CVE-2026-77780

Roskus Prospero Flow CRM versions 4.9.1 through 5.14.0 contain an authorization bypass (IDOR) in the POST /transaction/save endpoint. A user with transaction and accounting creation permissions can supply a bank_account_id or bank_card_id belonging to another company, and the value is persisted a...

CVE-2026-73673

CVE-2026-73673: تحديث البرنامج الثابت غير المصادق عليه في Netis NC63 مع غياب المصادقة التشفيرية للبرنامج الثابت البحث الأصلي عن الثغرة بواسطة Özcan Ersan @ozcanpng. يوثّق هذا المستودع CVE-2026-73673، التي اكتشفها المؤلف وأبلغ عنها. حزمة غير تدميرية لإثبات المفهوم والأدلة الخاصة بـ CVE-2026-73673...

WordPress AI Agent by SiteGround plugin <= 1.2.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media Upload via /generate-content REST Endpoint vulnerability

Missing Authorization to Authenticated Contributor+ Arbitrary Media Upload via /generate-content REST Endpoint vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin SG AI Studio versions = 1.2.7...

CVE-2024-51428-PoC

CVE-2024-51428 - PoC слепой SQL-инъекции в ZoneMinder Python-обёртка для sqlmap , предназначенная для эксплуатации CVE-2024-51428 в ZoneMinder. Этот инструмент автоматизирует обнаружение и эксплуатацию уязвимости Blind SQL Injection , при этом вывод остаётся чистым и сосредоточенным на полезных...

EUVD-2026-63817

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not restrict access to per-vendor commission configuration returned by one of its unauthenticated store REST endpoints, allowing any unauthenticated user to disclose a vendor's commission type...

CVE-2026-16575

CVE-2026-16575 affects the Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin in versions prior to 5.0.14 . The vulnerability is an unauthenticated information disclosure caused by a missing access restriction on a store REST endpoint that returns per-vendor commissio...

CVE-2026-39987

CVE-2026-39987 marimo هو دفتر ملاحظات Python تفاعلي. قبل الإصدار 0.23.0، يحتوي Marimo على ثغرة RCE قبل المصادقة root@kitploit: / | |// / / / / / / |/ |/ \ / | | | \ /| | /| //|/|/ / | | | / -----/ | |/ |/ ----- \ | |/ \ / / / / //// / | |// CVE-2026-39987 Marimo /terminal/ws — RCE قبل...

mig

MIG: Mozilla InvestiGator MIG दूरस्थ एंडपॉइंट्स की जांच शल्यक्रिया के लिए Mozilla का प्लेटफॉर्म है। ⚠️ अप्रचलन सूचना ⚠️ Mozilla अब Mozilla InvestiGator MIG प्रोजेक्ट का रखरखाव नहीं कर रहा है। Mozilla आंतरिक रूप से इस कोड का उपयोग भी नहीं कर रहा है। आप इस कोड का उपयोग बिना किसी वारंटी के ज्यों का...

SpookFlare

SpookFlare SpookFlare सुरक्षा उपायों को बायपास करने का एक अलग दृष्टिकोण रखता है और यह आपको क्लाइंट-साइड डिटेक्शन और नेटवर्क-साइड डिटेक्शन पर एंडपॉइंट काउंटरमेशर्स को बायपास करने का अवसर देता है। SpookFlare Meterpreter, Empire, Koadic आदि के लिए एक लोडर/ड्रॉपर जनरेटर है। SpookFlare में अस्पष्टीकरण...

sinter

Sinter Sinter is a 100% user-mode endpoint security agent for macOS 10.15 and above, written in Swift. Sinter uses the user-mode EndpointSecurity API to subscribe to and receive authorization callbacks from the macOS kernel, for a set of security-relevant event types. The current version of Sinte...

sinter

Sinter Sinter هو وكيل أمان لنقاط النهاية يعمل في وضع المستخدم بنسبة 100% لنظام macOS 10.15 وما فوق، مكتوب بلغة Swift. يستخدم Sinter واجهة برمجة تطبيقات EndpointSecurity في وضع المستخدم للاشتراك في استدعاءات التفويض من نواة macOS واستلامها، لمجموعة من أنواع الأحداث ذات الصلة بالأمان. الإصدار الحال...

CVE-2026-76156

OS command injection in the api endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an authenticated administrator to execute arbitrary operating system commands as root...

CVE-2026-76158

Datiphy Data Management Center (v8.3.0 through v8.5.1) contains a path traversal vulnerability in its upload API endpoint. An unauthenticated remote attacker can supply relative or absolute path sequences to write files to arbitrary locations outside the intended upload directory, enabling arbitr...

EUVD-2026-63794

OS command injection in the api endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an authenticated administrator to execute arbitrary operating system commands as root...

EUVD-2026-63759

In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass importfilteringopts, allowing an admin to fetch internal URLs from the Glance service network aka SSRF, as long as https:// or http:// is used. This API has been available only to admins since Xena, and it...

PT-2026-79431

A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.6.2. This issue affects the function FlwInstanceController/FlwDefinitionController/FlwCategoryController/FlwSpelController/TestLeaveController of the component Workflow Endpoint. Such manipulation leads to improper authorization. Th...

CVE-2026-62945

TREK is a collaborative travel planner. Prior to 3.1.3, TREK file upload, update, and link actions accept attacker-controlled reservationid, placeid, and assignmentid values without using findForeignLinkTarget to verify that the referenced object belongs to the file's trip. An authenticated user...

CVE-2026-72846 Lightdash Scheduled Delivery Webhook URLs Are Not Validated, Allowing Server-Side Request Forgery

Lightdash stores the webhook URL supplied with a scheduled delivery and later posts to it from sendWebhook in packages/backend/src/clients/GoogleChat/GoogleChatClient.ts and in packages/backend/src/clients/MicrosoftTeams/MicrosoftTeamsClient.ts. In affected versions both call fetch on the stored...

CVE-2026-72843 EverShop Missing Authorization on PATCH /api/customers/:id Allows Unauthenticated Account Takeover

The customer update route in EverShop is declared with "access": "public" in packages/evershop/src/modules/customer/api/updateCustomer/route.json, which causes the admin authentication middleware to call next without checking the caller, and no customer-session middleware guards the route; the on...

CVE-2026-54508

TREK , a collaborative travel planner, is affected by a blind SSRF vulnerability prior to version 3.1.0. The root cause is that importGoogleList(), importNaverList() in placeService.ts and resolveGoogleMapsUrl() in mapsService.ts validate only the initial URL via checkSsrf() but then use fetch() ...