91859 matches found
CVE-2026-45272
MyBooks (also known as Talebook), a personal ebook management web server, is vulnerable to remote code execution in versions 3.41.2 and earlier . The root cause is a Python code injection via the AdminSettings.post handler in webserver/handlers/admin.py, which accepts SOCIAL_AUTH key names withou...
CVE-2026-45273 MyBooks: Privilege Escalation via Missing Authorization on Admin Settings Endpoint
MyBooks is an ebook management web server also known as Talebook. In 3.41.2 and earlier, the AdminSettings.post handler for POST /api/admin/settings in webserver/handlers/admin.py applies the auth decorator but does not check the self.adminuser property, unlike the corresponding GET handler. Any...
CVE-2026-45273 MyBooks: Privilege Escalation via Missing Authorization on Admin Settings Endpoint
MyBooks is an ebook management web server also known as Talebook. In 3.41.2 and earlier, the AdminSettings.post handler for POST /api/admin/settings in webserver/handlers/admin.py applies the auth decorator but does not check the self.adminuser property, unlike the corresponding GET handler. Any...
CVE-2026-76211 phpMyFAQ before 4.1.7 Information Disclosure via Admin API
phpMyFAQ before 4.1.7 fails to properly enforce CONFIGURATIONEDIT permission on admin API read endpoints for LDAP, Elasticsearch, OpenSearch, and dashboard configuration, allowing any authenticated user to access sensitive administrative data. Attackers can retrieve LDAP server topology, bind...
EUVD-2026-62452
phpMyFAQ before 4.1.7 fails to properly enforce CONFIGURATIONEDIT permission on admin API read endpoints for LDAP, Elasticsearch, OpenSearch, and dashboard configuration, allowing any authenticated user to access sensitive administrative data. Attackers can retrieve LDAP server topology, bind...
CVE-2026-76211
phpMyFAQ before 4.1.7 contains an authorization flaw in its admin API. The CONFIGURATION_EDIT permission is not properly enforced on read endpoints for LDAP , Elasticsearch , OpenSearch , and dashboard configuration. Any authenticated user with a valid session can call these endpoints and retriev...
CVE-2026-76211 phpMyFAQ before 4.1.7 Information Disclosure via Admin API
phpMyFAQ before 4.1.7 fails to properly enforce CONFIGURATIONEDIT permission on admin API read endpoints for LDAP, Elasticsearch, OpenSearch, and dashboard configuration, allowing any authenticated user to access sensitive administrative data. Attackers can retrieve LDAP server topology, bind...
CVE-2021-21014
PoC Limitado CVE-2021-21014 As versões 2.4.1 e anteriores, 2.4.0-p1 e anteriores e 2.3.6 e anteriores do Magento são vulneráveis a um bypass de restrição de upload de arquivos. Uma exploração bem-sucedida pode levar à execução arbitrária de código por um atacante autenticado. Versão afetada: =...
SimpleCTF-UpdatedExploit
CMS Made Simple = 2.2.10 SQL-Injection-Exploit Überblick Dieses Python-Skript nutzt eine nicht authentifizierte SQL-Injection-Sicherheitslücke in CMS Made Simple = 2.2.10 CVE-2019-9053 aus. Der Exploit extrahiert vertrauliche Informationen wie Salt, Benutzernamen, E-Mail und Passwort des...
CVE-2026-16570
The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.4.8 does not escape some of the query-string parameters it reflects back on one of its admin pages, allowing attackers to perform Reflected Cross-Site Scripting attacks against logged-in users such as administrators who are...
CVE-2026-19056
The ProSolution WP Client WordPress plugin (versions before 2.0.11) fails to sanitise and escape the page parameter before reflecting it into an HTML attribute on an admin page, enabling reflected XSS in an administrator's session via a crafted request. CVSS 7.1 (HIGH). Remediation: update to ver...
EUVD-2026-62286
The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape several parameters before reflecting them into HTML attributes on its public pages, leading to reflected Cross-Site Scripting that can be triggered against any visitor, including a logged-in administrator...
EUVD-2026-62276
The TabaPay Gateway WordPress plugin through 1.4.0 does not validate the payment callback before establishing a session for the account associated with the referenced order, allowing unauthenticated attackers to log in as any registered user, including an administrator...
EUVD-2026-62270
The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.4.8 does not escape some of the query-string parameters it reflects back on one of its admin pages, allowing attackers to perform Reflected Cross-Site Scripting attacks against logged-in users such as administrators who are...
CVE-2026-16570 NextScripts: Social Networks Auto-Poster < 4.4.8 - Reflected XSS via Facebook OAuth Callback
The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.4.8 does not escape some of the query-string parameters it reflects back on one of its admin pages, allowing attackers to perform Reflected Cross-Site Scripting attacks against logged-in users such as administrators who are...
CVE-2026-16570 NextScripts: Social Networks Auto-Poster < 4.4.8 - Reflected XSS via Facebook OAuth Callback
The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.4.8 does not escape some of the query-string parameters it reflects back on one of its admin pages, allowing attackers to perform Reflected Cross-Site Scripting attacks against logged-in users such as administrators who are...
CVE-2026-16570
The NextScripts: Social Networks Auto-Poster WordPress plugin (before 4.4.8) reflects unescaped query-string parameters on an admin page, enabling reflected XSS against administrators who click a crafted link. CISA SSVC reports no active exploitation. Update to version 4.4.8 to remediate.
EUVD-2026-62258
The Eventin WordPress plugin before 4.1.21 does not properly verify ownership of events before allowing them to be modified, deleted, or reassigned to a different author, allowing users with contributor-level access and above to alter, delete, or take over events created by other users including...
CVE-2026-23938
A flaw was found in Zabbix. An authenticated administrator can exploit this vulnerability by creating specially crafted JavaScript scripts within preprocessing or script items. This can lead to a denial of service DoS by crashing the Zabbix server or proxy. Mitigation Restrict administrative acce...