CVE-2026-0920

CVE-2026-0920 스캐너 취약한 LA-Studio Element 플러그인 버전을 사용하는 WordPress 사이트에서 CVE-2026-0920 노출을 탐지 및 검증하기 위한 Python 기반 스캐너입니다. 개요 이 도구는 취약한 플러그인 버전의 등록 흐름에서 부적절한 역할 처리와 관련된 취약점인 CVE-2026-0920 의 영향을 받을 가능성이 있는 WordPress 대상을 자동으로 식별하도록 설계되었습니다. 스크립트는 대상 목록을 처리하고, 검증 확인을 시도하며, 성공적인 결과를 나중에 검토할 수 있도록 출력 파일에...

CVE-2026-27604: Exposure of Sensitive Information to an Unauthorized Actor

FOSSBilling is a free, open-source billing and client management system. Starting in version 0.5.4 and prior to version 0.8.0, an authorization bypass in the API role handling allows unauthenticated access to privileged /api/system/ endpoints. Because system resolves to the cron admin identity,...

WordPress plugin User Registration & Membership 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

ALSA-2024:10785 Important: postgresql:12 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID CVE-2024-10978 postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code CVE-2024-10979 postgresq...

Exposure of Data Element to Wrong Session

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Exposure of Data Element to Wrong Session due to the improper handling of user roles during the login process. An attacker can gain unauthorized access and perform actions without administrative approval...

Multi-Master Replication Manager for MySQL mmm_agentd Remote Command Injection Vulnerabilities

Summary Multiple exploitable remote command injection vulnerabilities exist in the MySQL Master-Master Replication Manager MMM mmmagentd daemon 2.2.1. mmmagentd commonly runs with root privileges and does not require authentication by default. A specially crafted MMM protocol message can cause a...