CVE-2026-38526-PoC-htb-nexus

CVE-2026-38526-PoC-htb-nexus Un script PoC para CVE-2026-38526, RCE a través de una vulnerabilidad de carga de archivos en el endpoint /admin/tinymce/upload de webkul krayin 2.2.x construido para htb-nexus 🛠 Inicio rápido y uso 1. Clonar el repositorio: root@kitploit: git clone...

cups-script-final-project

Qué hace Herramienta de detección en dos etapas para CVE-2025-58060, una vulnerabilidad de omisión de autenticación en el Sistema Común de Impresión UNIX CUPS. En lugar de confiar únicamente en los números de versión, la herramienta combina una verificación de versión basada en el banner con una...

cve-2026-20127

CVE-2026-20127 扫描器 概述 该项目是一个基于 Windows 的网络扫描工具，使用 C++ 编写，旨在识别潜在的 Cisco SD-WAN / vManage 类服务，并针对标记为 CVE-2026-20127 的引用问题执行漏洞检查。 功能 IP 范围扫描（起始 IP → 结束 IP） 针对 Cisco SD-WAN / vManage 特征的服务指纹识别 HTTP 响应头与响应体分析 向疑似管理端点发送测试请求 根据响应内容与状态码检测潜在暴露风险 简单的交互式 CLI 界面 对敏感端点执行二次请求： /dataservice/client/admin/setting...

CVE-2026-52111

An issue in fast-note-sync-service =2.13.7 allows a remote attacker to escalate privileges via the admin configuration endpoint exposes authTokenKey...

CVE-2026-52111

CVE-2026-52111 affects fast-note-sync-service versions ≤ 2.13.7 . The root cause is that the admin configuration endpoint exposes the authTokenKey , enabling a remote attacker with no prior privileges to escalate their access. The vulnerability is scored CVSS 9.8 (Critical) with a network attack ...

EUVD-2026-69413

An issue in fast-note-sync-service =2.13.7 allows a remote attacker to escalate privileges via the admin configuration endpoint exposes authTokenKey...

CVE-2026-52111

An issue in fast-note-sync-service =2.13.7 allows a remote attacker to escalate privileges via the admin configuration endpoint exposes authTokenKey...

cve-2026-23744

CVE-2026-23744 – MCPJam Inspector Unauthenticated Remote Code Execution RCE Description Product : MCPJam Inspector Affected versions : ≤ 1.4.2 Fixed version : 1.4.3 Type : Unauthenticated Remote Code Execution RCE Attack vector : Network Authentication required : No User interaction required : No...

CVE-2026-28767

CVE-2026-28767: Missing Authentication on Administrative Notifications Endpoint Advisory Field| Value ---|--- CVE| CVE-2026-28767 ICSA| ICSA-26-055-03 Update A CVSS 3.1| 5.3 Medium Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CWE| CWE-306 Missing Authentication for Critical Function...

CVE-2026-78387

RansomLook has an authorization weakness in its web-based configuration editor at the /admin/config endpoint. The route requires an authenticated session but performs no explicit privilege or administrator authorization check , allowing any authenticated low-privileged user to write crafted value...

CVE-2026-78369 Missing Authentication Allows Unauthorized Creation of Crypto Groups in RansomLook

RansomLook contains a missing authentication vulnerability in the /admin/crypto/group/new endpoint. While the endpoint provides an administrative function for creating new crypto group entries, it was not protected by the application's authentication mechanism. An unauthenticated remote attacker...

CVE-2026-78369

RansomLook contains a missing authentication vulnerability in the /admin/crypto/group/new endpoint. Although this endpoint provides an administrative function for creating new crypto group entries, it was not protected by the application's authentication mechanism. An unauthenticated remote attac...

EUVD-2026-64841

RansomLook contains a missing authentication vulnerability in the /admin/crypto/group/new endpoint. While the endpoint provides an administrative function for creating new crypto group entries, it was not protected by the application's authentication mechanism. An unauthenticated remote attacker...

CVE-2026-61663

The render_object_structure view in django CMS (4.0.0–5.0.x) lacked object-level authorization for non-PageContent models using PlaceholderRelationField. An authenticated staff user without cms.use_structure or model-level permissions could request the structure endpoint with guessed IDs to discl...

CVE-2026-74802 SiYuan 3.7.3 Cross-Site WebSocket Hijacking via network proxy

SiYuan versions before 3.7.4 contain a cross-site WebSocket hijacking vulnerability in the admin-only /ws/network/proxy endpoint that explicitly disables origin validation by setting CheckOrigin to unconditionally return true. Attackers can craft malicious webpages that establish WebSocket...

CVE-2026-19996

A vulnerability was identified in Webkul Bagisto up to 2.4.4. This vulnerability affects unknown code of the file /admin/customers of the component Backend Customer Behavior Data Endpoint. Such manipulation of the argument ID leads to improper privilege management. The attack can be executed...

EUVD-2026-56040

A broken access control vulnerability in CSZ CMS 1.3.2 allows unauthenticated remote attackers to read all form submissions including personally identifiable information via the admin form-submission viewer. The viewer endpoint lacks an authentication check and the framework authentication helper...

CVE-2026-18645

A security flaw has been discovered in danpros HTMLy up to 3.1.1. This affects the function addcontent of the file /system/admin/admin.php of the component Admin Content Endpoint. Performing a manipulation of the argument oldfile results in path traversal. The attack may be initiated remotely. Th...

CVE-2026-45376

Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, the GET /admin/organization/users search interpolates params:term into raw Arel.sql ORDER BY similarity expressions before sanitization, allowing an authenticated...

CVE-2026-66421

OpenClaw Dashboard contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to execute arbitrary JavaScript in the administrator's browser session by injecting HTML markup into agent transcript messages processed through the sessions API. Attackers can cra...