Chromium: CVE-2026-79154 Missing authorization in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79104 Missing authorization in Sensor

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79058 Missing authorization in Passwords

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79042 Missing authorization in Payments

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-78967 Missing authorization in BFCache

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79099 Missing authorization in Network

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79184 Missing authorization in Preload

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79085 Missing authorization in Network

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Cve-2026-39676

Cve-2026-39676 Wordpress Versione: Download Manager 3.3.5.2 Titolo: Autorizzazione Mancante - Exploit IDOR non autenticato...

CVE-2025-5304

CVE-2025-5304 PT Project Notebooks 1.0.0 - 1.1.3 - Fehlende Autorisierung zu nicht authentifizierter Privilegieneskalation 🚀 PT Project Notebooks ≤ 1.1.3 — Nicht authentifizierte Privilegieneskalation CVE-2025-5304 PoC & Exploit-Helfer für PT Project Notebooks Versionen 1.0.0–1.1.3 : Fehlende...

CVE-2025-47539

🚨 CVE-2025-47539 – Exploit Critico del Plugin Eventin per WordPress 🔥 Riepilogo della Vulnerabilità Il plugin Event Manager, Events Calendar, Tickets, Registrations – Eventin per WordPress è vulnerabile a escalation di privilegi non autenticata a causa di un controllo di autorizzazione mancante...

CVE-2025-14364

CVE-2025-14364 Demo Importer Plus Da Subscriber autenticato ad Amministratore tramite l'azione AJAXdo-reinstall 〔 1 〕 Vulnerabilità Causa principale: Ajax::handlerequest registra l'azione AJAX demoimporterplus senza chiamare currentusercan. Qualsiasi subscriber autenticato può inviare...

CVE-2025-1307

Newscrunch Exploit CVE-2025-1307 🚨 Übersicht Dieser Exploit zielt auf eine kritische Sicherheitslücke CVE-2025-1307 im Newscrunch WordPress-Theme ab. Der Fehler ermöglicht authentifizierten Benutzern Abonnent und höher das Hochladen beliebiger Dateien aufgrund fehlender Berechtigungsprüfungen in...

CVE-2024-6366-PoC

CVE-2024-6366-PoC User Profile Builder = 3.11.7 - Caricamento media non autenticato Descrizione Il plugin WordPress User Profile Builder precedente alla versione 3.11.8 non dispone di una corretta autorizzazione, consentendo a utenti non autenticati di caricare file media tramite la funzionalità ...

CVE-2024-43998

CVE-2024-43998 Beschreibung CVE-2024-43998 : Fehlende Autorisierungsschwachstelle im Theme Blogpoet ermöglicht Zugriff auf Funktionalität, die nicht ordnungsgemäß durch ACLs eingeschränkt wird. Dieses Problem betrifft Blogpoet-Versionen von n/a bis 1.0.3. Verwendung root@kitploit: usage:...

CVE-2024-30485

CVE-2024-30485 Exploit 📌 Übersicht CVE-2024-30485 ist eine Schwachstelle mit hohem Schweregrad, die im Finale Lite -Plugin für WordPress Versionen = 2.18.0 gefunden wurde. Die Schwachstelle ermöglicht authentifizierten Benutzern Subscriber+ das Installieren und Aktivieren beliebiger Plugins ohne...

CVE-2026-82242

Budibase versions before 3.41.3 contain a missing authorization vulnerability in the POST /api/resources/duplicate endpoint that allows authenticated builders to inject tables, automations, queries, and screens into any other application without holding any role in the destination workspace...

CVE-2026-82245

Budibase before 3.41.3 fails to enforce role-based authorization on its license management endpoints (/api/global/license/*), allowing any authenticated user with basic privileges to delete license keys or manipulate offline tokens. An attacker can thereby disable premium features and downgrade t...

CVE-2026-82245 Budibase before 3.41.3 Missing Authorization License Management

Budibase before 3.41.3 fails to enforce role-based authorization on license management endpoints, allowing any authenticated user to delete license keys or manipulate offline tokens. Attackers with basic user privileges can access /api/global/license/ endpoints to disable premium features and...

CVE-2026-82245 Budibase before 3.41.3 Missing Authorization License Management

Budibase before 3.41.3 fails to enforce role-based authorization on license management endpoints, allowing any authenticated user to delete license keys or manipulate offline tokens. Attackers with basic user privileges can access /api/global/license/ endpoints to disable premium features and...