223 matches found
CVE-2026-5617
The Login as User plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.3. This is due to the handlereturntoadmin function trusting a client-controlled cookie oclauporiginaladmin to determine which user to authenticate as, without any server-side...
CVE-2026-5617
CVE-2026-5617 affects the WordPress plugin Login as User (all versions up to 1.0.3). The handle_return_to_admin() function trusts a client-controlled cookie (oclaup_original_admin) to select the target user for “Return to Admin,” without server-side verification of the cookie’s legitimacy. This e...
CVE-2026-39338 ChurchCRM has Blind XSS via Global Search – Administrative Cookie Session Exfiltration
ChurchCRM is an open-source church management system. Prior to 7.1.0, a Blind Reflected Cross-Site Scripting vulnerability exists in the search parameter accepted by the ChurchCRM dashboard. The application fails to sanitize or encode user-supplied input prior to rendering it within the browser's...
PT-2026-27115
Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 stores administrative authentication material in the ecos pw cookie using a reversible Base64-encoded format with a static suffix. An attacker who obtains or derives this cookie value can forge a valid administrative session and gai...
CVE-2022-0770
The Translate WordPress with GTranslate WordPress plugin before 2.9.9 does not have CSRF check in some files, and write debug data such as user's cookies in a publicly accessible file if a specific parameter is used when requesting them. Combining those two issues, an attacker could gain access t...
EUVD-2015-4162
Malware in sbrugna...
EUVD-2007-1168
Malware in sbrugna...
EUVD-2008-3494
Malware in sbrugna...
EUVD-2020-14105
Malware in sbrugna...
EUVD-2008-2295
Malware in sbrugna...
EUVD-2019-2266
Malware in sbrugna...
EUVD-2007-3571
Malware in sbrugna...
EUVD-2007-1997
Malware in sbrugna...
EUVD-2018-2999
Malware in sbrugna...
EUVD-2007-5132
Malware in sbrugna...
EUVD-2007-5131
Malware in sbrugna...
EUVD-2002-0488
Malware in sbrugna...
EUVD-2008-3588
Malware in sbrugna...