CVE-2026-76910

Unleash is an open-source feature management platform. Prior to 8.0.3, cloneFeatureToggle and POST /api/admin/projects/:projectId/features/:featureName/clone authorize creation in the destination project but do not verify access to the source project. Because feature names are globally unique, a...

CVE-2026-77425

Unleash is an open-source feature management platform. Prior to 8.0.3, POST /api/admin/projects/:projectId/features/:featureName/environments/:environment/strategies/set-sort-order passes attacker-controlled strategy IDs to unprotectedUpdateStrategiesSortOrder and updateSortOrder without verifyin...

CVE-2026-77426

Unleash is an open-source feature management platform. Prior to 8.0.3, the Unleash admin API contains five authorization vulnerabilities. POST /api/admin/segments/strategies assigns the Promise returned by hasPermission without awaiting it, allowing authenticated users to modify segment assignmen...

CVE-2023-2859

CVE-2023-2859: TeamPass 3.0.9 の管理者に影響するfolderNameへの保存型HTMLインジェクション - M Nadeem Qazi こんにちは、 nilsteampassnet/teampass アプリケーションにおいて、FolderNameフィールドに保存型HTMLインジェクションが発生する重大な脆弱性を発見しました。悪意のあるHTMLコードをFolderNameフィールドに挿入することで、攻撃者はフォルダ名を変更することができます。 脆弱性の詳細 脆弱性タイプ: 保存型HTMLインジェクション CVE: CVE-2023-2859...

Cloudreve: Privilege Scope Bypass: State-Mutating Admin Operations Accessible via Read-Only OAuth Scope

Summary There is a privilege scope bypass in Cloudreve's admin API where two endpoints that mutate server state are missing the write-scope enforcement that their neighboring endpoints correctly apply. Specifically, the WOPI configuration fetch endpoint and the SMTP test/mail endpoint can both be...

NPM: Unleash: Missing await on permission check + cross-project IDOR in admin API

NPM: Unleash: Missing await on permission check + cross-project IDOR in admin API vulnerability discovered by ? in WordPress Npm unleash-server versions 8.0.3...

Unleash: Missing await on permission check + cross-project IDOR in admin API

Summary Multiple authorization vulnerabilities in Unleash admin API, including a critical missing await that completely bypasses a permission check. Vulnerability 1: Missing await on Permission Check HIGH File: src/lib/features/segment/segment-controller.ts line 345 POST...

CVE-2026-77426

The Unleash feature management platform (versions prior to 8.0.3 ) contains five authorization vulnerabilities in its admin API. A critical flaw in src/lib/features/segment/segment-controller.ts fails to await the hasPermission() call, allowing authenticated users to bypass permission checks and ...

CVE-2026-77426 Unleash: Missing await on permission check + cross-project IDOR in admin API

Unleash is an open-source feature management platform. Prior to 8.0.3, the Unleash admin API contains five authorization vulnerabilities. POST /api/admin/segments/strategies assigns the Promise returned by hasPermission without awaiting it, allowing authenticated users to modify segment assignmen...

EUVD-2026-84867

Unleash is an open-source feature management platform. Prior to 8.0.3, the Unleash admin API contains five authorization vulnerabilities. POST /api/admin/segments/strategies assigns the Promise returned by hasPermission without awaiting it, allowing authenticated users to modify segment assignmen...

CVE-2026-77426 Unleash: Missing await on permission check + cross-project IDOR in admin API

Unleash is an open-source feature management platform. Prior to 8.0.3, the Unleash admin API contains five authorization vulnerabilities. POST /api/admin/segments/strategies assigns the Promise returned by hasPermission without awaiting it, allowing authenticated users to modify segment assignmen...

CVE-2026-76910 Unleash: Clone-feature lets a user copy a feature from a project they cannot read

Unleash is an open-source feature management platform. Prior to 8.0.3, cloneFeatureToggle and POST /api/admin/projects/:projectId/features/:featureName/clone authorize creation in the destination project but do not verify access to the source project. Because feature names are globally unique, a...

CVE-2026-76910 Unleash: Clone-feature lets a user copy a feature from a project they cannot read

Unleash is an open-source feature management platform. Prior to 8.0.3, cloneFeatureToggle and POST /api/admin/projects/:projectId/features/:featureName/clone authorize creation in the destination project but do not verify access to the source project. Because feature names are globally unique, a...

CVE-2026-76910

The open-source feature management platform Unleash (versions prior to 8.0.3 ) is vulnerable to an authorization bypass in the cloneFeatureToggle function and the POST /api/admin/projects/:projectId/features/:featureName/clone endpoint. The root cause is that the system validates permissions for ...

CVE-2022-35501

CVE-2022-35501 Amasty Blog Pro for Magento 2 のブログ投稿作成機能における格納型クロスサイトスクリプティング XSS 説明 Magento 2 用プラグインである Amasty Blog Pro 2.10.3 および 2.10.4 の投稿作成機能では、title フィールドに JavaScript コードを注入できます。この機能は data.title フィールドを使用して JavaScript コードを実行していたため、重複投稿機能を介して管理パネルユーザーに対する XSS 攻撃が可能になります。...

EUVD-2026-84624

Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains an authorization bypass vulnerability in the billing module handler that allows unauthenticated remote attackers to modify any tenant's account balance by supplying crafted act and frombillingmodule parameters to the admin panel...

CVE-2026-43643

Softaculous Virtualizor versions before 3.2.9 (Patch 9) and 3.0.0 are susceptible to an authorization bypass vulnerability in the billing module handler. An unauthenticated remote attacker can modify any tenant's account balance by sending a POST request to the admin panel dispatcher with crafted...

CVE-2026-44848-PoC

CVE-2026-44848 — Portainer: Docker プラグインエンドポイントにおける認可欠如 → ホスト RCE CVE-2026-44848 の概念実証です。これは認可欠如 CWE-862 の脆弱性で、 Portainer において Docker エンドポイントへのアクセス権を持つ 非管理者 ユーザーが 特権的な Docker プラグイン操作を実行できるため、完全な ホスト RCE に至ります。 GitHub セキュリティアドバイザリ: GHSA-rrmm-9v76-h3p4 · CVSS 9.4 緊急。 根本原因 Portainer は、Docker API...

codecentric__spring-boot-admin_CVE-2022-46166_2-6-9

codecentric の Spring Boot Admin このコミュニティプロジェクトは、Spring Boot ® アプリケーション用の管理インターフェースを提供します。 Python アプリケーションの監視は、Pyctuator を使用して行うことができます。 Spring Boot Admin は、登録されたアプリケーションに対して次の機能を提供します: ヘルスステータスを表示 次のような詳細を表示...

CVE-2021-45232

Apache APISIX Dashboard 未承認アクセス脆弱性 CVE-2021-45232 FOFA クエリ title="Apache APISIX Dashboard" 影響範囲 Apache APISIX Dashboard 2.10.1 POC: root@kitploit: IP:PORT/apisix/admin/migrate/export 修正提案 最新のセキュリティバージョン Apache APISIX Dashboard 2.10.1...