CVE-2025-14386

The Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization plugin for WordPress is vulnerable to authentication bypass due to a missing capability check on the 'generatessourl' and 'validatessotoken' functions in versions 2.4.4 to 2.5.12. This makes it...

EUVD-2012-5399

Malware in sbrugna...

EUVD-2013-0296

Malware in sbrugna...

EUVD-2012-2346

Malware in sbrugna...

EUVD-2022-2237

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-0985

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient capability checks could allow users with the moodle/site:uploadusers capability to delete users, without having the necessary moodle/user:delete...

CVE-2025-6366

The Event List plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.0.4. This is due to the plugin not properly validating a user's capabilities prior to updating their profile in the elupdateprofile function. This makes it possible for authenticated...

CVE-2025-25500

An issue in CosmWasm prior to v2.2.0 allows attackers to bypass capability restrictions in blockchains by exploiting a lack of runtime capability validation. This allows attackers to deploy a contract without capability enforcement, and execute unauthorized actions on the blockchain...

CVE-2025-25500

An issue in CosmWasm prior to v2.2.0 allows attackers to bypass capability restrictions in blockchains by exploiting a lack of runtime capability validation. This allows attackers to deploy a contract without capability enforcement, and execute unauthorized actions on the blockchain...

CVE-2025-25500: Improper Access Control

An issue in CosmWasm prior to v2.2.0 allows attackers to bypass capability restrictions in blockchains by exploiting a lack of runtime capability validation. This allows attackers to deploy a contract without capability enforcement, and execute unauthorized actions on the blockchain...

PT-2025-11600

Name of the Vulnerable Software and Affected Versions CosmWasm versions prior to 2.2.0 Description The issue allows attackers to bypass capability restrictions in blockchains by exploiting a lack of runtime capability validation. This enables attackers to deploy a contract without capability...

CVE-2024-6621

The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wprssactivatefeedsource' and 'wprsspausefeedsource' functions in all versions up to, and including, 4.23.11...

PT-2024-15071 · WordPress · Wp Customer Area

Name of the Vulnerable Software and Affected Versions: WP Customer Area WordPress plugin versions prior to 8.2.1 Description: The issue arises from the plugin not properly validating users' capabilities in some of its AJAX actions. This allows malicious users to edit other users' account addresse...

SUSE CVE-2010-0007

net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the CAPNETADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure arbitrary network-traff...

CVE-2017-17092

wp-includes/functions.php in WordPress before 4.9.1 does not require the unfilteredhtml capability for upload of .js files, which might allow remote attackers to conduct XSS attacks via a crafted file...

Capability Bypass

Moodle is vulnerable to capability bypass. Authenticated attackers can bypass the mod/lti:view capability because it is only checked at a course level rather than the activity level...

Information Disclosure Through Capability Bypass

Moodle is vulnerable to information disclosure. The library does not properly enforce the moodle/user:viewhiddendetails capability in the report/outline/index.php file. This allows a malicious user to view the username of the user that last accessed the activity report...

Capability Bypass

Moodle is vulnerable to capability bypass. A malicious user can edit topics without the required permissions when using the course-editing functions...

Capability Bypass

Moodle is vulnerable to capability bypass. An authenticated user can bypass the moodle/calendar:manageownentries capability and add a new calendar entry...

CVE-2016-2155: Undefined Security Weakness

The grade-reporting feature in Singleview aka Single View in Moodle 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 does not consider the moodle/grade:manage capability, which allows remote authenticated users to modify "Exclude grade" settings by leveraging the Non-Editing...