Exploit-CVE-2023-22515

CVE-2023-22515 익스플로잇 CVE-2023-22515를 위한 간단한 bash 스크립트 익스플로잇입니다. 정보 Confluence Data Center 및 Server 인스턴스에는 손상된 접근 제어 취약점CVE-2023-22515이 존재하며, 공격자가 승인되지 않은 Confluence 관리자 계정을 생성하고 Confluence 인스턴스에 접근할 수 있습니다. 영향을 받는 버전 root@kitploit: 8.0.0 8.0.1 8.0.2 8.0.3 8.0.4 8.1.0 8.1.1 8.1.3 8.1.4 8.2.0 8.2.1...

EUVD-2026-75208

In RuoYi-Cloud-Plus = 2.6.2 in the ruoyi-workflow module, multiple core task APIs in FlwTaskController lack permission annotations, and the Service layer does not verify whether the current user is the task handler/related user. Authenticated low-privileged remote attackers can read sensitive...

PT-2026-89685

Alt Text Endpoint Authorization Bypass via Payload Local API overrideAccess Omission Summary @jhb.software/payload-alt-text-plugin v0.7.0 exposes custom Payload CMS endpoints POST /api/alt-text-plugin/generate and /bulk that call the Payload Local API findByID and update without setting...

PT-2026-89371

Capgo fails to clean up channel permission overrides when a user's last organization role binding is deleted, leaving stale overrides active. Attackers can retain channel-specific permissions after their base RBAC access has been revoked to perform unauthorized actions like changing production OT...

Linux Distros Unpatched Vulnerability : CVE-2026-61910

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Cyrus IMAP before 3.12.4. Mailbox/set let a sharee change a special-use role on shared mailboxes. An authenticated user with...

PT-2026-89402

OpenPanel fails to enforce read-only project access level on 26 of 29 mutating procedures, allowing read-level members to modify, delete, and publish project data. Attackers with explicit read-only access can delete reports and dashboards, schedule entire projects for deletion, publish private...

PT-2026-89370

Some Wi-Fi series camera products have insufficient permission validation on certain interfaces, allowing authenticated low-privileged users to obtain device Wi-Fi configuration information through these interfaces...

JetBrains YouTrack < 2025.3.160480 / 2026.1.x < 2026.1.14047 Improper Access Control (CVE-2026-86498)

The version of JetBrains YouTrack installed on the remote host is prior to 2025.3.160480, or 2026.1.x prior to 2026.1.14047. It is, therefore, affected by an improper access control vulnerability: - In JetBrains YouTrack before 2025.3.160480, 2026.1.14047 PUT requests on link sub-resources allowe...

PT-2026-89736

Alt Text Endpoint Authorization Bypass via Payload Local API overrideAccess Omission Summary @jhb.software/payload-alt-text-plugin v0.7.0 exposes custom Payload CMS endpoints POST /api/alt-text-plugin/generate and /bulk that call the Payload Local API findByID and update without setting...

PT-2026-89365

There is an Vulnerability in some HikCentral Access Control versions. Authenticated low-privilege users can invoke API interfaces that their role is not authorized to access...

PT-2026-89404

OpenPanel share lookup procedures fail to validate access controls and return password hashes and protected report definitions to unauthenticated callers. Attackers with a share link can retrieve argon2id password hashes and full report configurations including event names, filters, and breakdown...

JetBrains TeamCity 2021.2 - 2022.10 Improper Access Control (CVE-2022-44622)

The version of JetBrains TeamCity installed on the remote host is version 2021.2 up to but not including 2022.10. It is, therefore, affected by a vulnerability: - In JetBrains TeamCity version between 2021.2 and 2022.10 access permissions for secure token health items were excessive CVE-2022-4462...

JetBrains YouTrack < 2026.2.18769 Information Disclosure (CVE-2026-86496)

The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.18769. It is, therefore, affected by an information disclosure vulnerability: - In JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk authorized reporters exposed reporter email addresses...

CVE-2026-25890-FileBrowser-Access-Control-Bypass

CVE-2026-25890 - FileBrowser 접근 제어 우회 인증되지 않은 사용자는 이 취약점을 악용할 수 없습니다 — 대상 경로에 대한 접근이 제한된 유효한 낮은 권한의 자격 증명이 필요합니다. FileBrowser ≤ v2.57.0에서 여러 개의 선행 슬래시/private 대신 //private를 사용하여 strings.HasPrefix 검사를 우회하는 경로 기반 인증 우회입니다. 파일시스템은 여전히 정규화된 경로를 제공합니다. v2.57.1 에서 수정됨 커밋 489af403... – 제거...

CVE-2026-87998

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE /api/v1/knowledge/id/delete in backend/openwebui/routers/knowledge.py authorized deletion against the knowledge base but then removed its administrator-owned external connection...

CVE-2026-71807

In RuoYi-Cloud-Plus = 2.6.2 in the ruoyi-workflow module, multiple core task APIs in FlwTaskController lack permission annotations, and the Service layer does not verify whether the current user is the task handler/related user. Authenticated low-privileged remote attackers can read sensitive...

windows-smb-vulnerability-framework-cve-2025-33073

Windows SMB 클라이언트 취약점 연구 프레임워크 저자: cyberseallll 작성일: 2025 개요 저는 CVE-2025-33073, Windows SMB 클라이언트 권한 상승 취약점을 분석하고 이해하기 위해 이 연구 프레임워크를 개발했습니다. 이 구현은 취약점 연구와 통제된 테스트 환경을 위한 포괄적인 도구를 제공합니다. 취약점 세부 정보 CVE-2025-33073 은 Windows SMB 클라이언트 구현에 영향을 미치는 네트워크 접근 가능 권한 상승 취약점입니다. 이 취약점은 SMB 프로토콜 스택 내 부적절한 접근...

CVE-2026-87998 Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE /api/v1/knowledge/id/delete in backend/openwebui/routers/knowledge.py authorized deletion against the knowledge base but then removed its administrator-owned external connection...

CVE-2026-87997 Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, POST /api/chat/completions and POST /api/v1/chat/completions in backend/openwebui/main.py copied a client-supplied folderid into a new chat without applying the folder write-access chec...

CVE-2026-26417

CVE-2026-26417 비밀번호 재설정 기능의 취약한 접근 제어 취약점 요약 Tata Consultancy Services TCS – Cognix Recon Client v3.0 에서 취약한 접근 제어 취약점이 확인되었습니다. 이 문제는 적절한 권한 검증 없이 조작된 API 요청을 제출하여 인증된 사용자가 임의의 사용자 계정의 비밀번호를 재설정할 수 있게 했습니다. 이 취약점은 비밀번호 재설정 워크플로우 내에서 소유권 검증 부족과 권한 검사 누락으로 인해 발생했습니다. 기술 분류 CWE CWE-862 – 누락된 권한 부여...