CVE-2025-14736

CVE-2025-14736 Frontend Admin par DynamiApps - Élévation de privilèges non authentifiée Auteur : Hyun Chiya Informations sur la vulnérabilité Champ| Valeur ---|--- ID CVE| CVE-2025-14736 Extension| Frontend Admin by DynamiApps Versions affectées| B"Extract Nonce acfnonce & Form ID acfform" B --...

CVE-2026-5118

CVE-2026-5118 — Divi Form Builder = 5.1.2 — 인증되지 않은 역할 주입을 통한 권한 상승 🔥 취약점 요약 WordPress 플러그인 Divi Form Builder 버전 = 5.1.2는 인증되지 않은 권한 상승 취약점에 취약합니다. 이 심각한 결함으로 인해 인증되지 않은 공격자 가 문의 양식, 견적 양식, 뉴스레터 양식 또는 기타 DFB 지원 양식을 포함한 모든 Divi Form Builder 양식을 통해 직접 관리자 계정을 생성할 수 있습니다. 취약점은...

CVE-2026-5118

🔥 CVE-2026-5118 Divi Form Builder Un champ caché. Une valeur modifiée. Accès complet à l'ensemble du site. 🧨 Que peut faire un attaquant ? 🔬 Analyse de la vulnérabilité Emplacement de la vulnérabilité root@kitploit: includes/shared/handlers/FormSubmissionHandler.php → createuser Code vulnérable...

CVE-2025-6254

CVE-2025-6254 — Doctreat Core = 1.6.8 — Escalade de privilèges non authentifiée via injection de rôle 🔥 Résumé de la vulnérabilité Le plugin WordPress Doctreat Core versions = 1.6.8 est vulnérable à une escalade de privilèges non authentifiée. Cette faille critique permet à des attaquants non...

CVE-2025-2304_POC

CVE-2025-2304POC CVE-2025-2304 POC - Escalade de privilèges Camaleon CMS Ce POC est utilisé pour exploiter les privilèges de Camaleon CMS jusqu'à administrateur. L'exploit fonctionne en injectant un rôle dans la fonction de réinitialisation de mot de passe d'un utilisateur authentifié. Prérequis ...

CVE-2025-2304-CamaleonCMS-PoC

PoC: CVE-2025-2304 - Escalade de privilèges dans Camaleon CMS Aperçu technique Ce dépôt contient une preuve de concept fonctionnelle PoC pour une vulnérabilité d'assignation en masse dans Camaleon CMS versions antérieures à 2.8.1. La vulnérabilité se situe dans le point d'accès updatedajax du...

CVE-2026-5118

CVE-2026-5118 — Divi Form Builder ≤ 5.1.2 Élévation de privilèges non authentifiée par injection de rôle === Beelze zeroday 1diot9 === 📋 Informations sur la vulnérabilité Champ| Détails ---|--- ID CVE| CVE-2026-5118 Score CVSS| 9.8 Critique Vecteur CVSS| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A...

CVE-2025-2563

CVE-2025-2563 User Registration & Membership WordPress 플러그인 4.1.2 이전 버전에서는 Membership Addon이 활성화된 경우 사용자가 자신의 계정 역할을 설정하는 것을 막지 않아 권한 상승 문제가 발생하며, 인증되지 않은 사용자가 관리자 권한을 획득할 수 있습니다. 🔴 취약점 개요 CVE-2025-2563 — Membership Addon 역할 주입을 통한 인증되지 않은 권한 상승 설명: WordPress용 User Registration & Membership 플러그인 ...

CVE-2026-4484

CVE-2026-4484 Masteriyo LMS = 2.1.6 - Absence de contrôle d'autorisation permettant à un utilisateur authentifié Étudiant+ d'élever ses privilèges jusqu'au rôle Administrateur 🔴 Vue d'ensemble de la vulnérabilité CVE-2026-4484 — Élévation de privilèges authentifiée Étudiant → Administrateur...

CVE-2026-9816 Insufficient server-side validation of board member role fields permits privilege escalation

Mattermost versions 11.7.x = 11.7.6, 10.11.x = 10.11.21, 11.8.x = 11.8.3 fail to validate BoardMember.Scheme fields server-side on insert and archive-import paths which allows a board editor or non-guest team member to grant board admin to arbitrary users via POST /api/v2/boards/boardID/members a...

sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation

A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object granting root-level sudo...

CVE-2026-14474

A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object granting root-level sudo...

DEBIAN-CVE-2026-14474

A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object granting root-level sudo...

CVE-2026-14474

A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object granting root-level sudo...

CVE-2026-14474

SSSD (System Security Services Daemon) LDAP sudo provider is vulnerable when ldap_sudo_search_base is not configured; SSSD will search the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object, granting root-level ...

CVE-2026-14474 Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation

A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object granting root-level sudo...

CVE-2026-14474

A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object granting root-level sudo...

PT-2026-44186

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw exists in the Fine-Grained Admin Permissions FGAPv2 feature. An administrator with limited client management permissions can assign any realm role, including highly privileged ones, t...

Exploit for CVE-2026-5118

CVE-2026-5118 — Divi Form Builder roles && !isset$rolesobj-...

CVE-2026-33950

Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.24.0-beta.4, there is a privilege escalation vulnerability by Admin Role Injection via /enableSecurity. An unauthenticated attacker can gain full Administrator access to the SignalK server at any time...