290058 matches found
EUVD-2026-90581
In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group links...
CLEANSTART-2025-WF62094 Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3
Security vulnerability affects the gitlab-runner package. Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3...
CVE-2026-90992 Redux Framework <= 4.5.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'user-mediaurl' Media Field
The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User Meta Merge via 'user-mediaurl' Media Field in all versions up to, and including, 4.5.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...
EUVD-2026-90562
The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User Meta Merge via 'user-mediaurl' Media Field in all versions up to, and including, 4.5.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...
CVE-2026-90992
The Redux Framework plugin for WordPress (versions up to and including 4.5.14 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping during the 'User Meta Merge' process via the 'user-mediaurl' media field. Authenticated attack...
CVE-2026-89047
The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2026-89047 Social Media Share Buttons & Social Sharing Icons <= 3.0.1 - Reflected DOM-Based Cross-Site Scripting via URL
The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
EUVD-2026-90543
The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2026-89047
The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting (XSS) via URL in versions up to and including 3.0.1 . The root cause is insufficient input sanitization and output escaping . Unauthenticated attackers can inject a...
WordPress User Frontend plugin 3.5.29-4.3.11 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by Murad Akhmedov in WordPress Plugin WP User Frontend versions 3.5.29-4.3.11...
fortigate-cve-2022-40684-tool
Описание Этот инструмент позволяет специалистам по безопасности выявлять и проверять подверженность устройств FortiGate уязвимости CVE-2022-40684 путём взаимодействия с открытыми конечными точками CMDB API. Он поддерживает перечисление административных пользователей, групп пользователей и...
CVE-2026-80276
Comelit Multi-User Gateway for VIP System model 1456B firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication. Through this interface, sensitive device configuration data - including the Remote Configuration Password - can be read i...
CVE-2026-80275
Comelit Multi-User Gateway for VIP System model 1456B firmware versions 2.9.1 and 2.10.0 fail to enforce server-side authorization on an administrative password-change function. An authenticated user level can invoke this function to overwrite the installer administrator account password...
EUVD-2026-90504
Comelit Multi-User Gateway for VIP System model 1456B firmware versions 2.9.1 and 2.10.0 fail to enforce server-side authorization on an administrative password-change function. An authenticated user level can invoke this function to overwrite the installer administrator account password...
CVE-2026-80275
The Comelit Multi-User Gateway for VIP System (model 1456B) is vulnerable in firmware versions 2.9.1 and 2.10.0 due to a failure to enforce server-side authorization on an administrative password-change function. This flaw allows an authenticated user level to invoke the function and overwrite th...
EUVD-2026-90503
Comelit Multi-User Gateway for VIP System model 1456B firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication. Through this interface, sensitive device configuration data - including the Remote Configuration Password - can be read i...
CVE-2026-80276
The Comelit Multi-User Gateway for VIP System (model 1456B) is vulnerable in firmware versions 2.9.1 and 2.10.0 . These versions expose a network-accessible management interface that lacks authentication requirements. A remote, unauthenticated attacker can exploit this to read sensitive device co...
sudowp-crowdsignal-forms
SudoWP Crowdsignal Forms Это форк безопасности SudoWP оригинального плагина Crowdsignal Forms. !WARNING Уведомление о безопасности : Оригинальный плагин "Crowdsignal Forms" версии = 1.7.2 содержит критическую уязвимость Missing Authorization CVE-2025-69015 , позволяющую аутентифицированным...
CVE-2026-76145
An improper privilege management vulnerability in Genian SSL PNS allows an attacker to escalate to super administrator privileges and force the creation of an OS account by manipulating the permission column during CSV bulk user registration...
CVE-2024-1086
CVE-2024-1086 Универсальный эксплойт Proof-of-Concept для локального повышения привилегий для CVE-2024-1086, работающий на большинстве ядер Linux от v5.14 до v6.6, включая Debian, Ubuntu и KernelCTF. Уровень успеха составляет 99,4% в образах KernelCTF...