89300 matches found
CVE-2026-8279
CVE-2026-8279 affects the Masteriyo LMS WordPress plugin in all versions up to and including 2.2.0 . The root cause is a missing capability check in the delete_item_permissions_check function within the CourseProgressItemsController, allowing unauthenticated attackers to delete arbitrary course p...
EUVD-2026-72368
The Masteriyo LMS plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the 'deleteitempermissionscheck' function in the CourseProgressItemsController in all versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers ...
CVE-2026-12853
The Flamingo plugin for WordPress (versions up to and including 2.6.2 ) is vulnerable to an authorization bypass. The plugin's flamingo_map_meta_cap() filter restricts access to its admin UI but does not extend to WordPress core APIs, specifically XML-RPC wp.getTerms and admin-ajax ajax-tag-searc...
RIUS
This repository does not have a README...
CVE-2026-61410
Dell SCG 5.0 Appliance (versions prior to 5.36.00.16 ) and Dell SCG 5.0 Application (versions prior to 5.36.00.00 ) contain a Missing Authorization vulnerability. An unauthenticated remote attacker can execute commands on the target system by sending a specially crafted request to the application...
EUVD-2026-72364
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorization vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution. This vulnerabili...
CVE-2026-5201
CVE-2026-5201 Heap-based buffer overflow in gdk-pixbuf JPEG loader Hi, I'm Kaฤan รapar. I discovered a heap-based buffer overflow vulnerability in gdk-pixbuf's JPEG image loader that affects virtually all Linux desktop environments. The vulnerability was assigned CVE-2026-5201 and acknowledged by...
CVE-2026-86416
ILIAS is an e-learning platform affected by an authorization bypass in the ilObjGroupGUI component prior to versions 9.23, 10.11, and 11.4 . The methods saveMapSettingsObject() and updateGroupTypeObject() perform state-changing operations without verifying write permissions, allowing any authenti...
CVE-2021-24499
CVE-2021-24499 Mass exploitation of CVE-2021-24499 unauthenticated upload leading to remote code execution in Workreap theme. The AJAX actions workreapawardtempfileuploader and workreaptempfileuploader did not perform nonce checks, or validate that the request is from a valid user in any other wa...
cve-2017-11176
This repository does not have a README...
dtrace-memaccess_cve-2020-27949
Lectura y escritura de memoria de otros procesos usando fasttrap El dispositivo /dev/fasttrap para crear nodos de trampa en procesos de espacio de usuario para los proveedores pid y objc tiene los permisos 666. En contraste con /dev/dtrace, que tambiรฉn es 666, fasttrap carece de una verificaciรณn ...
CVE-2019-1253
This repository does not have a README...
CVE-2025-4631
๐จ CVE-2025-4631 - Profitori WordPress Plugin Privilege Escalation Exploit ๐ Vulnerability Summary Profitori Plugin versions 2.0.6.0 to 2.1.1.3 is vulnerable to unauthenticated privilege escalation due to a missing capability check in the /wp-json/stocktend/v1/stocktendobject endpoint. This allows...
By-Poloss..-..CVE-2026-11912
CVE-2026-11912: Simple File List = 6.3.7 - Missing Authorization to Unauthenticated File Modification Executive Summary...
CVE-2021-3156
This repository does not have a README...
Anti_Killer
This repository does not have a README...
CVE-2026-86408
MISP versions โค2.5.45 are affected by a missing authorization flaw in CryptographicKeysController::view(). The handler queried the CryptographicKey model directly by key ID and exposed sensitive fields (type, key_data, fingerprint) without first verifying the caller's access to the associated par...
pydbg
This repository does not have a README...