91343 matches found
CVE-2026-56093: Authorization Bypass Through User-Controlled Key
The extension's frontend detail-view document lookup does not apply the current site's siteHash filter or frontend user access filter, unlike the regular search path. A visitor who can obtain or guess a valid Solr document id can retrieve documents through this lookup without the same access...
CVE-2026-77139: Improper Limitation of a Pathname to a Restricted Directory
The extension fails to validate a client-supplied template element key before using it to build file paths for saving and deleting Mask template files. An authenticated backend user with access to the Mask module can supply a key containing path traversal sequences to create or delete .html files...
CVE-2026-77140: Missing Authorization
The extension validates the HMAC of a frontend employee edit link only in the action that renders the edit form, not in the action that persists the change. An unauthenticated visitor who knows the UID of a visible employee record can send a direct POST request to the update action and overwrite...
CVE-2026-75038: UNIX Symbolic Link (Symlink) Following
UNIX symbolic link symlink following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0...
CVE-2026-77134: Incorrect Authorization
The extension fails to require the dedicated admin confirmation token when processing an admin-approval request, so a regular user confirmation hash, obtainable by any visitor through the public resend-confirmation action, is sufficient to self-approve a pending account awaiting admin approval...
CVE-2026-77127: Authorization Bypass Through User-Controlled Key
The extension fails to restrict a backend AJAX endpoint for inline editing to fields the current user is permitted to see or edit. An authenticated, low-privileged backend user can supply arbitrary table, field and record parameters, and trigger an error response that discloses the current databa...
CVE-2026-77131: Cleartext Transmission of Sensitive Information
When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in cleartext instead of encrypting it. Exploitation requires the attacker to already be in control of the SYSSY project's API key...
CVE-2026-63586: Improper Neutralization of Special Elements used in an OS Command
The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system function. By submitting a specially...
CVE-2026-76197: Improper Neutralization of Special Elements used in an OS Command
Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary...
CVE-2026-76189: Integer Underflow (Wrap or Wraparound)
CAI Content Credentials is affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not...
CVE-2026-77128: Missing Authorization
The extension fails to enforce enable-field restrictions on a repository query parameter. An unauthenticated remote user can pass a demand-override parameter to view hidden or time-restricted events, unless the disableOverrideDemand plugin setting is active. Exploitation of this issue requires on...
CVE-2026-77138: Deserialization of Untrusted Data
The extension fails to safely process untrusted client input of an attacker-controlled cookie directly to PHP's unserialize. A remote, unauthenticated attacker can supply a crafted serialized payload to trigger PHP Object Injection, leading to Remote Code Execution on the TYPO3 server...
CVE-2026-56095: Deserialization of Untrusted Data
The extension's indexer passed every field value returned by content object rendering through PHP's unserialize function when transferring multi-value data for the SOLRCLASSIFICATION, SOLRMULTIVALUE and SOLRRELATION content object types, rather than a safe format. If user-generated content saved ...
bbot v3.0.2
BEE·bot is a multipurpose scanner inspired by Spiderfoot, built to automate your Recon , Bug Bounties , and ASM! https://github.com/blacklanternsecurity/bbot/assets/20261699/e539e89b-92ea-46fa-b893-9cde94eebf81 A BBOT scan in real-time - visualization withVivaGraphJS Installation root@kitploit:...
CVE-2025-53770-Scanner
🛡️ Scanner de Vulnerabilidade CVE-2025-53770 no SharePoint Uma ferramenta baseada em Python para detectar instâncias vulneráveis do Microsoft SharePoint afetadas por CVE-2025-53770 , uma vulnerabilidade de desserialização insegura acionada através do endpoint ToolPane.aspx. O scanner envia um...
agent-bom v0.102.0
Open security scanner and self-hosted control plane for AI, MCP, and cloud infrastructure. 15 package ecosystems · 16 compliance surfaces · 77 MCP tools · no account required Quick start · Live demo · Docs What it is agent-bom scans repositories, images, and cloud accounts, then correlates what i...
CVE-2026-6826
creationtimestamp| type| source ---|---|--- 2026-08-24 06:44:22+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/concretecmsfileusagedisclosure.rb 2026-09-08 06:47:30+00:00| seen|...
CVE-2026-78278: Authorization Bypass Through User-Controlled Key
Subscriber Insecure Direct Object References IDOR in Fluent Boards Pro = 2.0.11 versions...