3 matches found
cve-2026-23550-poc
CVE-2026-23550 PoC Un piccolo tester in Bash per CVE-2026-23550. Interroga l'endpoint di login del connettore modulare WordPress interessato, verifica se viene rilasciato un cookie wordpressloggedin e tenta di confermare l'accesso alla dashboard di amministrazione. Avvertenza: Utilizza questo...
CVE-2026-73630
SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/filetree/authFilePublishAccess endpoint, which is registered with CheckAuth only and reachable anonymously. The endpoint does not return a failure code; its outcome is signalled solely by the response message and th...
EUVD-2026-58620
SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/filetree/authFilePublishAccess endpoint, which is registered with CheckAuth only and is reachable anonymously. The endpoint never sets a failure code, so its outcome is signalled entirely by the response message and...