169049 matches found
CVE-2026-81785 WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in BuddyForms = 2.9.0 versions...
CVE-2026-78536 WordPress Robokassa payment gateway for Woocommerce plugin <= 1.8.9 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Robokassa payment gateway for Woocommerce = 1.8.9 versions...
EUVD-2026-75513
Unauthenticated Broken Access Control in Robokassa payment gateway for Woocommerce = 1.8.9 versions...
CVE-2026-78536
CVE-2026-78536 affects the Robokassa payment gateway for Woocommerce WordPress plugin in versions 1.8.9 and earlier . The vulnerability is an unauthenticated Broken Access Control , meaning an attacker with no prior credentials can exploit it over the network. The CVSS 3.1 score is 6.5 (Medium) w...
CVE-2026-88891
OpenPanel fails to enforce read-only project access level on 26 of 29 mutating procedures, allowing read-level members to modify, delete, and publish project data. Attackers with explicit read-only access can delete reports and dashboards, schedule entire projects for deletion, publish private...
CVE-2026-88864
Capgo capgo.app fails to restrict direct write access to the public.ssoproviders table exposed through Supabase PostgREST. A holder of an ordinary Capgo full API key can insert a row with status='active' and enforcesso=true, bypassing the intended backend SSO provisioning route...
CVE-2026-88862
Capgo capgo.app backend through 12.242.4 does not validate parent-child delegation when processing the x-limited-key-id header. checkKeyByIdPg in supabase/functions/backend/utils/honomiddleware.ts resolves the attacker-supplied numeric API key ID using only the key ID, its expiration state, and t...
CVE-2026-88863
capgo.app npm package capgo through version 12.207.1 does not compare the caller's role rank against the requested role in the validateInvite function of supabase/functions/backend/private/invitenewusertoorg.ts. The POST /private/invitenewusertoorg endpoint only requires the org.updateuserroles...
CVE-2026-21017-LDAP-Anonymous-Bind-Privilege-Escalation
CVE-2026-21017 – LDAP 익명 바인드 권한 상승 프로그램 코드 Python ldap3 시뮬레이션 root@kitploit: ldapanonsim.py - LDAP server allowing anonymous bind with write access from ldap3 import Server, Connection, ALL Simulated: real server would be misconfigured server = Server'ldap://localhost:389', getinfo=ALL conn =...
CVE-2026-70481
CVE-2026-70481 Open WebUI, 영향을 받는 버전은 0.5.00.10.2이며, 0.11.0에서 패치되었습니다. 심각도 Moderate, CVSS 5.4, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L, CWE-284 및 CWE-862. backend/openwebui/routers/channels.py에서 메시지 업데이트 및 삭제 핸들러는 채널 유형에 따라 분기하며, 두 분기는 서로 다른 조건을 검사합니다. 그룹 및 직접 메시지 채널은 작성자에게만 허용됩니다...
CVE-2026-85545
There is an Vulnerability in some HikCentral Access Control versions. Authenticated low-privilege users can invoke API interfaces that their role is not authorized to access...
EUVD-2026-75444
Snipe-IT's predefined kit checkout path does not enforce Full Multiple Company Support FMCS tenant isolation on the checkout target. Unlike the single, bulk, API, accessory, license and consumable checkout paths, App\Services\PredefinedKitCheckoutService never calls $item-canCheckoutTo$target; it...
EUVD-2026-75443
OpenPanel share lookup procedures fail to validate access controls and return password hashes and protected report definitions to unauthenticated callers. Attackers with a share link can retrieve argon2id password hashes and full report configurations including event names, filters, and breakdown...
EUVD-2026-75414
Capgo capgo.app fails to restrict direct write access to the public.ssoproviders table exposed through Supabase PostgREST. A holder of an ordinary Capgo full API key can insert a row with status='active' and enforcesso=true, bypassing the intended backend SSO provisioning route...
CVE-2026-85543
Some Wi-Fi series camera products have insufficient permission validation on certain interfaces, allowing authenticated low-privileged users to obtain device Wi-Fi configuration information through these interfaces...
CVE-2025-65900
CVE-2025-65900: Kalmia CMS v0.2.0 - 잘못된 액세스 제어Incorrect Access Control 취약점 취약점 개요 CVE ID: CVE-2025-65900 제품: DifuseHQ Kalmia CMS 영향받는 버전: 0.2.0 취약점 유형: 잘못된 액세스 제어Incorrect Access Control 필요한 권한: 낮음읽기 전용 사용자 계정 영향 이 취약점으로 인해 낮은 권한의 사용자가 Blowfish 비밀번호 해시를 포함한 모든 플랫폼 계정의 민감한 정보를 검색할 수 있습니다. 공격자는 오프라...
CVE-2025-67160
CVE-2025-67160 — Vatilon 기반 IP 카메라 요약 Vatilon 기반 IP 카메라 펌웨어는 인증 없이 여러 내부 웹 디렉터리에 접근할 수 있도록 노출합니다. 포함된 웹 서버에서 디렉터리 인덱싱이 활성화되어 있을 경우, 인증되지 않은 공격자는 /cgi-bin/, /view/, /css/, /img/, /img2/, /js/, /js2/, /onvif/ 등의 디렉터리에 접근하여 내부 스크립트, 구성 페이지 및 민감한 구현 세부 정보를 확인할 수 있습니다. 이러한 노출로 공격자는 웹 인터페이스의 내부 구조를 연구할...
CVE-2026-85545
HikCentral Access Control is affected by a broken access control vulnerability in some unspecified versions. Authenticated low-privilege users can invoke API interfaces that their role is not authorized to access, representing an authorization bypass. The vulnerability is exploitable over the net...