90790 matches found
yasa-cve-2024-43202
Este repositorio no tiene un README...
CVE-2026-11821 Eventin <= 4.1.17 - Missing Authorization to Authenticated (Subscriber+) Notification Flow Management via notification-flow REST API Endpoint
The Eventin – Event Calendar, Event Registration, Tickets & Booking AI Powered plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.1.17. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it...
CVE-2026-75966
The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'episodecontributor....comment' Parameter in all versions up to, and including, 4.5.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
CVE-2025-13486.-CVE-2025-13486
Este repositorio no tiene un README...
CVE-2026-31431-
This repository does not have a README...
DEBIAN-CVE-2026-57825
In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...
CVE-2024-2074
Este repositorio no tiene un README...
CVE-2025-59287
Este repositorio no tiene un README...
CVE-2026-31431
This repository does not have a README...
CVE-2026-12956
The WP Event Solution Eventin plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 4.1.22 via the createitem handler for the /wp-json/eventin/v2/orders REST endpoint. The endpoint's createitempermissionscheck function only verifies a wprest nonce which is...
asdsadsadasdasdsadsad
Este repositorio no tiene un README...
advisory001
Este repositorio no tiene un README...
SG-2026-0013
This repository does not have a README...
CVE-2025-57298
Stored XSS via Renderizado Inseguro de Markdown en Kotaemon Resumen Kotaemon es un sistema de preguntas y respuestas sobre documentos basado en RAG Generación Aumentada por Recuperación de código abierto que proporciona una interfaz web para consultar documentos subidos como PDF, Word y archivos...
CVE-2026-73292
CVE-2026-73292 – Semaphore UI 仅供教育和负责任披露之用。 该漏洞已在 GHSA-8cj9-r88m-8945 中报告，影响 2.18.21 以下的 semaphoreui 版本。 漏洞 Semaphore UI 的密码更改端点未实现任何 CSRF 保护： 无需 CSRF 令牌 无需当前密码确认 身份验证仅依赖会话 Cookie（semaphore），且未强制执行 SameSite 恶意页面可以静默更改任何访问它的已认证用户的密码。 受影响端点： POST /api/users/id/password root@kitploit: "password":...
CVE-2020-1938
This repository does not have a README...
CVE-2026-44578
CVE-2026-44578 — Next.js WebSocket Upgrade Handler SSRF Lab Security Academy CERT Project vulnerability reproduction lab environment for mentor demos Overview...
CVE-2019-3396
Este repositorio no tiene un README...