190305 matches found
CVE-2024-38473-Nuclei-Template
Modèle Nuclei CVE-2024-38473 Description Modèle Nuclei conçu pour détecter les serveurs Apache vulnérables à CVE-2024-38473. Il identifie d'abord les serveurs exécutant Apache Exécuter Nuclei de cette manière peut offrir un taux de détection plus élevé. Vous pouvez également inclure des URL sous ...
CVE-2025-51862
CVE-2025-51862 Description de la vulnérabilité TelegAI, une application web pour construire et discuter avec des personnages IA, est vulnérable à une référence directe d'objet non sécurisée IDOR dans son composant de chat. Un attaquant peut exploiter cet IDOR pour altérer les conversations d'autr...
CVE-2024-9014
CVE-2024-9014 - Outils d'exploitation du contournement de l'authentification OAuth2 de pgAdmin 4 Ce dépôt contient des outils pour vérifier et exploiter la vulnérabilité CVE-2024-9014 dans pgAdmin 4. La vulnérabilité permet à un attaquant de contourner l'authentification OAuth2 et d'accéder à des...
nextjs-middleware-bypass-demo
Demo CVE-2025-29927 Article original : https://zhero-web-sec.github.io/research-and-things/nextjs-and-the-corrupt-middleware Configuration Tout d'abord, lancez le serveur de développement : npm i npm run dev Ouvrez http://localhost:3000 dans votre navigateur pour voir le résultat. Essai du...
CVE-2026-96461
Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10...
CVE-2026-96518
Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3...
CVE-2026-96337
Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3...
CVE-2026-96334
Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.7...
CVE-2026-95597
Missing Authorization vulnerability in codemstory 워드프레스 결제 심플페이 pgall-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 워드프레스 결제 심플페이: from n/a through 5.5.17...
CVE-2026-95589
Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-payment-or-deposit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Deposits and Partial Payments for WooCommerce: from n...
Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance
Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in recent security patch releases. Vulnerability Details CVEID:CVE-2026-47063 DESCRIPTION: Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java...
CVE-2026-96334
The ThemeGrill User Registration WordPress plugin (versions
CVE-2026-96334 WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.7...
EUVD-2026-95629
Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.7...
CVE-2026-95589
The Deposits and Partial Payments for WooCommerce WordPress plugin (versions up to and including 4.0.1 ) is vulnerable to a Missing Authorization flaw. This vulnerability allows for Exploiting Incorrectly Configured Access Control Security Levels , potentially impacting the integrity of the syste...
CVE-2026-95589 WordPress Deposits and Partial Payments for WooCommerce plugin <= 4.0.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-payment-or-deposit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Deposits and Partial Payments for WooCommerce: from n...
EUVD-2026-95623
Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-payment-or-deposit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Deposits and Partial Payments for WooCommerce: from n...
CVE-2026-95597 WordPress 워드프레스 결제 심플페이 plugin <= 5.5.17 - Settings Change vulnerability
Missing Authorization vulnerability in codemstory 워드프레스 결제 심플페이 pgall-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 워드프레스 결제 심플페이: from n/a through 5.5.17...
EUVD-2026-95603
Missing Authorization vulnerability in codemstory 워드프레스 결제 심플페이 pgall-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 워드프레스 결제 심플페이: from n/a through 5.5.17...