CVE-2020-25540

cve-2020-25540 该脚本用来对ThinkAdmin v5，v6版本进行任意文件读取的漏洞利用 ==其中接口路径在不同的版本间可能存在差异（一些基于原版ThinkAdmin二开的）== 原版的接口是：/admin.html?s=admin/api.Update/get?/encode/xxxx 我这一版的是（某资金盘二开的）：/admin.html?s=admin/api.Update/read?encode=xxxx 基本用法 usage: cve-2020-25540.py -h -t TARGET -f FILE -w WORDLIST -b BASEPATH -p...

CVE-2025-8110

CVE-2025-8110 — PoC de RCE en Gogs Silentium / HackTheBox Descargo de responsabilidad: Esta herramienta está destinada estrictamente a fines educativos y pruebas de penetración autorizadas. Úsela únicamente contra sistemas para los que tenga permiso explícito. Esta es una versión modificada de...

EUVD-2026-84038

Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards...

CVE-2026-69190

Graylog is a free and open log management platform. From 6.3.0 until 6.3.14, 7.0.9, and 7.1.4, the view update API for saved searches and dashboards permits a user with edit permission but without entity ownership to include a shareRequest that grants owner permissions to an arbitrary account. Th...

CVE-2026-69190 Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards

Graylog is a free and open log management platform. From 6.3.0 until 6.3.14, 7.0.9, and 7.1.4, the view update API for saved searches and dashboards permits a user with edit permission but without entity ownership to include a shareRequest that grants owner permissions to an arbitrary account. Th...

CVE-2026-69190 Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards

Graylog is a free and open log management platform. From 6.3.0 until 6.3.14, 7.0.9, and 7.1.4, the view update API for saved searches and dashboards permits a user with edit permission but without entity ownership to include a shareRequest that grants owner permissions to an arbitrary account. Th...

CVE-2026-69190 Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards

Graylog is a free and open log management platform. From 6.3.0 until 6.3.14, 7.0.9, and 7.1.4, the view update API for saved searches and dashboards permits a user with edit permission but without entity ownership to include a shareRequest that grants owner permissions to an arbitrary account. Th...

CVE-2026-69190

Graylog is an open-source log management platform. In versions 6.3.0 through 6.3.14, 7.0.9, and 7.1.4, the view update API for saved searches and dashboards permits a user with edit permission but without entity ownership to include a shareRequest that grants owner permissions to an arbitrary acc...

PT-2026-96190

Name of the Vulnerable Software and Affected Versions Graylog versions 6.3.0 through 6.3.13 Graylog versions 7.0.x prior to 7.0.9 Graylog versions 7.1.x prior to 7.1.4 Description The view update API for saved searches and dashboards allows a user with edit permissions, who is not the entity owne...

CVE-2026-69190: Authorization Bypass Through User-Controlled Key

Graylog is a free and open log management platform. From 6.3.0 until 6.3.14, 7.0.9, and 7.1.4, the view update API for saved searches and dashboards permits a user with edit permission but without entity ownership to include a shareRequest that grants owner permissions to an arbitrary account. Th...

CVE-2025-8110-Silentium-HTB

CVE-2025-8110 — PoC de RCE en Gogs Silentium / HackTheBox Aviso: Esta herramienta está destinada exclusivamente a fines educativos y pruebas de penetración autorizadas. Úsela solo contra sistemas en los que tenga permiso explícito para probar. Esta es una versión modificada de...

CVE-2026-82240

Budibase versions before 3.41.3 contain a privilege escalation vulnerability in the public user create and update endpoints. The application fails to validate app-scoped builder role assignments , allowing an authenticated app-scoped builder to submit crafted requests containing builder.apps fiel...

CVE-2026-82240 Budibase before 3.41.3 Privilege Escalation via User Update API

Budibase before 3.41.3 fails to validate app-scoped builder role assignments in the public user create and update endpoints, allowing an authenticated app-scoped builder to grant builder access to unrelated apps. Attackers can submit crafted requests to the user update API with builder.apps field...

CVE-2026-82240 Budibase before 3.41.3 Privilege Escalation via User Update API

Budibase before 3.41.3 fails to validate app-scoped builder role assignments in the public user create and update endpoints, allowing an authenticated app-scoped builder to grant builder access to unrelated apps. Attackers can submit crafted requests to the user update API with builder.apps field...

PT-2026-83092

Budibase before 3.41.3 fails to validate app-scoped builder role assignments in the public user create and update endpoints, allowing an authenticated app-scoped builder to grant builder access to unrelated apps. Attackers can submit crafted requests to the user update API with builder.apps field...

CVE-2026-82240: Missing Authorization

Budibase before 3.41.3 fails to validate app-scoped builder role assignments in the public user create and update endpoints, allowing an authenticated app-scoped builder to grant builder access to unrelated apps. Attackers can submit crafted requests to the user update API with builder.apps field...

EUVD-2026-66217

Kimai before 2.63.0 contains a business logic / improper authorization vulnerability in the team update API endpoint PATCH /api/teams/id, which removes all existing team members before validating the submitted replacement member list. An authenticated teamlead or other user with permission to edi...

CVE-2026-80195: Improper Enforcement of Behavioral Workflow

Kimai before 2.63.0 contains a business logic / improper authorization vulnerability in the team update API endpoint PATCH /api/teams/id, which removes all existing team members before validating the submitted replacement member list. An authenticated teamlead or other user with permission to edi...

CVE-2026-80195 Kimai before 2.63.0 Team Membership Removal via API

Kimai before 2.63.0 contains a business logic / improper authorization vulnerability in the team update API endpoint PATCH /api/teams/id, which removes all existing team members before validating the submitted replacement member list. An authenticated teamlead or other user with permission to edi...

CVE-2026-80195 Kimai before 2.63.0 Team Membership Removal via API

Kimai before 2.63.0 contains a business logic / improper authorization vulnerability in the team update API endpoint PATCH /api/teams/id, which removes all existing team members before validating the submitted replacement member list. An authenticated teamlead or other user with permission to edi...