9 matches found
PT-2026-114909
The WholesaleX – B2B & Wholesale Plugin for WooCommerce with Wholesale Prices plugin for WordPress is vulnerable to Limited Privilege Escalation in all versions up to, and including, 3.0.8 via the 'process registration' due to missing validation on the 'wholesalex registration role' parameter. Th...
CVE-2026-85581
SiYuan versions prior to v3.8.2 are affected by a denial of service vulnerability in the unauthenticated /api/system/uiproc endpoint. The endpoint accepts and retains attacker-controlled process identifiers without size limits or authentication, allowing an attacker to send repeated requests with...
WordPress Mentoring plugin <= 1.2.8 - Unauthenticated Privilege Escalation in mentoring_process_registration vulnerability
Unauthenticated Privilege Escalation in mentoringprocessregistration vulnerability discovered by シルAsuna in WordPress Plugin Mentoring versions = 1.2.8...
Siemens SIMATIC Devices Unchecked Error Condition (CVE-2024-36939)
In the Linux kernel, the following vulnerability has been resolved: nfs: Handle error of rpcprocregister in nfsnetinit. syzkaller reported a warning 0 triggered while destroying immature netns. rpcprocregister was called in initnfsfs, but its error has been ignored since at least the initial comm...
CVE-2025-38653
CVE-2025-38653: In the Linux kernel, the vulnerability stems from checking proc_lseek directly via pde->proc_ops->proc_lseek, which can cause a use-after-free in a module removal (rmmod) scenario. The issue is a gap in proc_reg_open() that was later addressed by applying the same mitigation...
CVE-2023-44166
The 'age' parameter of the processregistration.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2023-44166 Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
The 'age' parameter of the processregistration.php resource does not validate the characters received and they are sent unfiltered to the database...
PT-2023-29137 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to the 'name' parameter of the process registration.php resource, which does not validate the characters received, and they are sent unfiltered to the database...
Microsoft Windows - Running Object Table Register ROTFLAGS_ALLOWANYCLIENT Privilege Escalation
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1112 Windows: Running Object Table Register ROTFLAGSALLOWANYCLIENT EoP Platform: Windows 10 10586/14393 not tested 8.1 Update 2 or Windows 7 Class: Elevation of Privilege Summary: By setting an appropriate AppID it’s possible for a...