108 matches found
Shuffle
Automatización Shuffle Desplegar en Shuffle es una plataforma de automatización de código abierto, creada por y para los profesionales de la seguridad. Las operaciones de seguridad son complejas, pero no tienen por qué serlo. Diseñada para funcionar bien con MSSP y otros proveedores de servicios...
CVE-2026-92716
Shuffle through 2.2.1 contains a cross-tenant privilege escalation vulnerability in the HandleApiGeneration endpoint that allows administrators to reset and read API keys of non-administrator users in other organizations. Attackers with admin privileges in one organization can supply arbitrary us...
CVE-2026-92716 Shuffle through 2.2.1 API Key Reset Cross-Tenant Privilege Escalation
Shuffle through 2.2.1 contains a cross-tenant privilege escalation vulnerability in the HandleApiGeneration endpoint that allows administrators to reset and read API keys of non-administrator users in other organizations. Attackers with admin privileges in one organization can supply arbitrary us...
CVE-2026-92716 Shuffle through 2.2.1 API Key Reset Cross-Tenant Privilege Escalation
Shuffle through 2.2.1 contains a cross-tenant privilege escalation vulnerability in the HandleApiGeneration endpoint that allows administrators to reset and read API keys of non-administrator users in other organizations. Attackers with admin privileges in one organization can supply arbitrary us...
CVE-2026-92716
Shuffle through 2.2.1 is affected by a cross-tenant privilege escalation in the HandleApiGeneration endpoint . An administrator in one organization can supply arbitrary user IDs to reset and read the API keys of non-administrator users in other organizations, enabling account takeover across tena...
CVE-2026-92716 Shuffle through 2.2.1 API Key Reset Cross-Tenant Privilege Escalation
Shuffle through 2.2.1 contains a cross-tenant privilege escalation vulnerability in the HandleApiGeneration endpoint that allows administrators to reset and read API keys of non-administrator users in other organizations. Attackers with admin privileges in one organization can supply arbitrary us...
EUVD-2026-80899
Shuffle through 2.2.1 contains a cross-tenant privilege escalation vulnerability in the HandleApiGeneration endpoint that allows administrators to reset and read API keys of non-administrator users in other organizations. Attackers with admin privileges in one organization can supply arbitrary us...
CVE-2026-92716: Authorization Bypass Through User-Controlled Key
Shuffle through 2.2.1 contains a cross-tenant privilege escalation vulnerability in the HandleApiGeneration endpoint that allows administrators to reset and read API keys of non-administrator users in other organizations. Attackers with admin privileges in one organization can supply arbitrary us...
Shuffle v2.3.0-rc1
Shuffle Automation Deploy On Shuffle is an open source automation platform, built for and by the security professionals. Security operations is complex, but it doesn't have to be. Built to work well with MSSP's and other service providers in mind. Get training Key Features — Community & Support —...
CVE-2026-78566
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...
CVE-2026-78566
CVE-2026-78566 covers a Local File Inclusion (LFI) vulnerability in the Shuffle theme for WordPress , affecting all versions up to and including 1.8 . Unauthenticated attackers can include and execute arbitrary files on the server, enabling execution of any PHP code within those files. This can b...
EUVD-2026-65326
The Shuffle theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.8. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to...
CVE-2026-78566
...
PT-2026-81219
The Shuffle theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.8. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to...
CVE-2025-15637
Unauthenticated Local File Inclusion in Shuffle = 1.8 versions...
CVE-2025-15637
CVE-2025-15637 is an unauthenticated Local File Inclusion (LFI) vulnerability in the WordPress Shuffle theme , affecting versions 1.8 and earlier . The flaw allows a remote attacker with no prior access to include arbitrary local files, potentially leading to full compromise of confidentiality, i...
CVE-2025-15637 WordPress Shuffle theme <= 1.8 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Shuffle = 1.8 versions...