CVE-2026-54477

CVE-2026-54477：管理面板缺少安全标头（点击劫持 / XSS） 公告 字段| 值 ---|--- CVE| CVE-2026-54477 ICSA| ICSA-26-183-03（Gardyn IoT Hub） CVSS 3.1| 5.4（中危） 向量（3.1）| CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N 向量（4.0）| CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N CWE（CISA 分配）| CWE-644（HTTP 标头脚本语法中和不当）...

Active-Directory-BadSuccessor

Active-Directory-BadSuccessor Resumen En esta sala, exploramos la técnica de escalada de privilegios BadSuccessor, una vulnerabilidad que abusa de las Cuentas de Servicio Administradas Delegadas dMSA en Active Directory. El ataque permite a un usuario con suficiente control sobre un objeto dMSA...

CVE-2026-51119

CVE-2026-51119 - Privilege Escalation in Invixium IXM WEB v2.3.85.25 Overview A privilege escalation vulnerability exists in Invixium IXM WEB v2.3.85.25 due to missing authorization checks on the POST /SystemUsers/CreateAppUser endpoint. An authenticated low-privileged user can abuse this endpoin...

CVE-2026-8732-EXPLOIT

CVE-2026-8732 – WordPress WP Maps Pro Exploit Unauthenticated Admin Takeover | CVSS 9.8 | Ready to use 🔥 What you get Fully working Python exploit for CVE-2026-8732 Unauthenticated administrator account creation Returns magic login URL – instant site takeover Works against WP Maps Pro ≤ 6.1.0...

CVE-2026-66418-OpenClaw-Dashboard-v3.0.0-Stored-XSS-via-Failed-Login-Username-Field

Security Advisory: Unauthenticated Stored Cross-Site Scripting Leading To Administrator Account Takeover openclaw-dashboard Title: OpenClaw Dashboard v3.0.0 Stored XSS via Failed Login Username Field Assigned CVE ID: CVE-2026-66418 Target Repository:...

CVE-2026-6741

CVE-2026-6741 CVE-2026-6741 es una vulnerabilidad de escalada de privilegios autenticada, Agent+ con puntuación CVSS 8.8 Alta en el plugin LatePoint – Calendar Booking Plugin. CVE-2026-6741 — Escáner de escalada de privilegios LatePoint Plugin: LatePoint – Calendar Booking Plugin for Appointments...

CVE-2026-23550

root@kitploit: ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗ ███████╗ ███████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ╚════██╗██╔═████╗╚════██╗██╔════╝ ╚════██╗╚════██╗██╔════╝ ██╔════╝██╔═████╗ ██║ ██║ ██║█████╗ █████╔╝██║██╔██║ █████╔╝███████╗ █████╔╝ █████╔╝███████╗...

CVE-2026-8181

CVE-2026-8181 Esta vulnerabilidad permite a atacantes no autenticados que conozcan un nombre de usuario de administrador válido hacerse pasar por ese administrador durante las solicitudes a la API REST mediante el uso de cualquier contraseña incorrecta en una cabecera de autenticación básica. Los...

CVE-2015-9357-POC

CVE-2015-9357 wordpress smiley/emoticon parser stored xss, admin user creation via forged nonce request. breaks out of attribute context through the emoticon regex, lands js in an onerror handler. no script tag needed, survives wpkses filtering on the affected field. chain: submit payload to any...

CVE-2024-22275

CVE-2024-22275: Lectura Parcial de Archivos en VMware vCenter Server El vCenter Server contiene una vulnerabilidad de lectura parcial de archivos. Un actor malintencionado con privilegios administrativos en el shell del appliance de vCenter podría explotar este problema para leer parcialmente...

CVE-2022-25813

CVE-2022-25813: Inyección de Plantillas del Lado del Servidor en FreeMarker en Apache OfBiz Al insertar contenido malicioso en el campo "Subject" de un mensaje, un atacante puede realizar ataques SSTI Server-Side Template Injection, que pueden aprovechar objetos expuestos de FreeMarker para eludi...

CVE-2019-16097

CVE-2019-16097 Principio de la vulnerabilidad de creación no autorizada de administrador en Harbor, docker y PoC basado en el framework pocsuite...

CVE-2025-26686-The-TCP-IP-Flaw-That-Opens-the-Gates

CVE-2025-26686-La-falla-TCP-IP-que-abre-las-puertas Una vulnerabilidad crítica de RCE en la pila TCP/IP de Windows CVE-2025-26686 deja memoria sensible desbloqueada, permitiendo a atacantes remotos secuestrar sistemas. Explotable a través de la red, corre el riesgo de un compromiso total. Parchee...

CVE-2026-79588

U-speed WIFI4 N300 T1 Pro v1.0.0 , a USB Wi-Fi 4 N300 T1 Pro adapter, is vulnerable to cleartext transmission of administration credentials over HTTP . An attacker on the adjacent network can intercept unencrypted admin credentials without requiring prior privileges or user interaction, resulting...

CVE-2026-79576

An issue in the Single-Sign On SSO component of Digital-Infrastructure v9.6.7 allows attackers to authenticate as any user, including the Admin, without a password...

PT-2026-87170

An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 all versions, FortiManager Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.4.1 through 7.4.10, FortiManager Cloud 7.2 all versions may allow an administrator ...

EUVD-2026-72848

An issue in the Single-Sign On SSO component of Digital-Infrastructure v9.6.7 allows attackers to authenticate as any user, including the Admin, without a password...

PT-2026-88455

The Auth0 AD/LDAP Connector is vulnerable to stored Cross-Site Scripting XSS issues due to improper HTML encoding of data in search results and updater log content displayed in the admin panel. An authenticated user with privileges to modify directory attributes, or a low-privileged local user on...

EUVD-2026-74263

U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP...

ONLYOFFICE ownCloud integration plugin contains a Server-Side Request Forgery (SSRF) vulnerability

Overview A Server-Side Request Forgery SSRF vulnerability exists in Ascensio System SIA's ONLYOFFICE ownCloud integration plugin version 9.12. The plugin’s backend endpoint does not adequately validate the user‑supplied document server URL before initiating outbound connections. An authenticated...