A user holding the deletecollection verb or wildcard...

6.2CVSS5.9AI score0.00388EPSS
SaveExploits0References6Affected Software2
Cvelist
Cvelist
•added 2026/07/30 2:45 p.m.•48 views

CVE-2026-41187 Calico Tier Authorization Bypass via DeleteCollection

Calico's apiserver wraps tier-scoped resources so that every operation runs through AuthorizeTierOperation, but the Delete override on NetworkPolicy, GlobalNetworkPolicy, and their staged variants is not invoked for DeleteCollection requests. A user holding the deletecollection verb or wildcard...

6.2CVSS0.00388EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/07/30 2:45 p.m.•15 views

CVE-2026-41187 Calico Tier Authorization Bypass via DeleteCollection

Calico's apiserver wraps tier-scoped resources so that every operation runs through AuthorizeTierOperation, but the Delete override on NetworkPolicy, GlobalNetworkPolicy, and their staged variants is not invoked for DeleteCollection requests. A user holding the deletecollection verb or wildcard...

6.2CVSS5.9AI score0.00388EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•28 views

PT-2026-66490

Name of the Vulnerable Software and Affected Versions Calico affected versions not specified Description The apiserver fails to invoke the Delete override for DeleteCollection requests on NetworkPolicy, GlobalNetworkPolicy, and their staged variants. This occurs because these resources are wrappe...

6.5CVSS5.9AI score0.00388EPSS
SaveExploits0References9
CVE
CVE
•added 2026/07/28 5:39 a.m.•41 views

CVE-2026-15136

Technical details beyond what is provided in the initial document are not publicly available in the supplied materials. Monitor for updates to verification, remediation status, and affected versions.

4.3CVSS5.8AI score0.00192EPSS
SaveExploits0References6
CVE
CVE
•added 2026/07/16 9:13 p.m.•92 views

CVE-2026-44174

Kirby CMS (versions prior to 4.9.1 and 5.4.1) exposes REST API search and collection queries that did not validate model attributes, allowing authenticated users to invoke arbitrary model methods (e.g., password(), root(), loginPasswordless(), delete()) via collection endpoints. This can disclose...

8.7CVSS6.2AI score0.00487EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/07/10 1:26 p.m.•70 views

CVE-2026-22660 FlaskBB Logic Flaw Authorization Group Deletion via Bulk AJAX Endpoint

FlaskBB through 2.2.0, fixed in commit a5da9a5, contains a logic flaw vulnerability that allows authenticated administrators to delete all built-in authorization groups by exploiting a type mismatch in the bulk delete protection check. The bulk AJAX endpoint in the management views compares...

8.6CVSS0.00606EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/07/10 1:26 p.m.•21 views

CVE-2026-22660 FlaskBB Logic Flaw Authorization Group Deletion via Bulk AJAX Endpoint

FlaskBB through 2.2.0, fixed in commit a5da9a5, contains a logic flaw vulnerability that allows authenticated administrators to delete all built-in authorization groups by exploiting a type mismatch in the bulk delete protection check. The bulk AJAX endpoint in the management views compares...

8.6CVSS6AI score0.00606EPSS
SaveExploits0References3
GithubExploit
GithubExploit
•added 2026/07/10 1:27 a.m.•93 views

Exploit for Missing Authorization in Misp-Project Misp

CVE-2026-56423 — MISP deleteSelection Broken Access Control...

9.4CVSS6AI score0.00469EPSS
SaveExploits1
NVD
NVD
•added 2026/07/01 5:16 p.m.•20 views

CVE-2026-49087

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user can submit a specially crafted bulk deletion request that causes excessive resource consumption, which may render Kibana unavailable...

6.5CVSS0.00472EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/01 4:35 p.m.•52 views

CVE-2026-49087

The CVE-2026-49087 issue concerns Kibana: Allocation of Resources Without Limits or Throttling (CWE-770) leading to a denial of service (CAPEC-130). An authenticated user can submit a crafted bulk deletion request that inflates resource use and can render Kibana unavailable. Connected sources spe...

6.5CVSS5.8AI score0.00472EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/07/01 4:35 p.m.•16 views

CVE-2026-49087

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user can submit a specially crafted bulk deletion request that causes excessive resource consumption, which may render Kibana unavailable...

6.5CVSS5.8AI score0.00472EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/07/01 4:35 p.m.•24 views

EUVD-2026-41088

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user can submit a specially crafted bulk deletion request that causes excessive resource consumption, which may render Kibana unavailable...

6.5CVSS5.8AI score0.00472EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/01 4:35 p.m.•12 views

CVE-2026-49087 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user can submit a specially crafted bulk deletion request that causes excessive resource consumption, which may render Kibana unavailable...

6.5CVSS5.8AI score0.00472EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/01 4:35 p.m.•17 views

CVE-2026-49087 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user can submit a specially crafted bulk deletion request that causes excessive resource consumption, which may render Kibana unavailable...

6.5CVSS6AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2026/07/01 4:35 p.m.•55 views

CVE-2026-49087 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user can submit a specially crafted bulk deletion request that causes excessive resource consumption, which may render Kibana unavailable...

6.5CVSS0.00472EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/01 12:00 a.m.•1 views

CVE-2026-49087: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user can submit a specially crafted bulk deletion request that causes excessive resource consumption, which may render Kibana unavailable...

6.5CVSS6.7AI score0.00472EPSS
SaveExploits0References3
Rows per page
Query Builder