CVE-2026-0047-poc

CVE-2026-0047 : Contrôle de permission manquant dans ActivityManagerService Une pile de bitmaps dérobée à chaque application en cours d'exécution — zéro permission, zéro interaction de l'utilisateur. Un contrôle enforceCallingOrSelfPermissionDUMP manquant dans...

CVE-2025-4631

🚨 CVE-2025-4631 - استغلال تصعيد الصلاحيات في إضافة Profitori لووردبريس 📌 ملخص الثغرة إضافة Profitori الإصدارات من 2.0.6.0 إلى 2.1.1.3 معرّضة لـ تصعيد صلاحيات غير مصادَق عليه بسبب غياب فحص الصلاحيات في نقطة النهاية /wp-json/stocktend/v1/stocktendobject. وهذا يسمح للمهاجمين عن بُعد بتصعيد صلاحيات...

CVE-2022-35841

CVE-2022-35841 هذه مجرد تدوينة قصيرة تشرح الناحية النظرية، لأن هذا الثغرة تم اكتشافها بشكل متزامن، ولم أتمكن أبدًا من اختبارها على نحو سليم. EnterpriseAppMgmtSvc هو خدمة مثيرة للاهتمام تطبّق كائنات COM. يبدو أنها تعود إلى حقبة Windows Phone، وبالفعل معظم واجهات COM التي تنفّذها هذه الوظيفة هي كود...

CVE-2023-33477

CVE-2023-33477 Harmonic NSG 9000-6G modulator has an unauthorized download vulnerability in the config.exp configuration file Due to the lack of access permission verification for the "cgi.bin/config.exp" file in this model modulator, any user may request to download a configuration file while...

CVE-2026-0092

CVE-2026-0092 Dans Package Manager, un contournement du contrôleur de verrouillage de l'appareil est possible en raison d'un contrôle des autorisations manquant. Cela pourrait entraîner une élévation locale de privilèges sans nécessiter de privilèges d'exécution supplémentaires. Aucune interactio...

EUVD-2026-71613

JeecgBoot 3.9.2 and earlier contains an authorization bypass vulnerability in the SystemApiController component. An authenticated attacker with any valid JWT token can access multiple API endpoints including queryAllUser, queryUsersByUsernames, queryUserById, and queryUsersByIds to retrieve...

nifi-CVE-2026-39816-poc

POC Apache NiFi CVE-2026-39816 Démonstration de preuve de concept pour CVE-2026-39816, un contournement de la permission EXECUTECODE dans Apache NiFi 2.8.0 qui permet à un concepteur de flux ayant été délibérément privé des privilèges d'exécution de code d'exécuter du Groovy arbitraire dans la JV...

EUVD-2026-70221

Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 59bb6d6, the view function setcoursemodeprice at lms/djangoapps/instructor/views/instructordashboard.py:430 is decorated only with @loginrequired and performs no course-level permission check. An...

CVE-2026-84674

Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

CVE-2026-84661

A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b67ea11b152 and earlier causes downstream builds awaited by the waitForBuild step when the propagateAbort parameter is used to be canceled even when the build's authentication lacks Item/Cancel permission on the downstream jo...

CVE-2026-84656

A missing permission check in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier allows attackers with Item/Read permission on at least one job to read build parameter names and values of jobs they have no access to...

CVE-2026-84660

A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b67ea11b152 and earlier causes downstream builds triggered by the build step to be canceled even when the build's authentication lacks Item/Cancel permission on the downstream job...

CVE-2026-84659

Jenkins Script Security Plugin 1412.v7737b3405f86 and earlier does not enforce a permission check in the method that controls the "Force the use of the sandbox globally in the system" setting, allowing attackers to disable it through Stapler data binding...

CVE-2026-84674

Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

CVE-2026-84674

Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin (version 26.1.0 and earlier) allow an attacker with Overall/Read permission to enumerate the IDs of credentials stored in Jenkins. The CVSS v3.1 base score is 5.4 (Medium) , reflecting a network-vector attack with low complexity and ...

CVE-2026-84674

Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

EUVD-2026-70147

Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

CVE-2026-84661

Jenkins Pipeline: Build Step Plugin version 599.v4b_67ea_11b_152 and earlier contains a missing permission check in the waitForBuild step. When the propagateAbort parameter is set to true, the plugin cancels the downstream build without verifying that the build's associated authentication holds I...

CVE-2026-84661

A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b67ea11b152 and earlier causes downstream builds awaited by the waitForBuild step when the propagateAbort parameter is used to be canceled even when the build's authentication lacks Item/Cancel permission on the downstream jo...

EUVD-2026-70127

A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b67ea11b152 and earlier causes downstream builds awaited by the waitForBuild step when the propagateAbort parameter is used to be canceled even when the build's authentication lacks Item/Cancel permission on the downstream jo...