4637 matches found
CVE-2026-111913
Admidio from 5.0.0 before 5.0.16 contains an authorization bypass vulnerability that allows authenticated users to export lists despite export restrictions by requesting mode=pdfl. The groupsrolesexport check in modules/groups-roles/listsshow.php omits pdfl, which later runs the pdf export, letti...
CVE-2026-111913 Admidio 5.0.0 before 5.0.16 Authorization Bypass via pdfl Mode in lists_show.php
Admidio from 5.0.0 before 5.0.16 contains an authorization bypass vulnerability that allows authenticated users to export lists despite export restrictions by requesting mode=pdfl. The groupsrolesexport check in modules/groups-roles/listsshow.php omits pdfl, which later runs the pdf export, letti...
CVE-2026-111913
Admidio versions 5.0.0 before 5.0.16 are vulnerable to an authorization bypass in the modules/groups-roles/lists_show.php file. The groups_roles_export check fails to omit the mode=pdfl parameter, allowing authenticated users with only list view rights to bypass export restrictions and download m...
EUVD-2026-103307
Admidio from 5.0.0 before 5.0.16 contains an authorization bypass vulnerability that allows authenticated users to export lists despite export restrictions by requesting mode=pdfl. The groupsrolesexport check in modules/groups-roles/listsshow.php omits pdfl, which later runs the pdf export, letti...
CVE-2023-3460_POC
CVE-2023-3460 Exploit for CVE-2023-3460 - Unauthorized admin access for Ultimate Member plugin. Made with Golang ╔══════════════════════════════════════════════════╗ ╔══════════════════════════════════════════════════╗ ║ DISCLAIMER ║ ║ ABOUT THE PROJECT ║ ║ ║ ║ ║ ║ This Proof of Concept PoC has...
WordPress SureDash – Community, Courses & Member Dashboard plugin <= 1.12.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Jacek Sowiński dzaku in WordPress Plugin SureDash versions = 1.12.0...
EUVD-2026-102818
The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'displayname' parameter in all versions up to, and including, 1.12.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
CVE-2026-18551
Mattermost versions 11.10.x = 11.10.0, 11.7.x = 11.7.9, 11.9.x = 11.9.1, 11.8.x = 11.8.5 fail to validate the combination of guest and admin scheme roles which allows an authenticated attacker to escalate a guest account to team or channel admin via a crafted PUT request to the member roles API...
EUVD-2026-102806
Mattermost versions 11.10.x = 11.10.0, 11.7.x = 11.7.9, 11.9.x = 11.9.1, 11.8.x = 11.8.5 fail to validate the combination of guest and admin scheme roles which allows an authenticated attacker to escalate a guest account to team or channel admin via a crafted PUT request to the member roles API...
CVE-2026-18551 Mattermost guest account privilege escalation via member roles API
Mattermost versions 11.10.x = 11.10.0, 11.7.x = 11.7.9, 11.9.x = 11.9.1, 11.8.x = 11.8.5 fail to validate the combination of guest and admin scheme roles which allows an authenticated attacker to escalate a guest account to team or channel admin via a crafted PUT request to the member roles API...
CVE-2026-18551
Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, and 11.8.x
PT-2026-115509
Name of the Vulnerable Software and Affected Versions Mattermost version 11.10.0 Mattermost version 11.7.9 Mattermost version 11.9.1 Mattermost version 11.8.5 Description An issue exists where the system fails to validate the combination of guest and admin scheme roles. This allows an authenticat...
CVE-2026-111369
ClassroomIO through 1.0.0 contains an incorrect authorization vulnerability in the PUT and DELETE /:lessonId lesson routes that allows any course member, including students, to modify lessons. Authenticated students can supply arbitrary lesson ids to change titles and stored HTML content or delet...
exploit-CVE-2023-3460
title: "IT Security - CVE 2023-38408" Analysis and exploitation of CVE-2023-3460 CVE ID| CVSS Score| Discovered| Affected Plugin| Vulnerability Type ---|---|---|---|--- CVE-2023-3460| | 07/04/2023| Ultimate Member| Unauthorized Admin Access Table of Contents Introduction General vulnerability...
CVE-2026-55239
The Tianji open source analytics and monitoring platform is vulnerable to SQL Injection in versions prior to 1.31.29 . The root cause is located in the getDateQuery() function within src/server/utils/prisma.ts, which uses Prisma.sql() to construct raw SQL by interpolating the timezone value witho...
CVE-2026-70481
CVE-2026-70481 Open WebUI, affected 0.5.0 through 0.10.2, patched in 0.11.0. Moderate, CVSS 5.4, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L, CWE-284 and CWE-862. In backend/openwebui/routers/channels.py the message update and delete handlers branch on the channel type, and the two branches ask...
CVE-2024-1071
CVE-2024-1071 CVE-2024-1071 Ultimate Member Unauthorized Database Access / SQLi PoC is now published. It was created for educational/research purposes only! Use it at your own risk!...
PYSEC-2026-4264 PraisonAI: Platform members can rewrite shared labels and owner issue labels without owner/admin authorization
Platform members can rewrite shared labels and owner issue labels without owner/admin authorization Summary praisonai-platform lets an ordinary workspace member rename and recolor shared labels and add/remove labels on an owner-created issue even though direct label deletion is restricted to...
WordPress Ultimate Member 2.1.3 - 2.8.2 – SQL Injection
The Ultimate Member - User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to SQL Injection via the ‘sorting’ parameter in versions 2.1.3 to 2.8.2 due to insufficient escaping on the user supplied parameter and lack of...
PT-2026-115309
Name of the Vulnerable Software and Affected Versions ClassroomIO versions prior to 1.0.1 Description An incorrect authorization issue exists in the PUT and DELETE '/:lessonId' lesson routes. This allows any authenticated course member, including students, to modify or delete lessons by providing...