111848 matches found
CVE-2026-103956
Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent control plane, including registering tool servers, reading stored integration credentials, and rewriting the IAM role...
CVE-2026-103956 Missing authentication for critical function in Loom for AWS
Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent control plane, including registering tool servers, reading stored integration credentials, and rewriting the IAM role...
EUVD-2026-91770
Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent control plane, including registering tool servers, reading stored integration credentials, and rewriting the IAM role...
CVE-2026-103956
Loom for AWS versions before 1.6.1 are vulnerable to a critical flaw due to missing authentication for a critical function within the authentication dependency. In deployments where no identity provider is configured, remote actors can exploit this via any request to the application API to obtain...
CVE-2026-103956 Missing authentication for critical function in Loom for AWS
Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent control plane, including registering tool servers, reading stored integration credentials, and rewriting the IAM role...
CVE-2026-103956 Missing authentication for critical function in Loom for AWS
Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent control plane, including registering tool servers, reading stored integration credentials, and rewriting the IAM role...
CVE-2026-27540
🌐 Language / Dil 📌 概要 WooCommerce Wholesale Lead Capture WWLC — 認証不要のファイルアップロード → RCE | ---|--- 製品| WooCommerce Wholesale Lead Capture — wwlc プラグイン バージョン| ≤ 2.0.3.1 修正済み| 2.0.3.2+ — アップロードハンドラが保護済み 認証| 認証不要 ベクター| admin-ajax.php?action=wwlcfileuploadhandler フィールド| file multipart upload 書き込み先|...
CVE-2026-66493
ファイル操作におけるパストラバーサル（削除 / コピー / 移動） PhocaCommander ≤ 6.1.3 — 認証済み管理者がWebルート外のファイルを操作できる 概要 PhocaCommander のファイルアクションハンドラは、攻撃者が制御するbase64エンコードされたパラメータ（pathfrom、pathwhere）からソースパスとデスティネーションパスを構築しますが、パス封じ込めの検証を一切行いません。認証済み管理者は、Webサーバープロセスがアクセス可能なファイルシステム上の任意の場所で、ファイルの削除、コピー、移動ができます。 ラボで確認済み:...
CVE-2026-104625
A security flaw has been discovered in CodeAstro Simple Loan Management System 1.0. Impacted is an unknown function of the file /admin/index.php. Performing a manipulation of the argument gname results in sql injection. The attack may be initiated remotely. The exploit has been released to the...
CVE-2026-104625 CodeAstro Simple Loan Management System index.php sql injection
A security flaw has been discovered in CodeAstro Simple Loan Management System 1.0. Impacted is an unknown function of the file /admin/index.php. Performing a manipulation of the argument gname results in sql injection. The attack may be initiated remotely. The exploit has been released to the...
EUVD-2026-91650
A security flaw has been discovered in CodeAstro Simple Loan Management System 1.0. Impacted is an unknown function of the file /admin/index.php. Performing a manipulation of the argument gname results in sql injection. The attack may be initiated remotely. The exploit has been released to the...
CVE-2026-104625
A security flaw exists in CodeAstro Simple Loan Management System 1.0 within an unknown function of the /admin/index.php file. An attacker can perform a remote SQL injection by manipulating the g_name argument. Public exploits are available and may be used to conduct attacks. No specific remediat...
CVE-2026-104625 CodeAstro Simple Loan Management System index.php sql injection
A security flaw has been discovered in CodeAstro Simple Loan Management System 1.0. Impacted is an unknown function of the file /admin/index.php. Performing a manipulation of the argument gname results in sql injection. The attack may be initiated remotely. The exploit has been released to the...
By-Poloss..-..CVE-2026-15038-POC
🚨 CVE-2026-15038 — InfiniteWP クライアント管理者乗っ取り WordPress マルチサイトにおける未認証の管理者アカウント乗っ取り 📋 概要 WordPress 用プラグイン InfiniteWP Client （getoption'iwpclientactionmessageid' && !$iwpmmbcore-getoption'iwpclientpublickey' リーダー（読み取り側） ：getsiteoption を使用 → ネットワークレベル（wpsitemeta）から読み取り ライター（書き込み側） ：updateblogoption を使...
CVE-2026-89055
CVE-2026-89055 — Customer Reviews for WooCommerce CusRev 認可バイパス Customer Reviews for WooCommerce （customer-reviews-woocommerce / Ivole CusRev）における CVE-2026-89055 の Python 3 PoC。 説明 PoCbit / GitHub CVE-2026-89055 — Customer Reviews for WooCommerce CusRev ≤ 5.120.0 は、公開されている ローカルレビューフォーム の AJAX...
CVE-2026-66491
PhocaCommander の getSource を介した任意ファイル読み取り PhocaCommander ≤ 6.1.3 — 認証済み管理者によるパストラバーサル、CSRF 不要 概要 PhocaCommander のファイルエディタエンドポイントには、任意ファイル読み取りの脆弱性が存在します。getSource 関数は、base64 エンコードされた filename パラメータをデコードし、パス包含チェックなしで直接 filegetcontents に渡します。認証済み管理者は、GET リクエストを送信するだけで、Web...
CVE-2026-26119
CVE-2026-26119 WAC RCE - CVE-2026-26119 Windows Admin Center の認証済み RCE WinREST/PowerShell invokeCommand 経由。 使用法: python3 wacrce.py "" WACPASS= python3 wacrce.py 環境変数: WACBASE - ターゲットのベース URL を上書き デフォルトは以下 WACPASS - パスワード、位置引数で渡されなかった場合に使用 ┌──pwn㉿pwn-/HTB/DanglingTree └─$ python3 wacrce.py...
CVE-2026-104467
YesWiki before 4.6.7 contains an authorization bypass vulnerability in ApiService::isAuthorized that allows unauthenticated attackers to call admin-only API routes when public API mode is enabled. Attackers can send requests to endpoints like api/ci/updateconfig and api/archives to overwrite...
CVE-2026-104415
Ghost from 0.7.2 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff-level users to determine the relative ordering of other staff users' password hashes. Authenticated staff users can query the Admin API to infer hash ordering, though this does not...
CVE-2026-104414
Ghost from 2.5.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows attackers to inject untrusted scripts into post content via oEmbed photo responses. Attackers can host malicious oEmbed photo responses so that embedding their URL stores scripts that run in the Ghost...