7823 matches found
CVE-2026-68570
Apache Doris is affected by an Incorrect Authorization vulnerability that allows an authenticated user to bypass privilege checks and read data they are not authorized to access, resulting in unauthorized information disclosure . Affected versions span 2.0.0 through 2.1.* , 3.0.0 through 3.0.* , ...
EUVD-2026-77344
Affected versions of MISP’s interactive CLI shell implement access control independently from the normal web application, causing several authorization inconsistencies. The patch shows that CLI access could differ from the web application in multiple security-sensitive areas: - feed listings did...
CVE-2026-85188
Joomla Extension - regularlabs.com - Database data disclosure in Advanced Module Manager Free, Pro 12.1.0, Conditional Content Free, Pro 8.0.0, Content Templater Pro 14.2.0, ReReplacer Pro 16.2.0 for Joomla - The Conditions editor creates a default Condition Set name from the item to which the se...
CVE-2026-85188 Joomla Extension - regularlabs.com - Database data disclosure in Advanced Module Manager (Free, Pro) < 12.1.0, Conditional Content (Free, Pro) < 8.0.0, Content Templater (Pro) < 14.2.0, ReReplacer (Pro) < 16.2.0 for Joomla
Joomla Extension - regularlabs.com - Database data disclosure in Advanced Module Manager Free, Pro 12.1.0, Conditional Content Free, Pro 8.0.0, Content Templater Pro 14.2.0, ReReplacer Pro 16.2.0 for Joomla - The Conditions editor creates a default Condition Set name from the item to which the se...
EUVD-2026-77307
Joomla Extension - regularlabs.com - Database data disclosure in Advanced Module Manager Free, Pro 12.1.0, Conditional Content Free, Pro 8.0.0, Content Templater Pro 14.2.0, ReReplacer Pro 16.2.0 for Joomla - The Conditions editor creates a default Condition Set name from the item to which the se...
CVE-2026-85188
CVE-2026-85188 affects several Regular Labs Joomla extensions : Advanced Module Manager (< 12.1.0), Conditional Content (< 8.0.0), Content Templater (< 14.2.0), and ReReplacer (
CVE-2026-63039
CVE-2026-63039 — Apache InLong AuditAlertRule ORDER BY SQL 注入 针对 Apache InLong 的 audit-alert-rule 查询中 SQL 注入的可运行概念验证（PoC）复现程序。 InLong manager 的 mapper AuditAlertRuleEntityMapper.selectByCondition 使用安全的 MyBatis 参数进行过滤，但在排序时对两个请求字段使用 $ 字符串插值： root@kitploit: order by $request.orderField...
About the security content of Safari 27
About the security content of Safari 27 This document describes the security content of Safari 27. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
PoC-CVE-2024-44349
PoC-CVE-2024-44349 漏洞发现并测试于 Anteeo WMS - v4.7.31 该漏洞允许威胁行为者在用户名参数中构造SQL命令，并泄露底层数据库中的数据。受影响版本的ANTEEO B2B WMS为v4.7.x至v4.7.34（不含）。 用法 1. git clone [email protected]:AndreaF17/PoC-CVE-2024-44349.git 2. cd PoC-CVE-2024-44349 3. python3 -m venv venv 4. source venv/bin/activate 5. pip3 install -r...
CVE-2026-86407 User Registration & Membership < 5.2.8 - Unauthenticated User Data Disclosure via Membership Thank You Page
The User Registration & Membership WordPress plugin before 5.2.8 does not verify that the visitor requesting its membership confirmation page owns the account named in the request, nor that any registration or purchase has taken place, allowing unauthenticated users to retrieve another user's ema...
CVE-2026-86407
The User Registration & Membership WordPress plugin before 5.2.8 fails to verify that a visitor requesting its membership confirmation (thank you) page actually owns the account named in the request or that any registration/purchase occurred. This allows unauthenticated users to retrieve another ...
EUVD-2026-76951
The Contact Form to Chat Apps | Click to Chat to Order WordPress plugin before 2.15.8 does not perform any capability, nonce or session check on one of its public AJAX actions, allowing unauthenticated users to read the submitted entries of any form created with a supported third-party form Conta...
CVE-2023-1454
CVE-2023-1454 CVE-2023-1454漏洞检测脚本 本文仅供参考，未经授权请勿利用文章中的技术资料及工具对任何计算机系统进行入侵操作。 利用此文所提供的信息而造成的直接或间接后果和损失，均由使用者本人负责。 简介 Jeecg-Boot是一款基于代码生成器的低代码开发平台，它提供了一系列的代码生成器、模板引擎、权限管理、数据字典、数据导入导出等功能，可以帮助开发者快速构建企业级应用。 漏洞概述...
EUVD-2026-76191
Insertion of Sensitive Information Into Sent Data vulnerability in 10up ElasticPress allows Retrieve Embedded Sensitive Data. This issue affects ElasticPress: from n/a through 5.3.4...
WordPress Teddy Bear Customize Addon plugin <= 1.0.5 - Unauthenticated Order Data Disclosure vulnerability
Unauthenticated Order Data Disclosure vulnerability discovered by 0xBassia in WordPress Plugin Teddy Bear Customize Addon versions = 1.0.5...
CVE-2026-14562
The teddy-bear-customize-addon WordPress plugin (versions through 1.0.5 ) fails to perform authorization or ownership checks before returning WooCommerce order metadata and customer-uploaded attachment URLs . This allows unauthenticated attackers to disclose other customers' order and attachment ...
CVE-2022-0236
CVE-2022-0236 WP Import Export WordPress 插件由于在 /includes/classes/class-wpie-general.php 文件中的下载函数 wpieprocessfiledownload 缺少权限检查，因此存在未认证敏感数据泄露漏洞。这使未认证的攻击者能够下载受影响站点中任何已导入或导出的信息，其中可能包含用户数据等敏感信息。该漏洞影响版本至 3.9.15（含）。 需求 requests 使用方法 python poc.py -u...
com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: @JsonIgnore bypass in Java Records
A flaw was found in jackson-databind. When Java Records use a PropertyNamingStrategy, an attacker can bypass the @JsonIgnore annotation during deserialization. This allows a renamed JSON key to be assigned to a Record constructor parameter, even if it was intended to be ignored. Consequently, an...
CVE-2026-9225
IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an authenticated attacker to access sensitive files belonging to other users due to improper access control in the File/Read File component. When executing flows through the /api/v1/run/advanced/flowid endpoint, the application allows...
CVE-2026-9225
IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an authenticated attacker to access sensitive files belonging to other users due to improper access control in the File/Read File component. When executing flows through the /api/v1/run/advanced/flowid endpoint, the application allows...