CVE-2026-32639 Winter: Broken access control in `Cms\Controllers\Index` allows cross-template actions and unauthorized asset uploads

Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, the CMS section's Theme Editor AJAX handlers did not enforce per-template-type permission checks, allowing a backend user with any single CMS permission to act on template types...

CVE-2026-32639

Winter CMS (a content management system built on Laravel) contained a broken access control flaw in its CMS Theme Editor AJAX handlers (Cms\Controllers\Index). The controller used OR-logic across five permissions to gate section access, but individual handlers like onSave(), onDelete(), and onDel...

CVE-2026-32639 Winter: Broken access control in `Cms\Controllers\Index` allows cross-template actions and unauthorized asset uploads

Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, the CMS section's Theme Editor AJAX handlers did not enforce per-template-type permission checks, allowing a backend user with any single CMS permission to act on template types...

zizmor

🌈 zizmor zizmor è uno strumento di analisi statica per sistemi CI/CD. Può trovare e correggere problemi di sicurezza nelle configurazioni CI/CD più comuni, inclusi GitHub Actions, Dependabot e pre-commit. Alcune delle cose che zizmor individua:...

rust-cve-2025-55182-scanner

Scanner CVE-2025-55182 Rust Um scanner de vulnerabilidades de alto desempenho e concorrente escrito em Rust para detectar CVE-2025-55182 Next.js Server Actions RCE em vários alvos. 🚀 Funcionalidades ⚡ Implementação Rust de alto desempenho 🧵 Mecanismo de varredura multithread ⏱ Sistema ajustável d...

CVE-2021-38314

CVE-2021-38314 Qual è la vulnerabilità? Il plugin Gutenberg Template Library & Redux Framework = 4.2.11 per WordPress registrava diverse azioni AJAX disponibili per utenti non autenticati nella funzione includes in redux-core/class-redux-core.php che erano uniche per un dato sito ma deterministic...

CVE-2026-78146

The Simple Newsletter Plugin (Noptin) for WordPress versions before 4.3.3 fails to verify that a requester is the subscriber referenced in a public request before rendering that subscriber's stored details via the Actions page . This allows unauthenticated users to disclose a subscriber's persona...

CVE-2026-77695 Woo Refund And Exchange Lite < 4.6.4 - Unauthenticated Guest Order Message Disclosure and Manipulation

The Return Refund and Exchange For WooCommerce WordPress plugin before 4.6.4 does not correctly verify the ownership of guest orders in some of the AJAX actions it exposes to unauthenticated users, allowing them to read private order messages, post messages and attachments in the customer's name,...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: gnome-shell (UTSA-2026-032347)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032347 advisory. It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a lock...

aqua-checksums

aqua-checksums Monitoraggio esterno dell'integrità della catena di fornitura per i progetti open source di Aqua Security. Cosa fa questo repository Questo repository monitora continuamente l'integrità degli artefatti pubblicati da Aqua Security — immagini container, release GitHub, tag Git e asse...

krle

REACT2SHELL CVE-2025-55182 React2Shell CVE-2025-55182 è una catena di vulnerabilità critica di esecuzione remota di codice RCE che colpisce le applicazioni Next.js che utilizzano Server Actions. La vulnerabilità sfrutta una vulnerabilità di prototype pollution in combinazione con Server Actions p...

webshell-analyzer

Web Shell Analyzer Web shell analyzer is a cross platform stand-alone binary built solely for the purpose of identifying, decoding, and tagging files that are suspected to be web shells. The web shell analyzer is the bigger brother to the web shell scanner project...

CVE-2022-1329

CVE-2022-1329 Das Elementor Website Builder Plugin für WordPress ist anfällig für die unbefugte Ausführung mehrerer AJAX-Aktionen aufgrund einer fehlenden Berechtigungsprüfung in der Datei /core/app/modules/onboarding/module.php, die es Angreifern ermöglicht, Websitedaten zu ändern und bösartige...

BIT-KEYCLOAK-2025-3910 Org.keycloak.authentication: two factor authentication bypass

A flaw was found in Keycloak. The org.keycloak.authorization package may be vulnerable to circumventing required actions, allowing users to circumvent requirements such as setting up two-factor authentication...

CVE-2026-17587 My Agile Privacy® <= 3.3.6 - Missing Authorization to Unauthenticated Plugin Settings Modification via map_missing_cookie_shield / map_check_consent_mode_status AJAX Actions

The My Agile Privacy® – CMP, Cookie Consent & Privacy Tools plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.3.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

CVE-2026-17587

My Agile Privacy® – CMP, Cookie Consent & Privacy Tools plugin for WordPress is affected by an authorization bypass in all versions up to and including 3.3.6 . The root cause is missing access-control checks on the map_missing_cookie_shield and map_check_consent_mode_status AJAX actions, allowing...

react2shell

React2Shell Uno strumento CLI per sfruttare le vulnerabilità di prototype pollution nei React Server Components / Server Actions CVE-2025-55182 & CVE-2025-66478, consentendo l'esecuzione remota di codice RCE su server vulnerabili. PoC originale :...

EUVD-2026-65335

The extension resolves the targeted club record from a user-supplied request argument in its frontend edit, update, and activate actions, but performs no ownership check in any of them. An unauthenticated visitor who knows the UID of a club record can send a direct request to the update or activa...

React2Shell-PoC

React2Shell-PoC Ein Proof-of-Concept-Exploit für CVE-2025-55182 und CVE-2025-66478 , kritische Remote-Code-Execution-Schwachstellen in React Server Components RSC und Next.js-Anwendungen. Übersicht React2Shell demonstriert die Ausnutzung unsicherer Deserialisierung in...

react2shell

React2Shell Strumento CLI + template Nuclei per rilevare due vulnerabilità RCE critiche in React Server Components e Next.js Server Actions. Lo scanner è stato riscritto in base alla vulnerabilità react2shell divulgata. Panoramica delle vulnerabilità CVE-2025-55182 – React Server Components...