cmdchamp

cmdchamp Bash CLI trainer — 30 levels from ls to privilege escalation. Every question asks you to type a real command — get instant feedback, move on. Miss one and it doesn't just show you the answer: it shows what YOUR command printed against what was wanted, and for a pipeline the line count at...

CVE-2026-107507

The Squadeno WordPress plugin before 1.12.0 does not enforce its restrictions on every way a sport can be saved, allowing users with the lowest-tier Trainer role to change the section, age group, author, password, comment settings and date of a sport they are assigned to...

EUVD-2026-96744

The Squadeno WordPress plugin before 1.12.0 does not enforce its restrictions on every way a sport can be saved, allowing users with the lowest-tier Trainer role to change the section, age group, author, password, comment settings and date of a sport they are assigned to...

CVE-2026-107507 Squadeno < 1.12.0 - Trainer+ Section and Age Group Reassignment via Quick Edit

The Squadeno WordPress plugin before 1.12.0 does not enforce its restrictions on every way a sport can be saved, allowing users with the lowest-tier Trainer role to change the section, age group, author, password, comment settings and date of a sport they are assigned to...

CVE-2026-107507

The Squadeno WordPress plugin (versions prior to 1.12.0 ) contains an incorrect authorization vulnerability (CWE-863). The application fails to consistently enforce restrictions when saving a sport, which allows users with the lowest-tier Trainer role to modify attributes of an assigned sport. Af...

CVE-2026-107507: Incorrect Authorization

The Squadeno WordPress plugin before 1.12.0 does not enforce its restrictions on every way a sport can be saved, allowing users with the lowest-tier Trainer role to change the section, age group, author, password, comment settings and date of a sport they are assigned to...

EUVD-2026-94333

wger is a free, open-source workout and fitness manager. Prior to version 2.6, a user with only the gymtrainer permission can deactivate any account in the same gym, including gymmanager and generalgymmanager accounts. The UserDeactivateView grants access to anyone holding any one of gym.managegy...

wger: cross-tenant admin notes/contracts leak via gym=None bypass (5 views)

Summary Five gym management views in wger apply a flawed gym-scope guard gyma != gymb that silently passes when both operands are None. A trainer with gym.gymtrainer and gym.addadminusernote permissions and no gym assignment gym=None can read private admin notes, uploaded documents, gym contracts...

PT-2026-107508

Name of the Vulnerable Software and Affected Versions wger versions prior to 2.6 Description Five gym management views contain a flawed gym-scope guard that fails when both compared operands are None. An authenticated trainer possessing gym.gym trainer and gym.add adminusernote permissions who is...

PT-2026-107509

Name of the Vulnerable Software and Affected Versions wger versions prior to 2.6 Description The trainer login view in wger is susceptible to Cross-Site Request Forgery CSRF, a condition where a malicious site tricks a user's browser into performing an unwanted action on a different website. This...

PT-2026-107514

Name of the Vulnerable Software and Affected Versions wger versions prior to 2.6 Description A privilege management issue exists where a user with the gym trainer permission can deactivate any account within the same gym, including those with higher privileges such as gym manager and general gym...

distill-trainer (>=0.1.0, <=0.1.1), edx-repo-tools (>=0.7.4, <=0.8.1) +4 more potentially affected by CVE-2026-102930 via virtualenv (20.23.0)

virtualenv PYPI version 20.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - distill-trainer =0.1.0, =0.7.4, =1.0.0b4, =1.0.1 - pytoil 0.38.2 - wolf-core 2.0.1 Source cves: CVE-2026-102930 Source advisory:...

distill-trainer (>=0.1.0, <=0.1.1), edx-repo-tools (>=0.7.4, <=0.8.1) +4 more potentially affected by CVE-2026-102938 via virtualenv (20.23.0)

virtualenv PYPI version 20.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - distill-trainer =0.1.0, =0.7.4, =1.0.0b4, =1.0.1 - pytoil 0.38.2 - wolf-core 2.0.1 Source cves: CVE-2026-102938 Source advisory:...

distill-trainer (>=0.1.0, <=0.1.1), edx-repo-tools (>=0.7.4, <=0.8.1) +4 more potentially affected by CVE-2026-102937 via virtualenv (20.23.0)

virtualenv PYPI version 20.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - distill-trainer =0.1.0, =0.7.4, =1.0.0b4, =1.0.1 - pytoil 0.38.2 - wolf-core 2.0.1 Source cves: CVE-2026-102937 Source advisory:...

distill-trainer (>=0.1.0, <=0.1.1), edx-repo-tools (>=0.7.4, <=0.8.1) +4 more potentially affected by CVE-2026-102930 via virtualenv (20.23.0)

virtualenv PYPI version 20.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - distill-trainer =0.1.0, =0.7.4, =1.0.0b4, =1.0.1 - pytoil 0.38.2 - wolf-core 2.0.1 Source cves: CVE-2026-102930 Source advisory:...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read through Zstd.trainFromBufferDirect0 in src/main/native/jnizdict.c. An attacker can crash the JVM by supplying a direct samples buffer with an oversized sampleSizes array whose total length exceeds the buffer’s actual...

CVE-2026-86256

wger before 2.6 affected versions = 2.5.0 contains an open redirect vulnerability in the trainerlogin view wger/core/views/user.py. After a trainer enters impersonation mode, the view redirects to the user-supplied 'next' GET parameter via HttpResponseRedirect without validating it with...

CVE-2026-86256 wger before 2.6 Open Redirect via trainer-login next parameter

wger before 2.6 affected versions = 2.5.0 contains an open redirect vulnerability in the trainerlogin view wger/core/views/user.py. After a trainer enters impersonation mode, the view redirects to the user-supplied 'next' GET parameter via HttpResponseRedirect without validating it with...

CVE-2026-86256 wger before 2.6 Open Redirect via trainer-login next parameter

wger before 2.6 affected versions = 2.5.0 contains an open redirect vulnerability in the trainerlogin view wger/core/views/user.py. After a trainer enters impersonation mode, the view redirects to the user-supplied 'next' GET parameter via HttpResponseRedirect without validating it with...

CVE-2026-86256 wger before 2.6 Open Redirect via trainer-login next parameter

wger before 2.6 affected versions = 2.5.0 contains an open redirect vulnerability in the trainerlogin view wger/core/views/user.py. After a trainer enters impersonation mode, the view redirects to the user-supplied 'next' GET parameter via HttpResponseRedirect without validating it with...