Lucene search
+L

89705 matches found

EUVD
EUVD
added 3 days ago10 views

EUVD-2026-51434

The ElementsKit Elementor Addons WordPress plugin before 3.10.01 does not sanitize or escape certain megamenu menu-item settings before storing them and outputting them on the front end, and does not require the unfilteredhtml capability to save them, allowing users with administrative capabiliti...

3.5CVSS5.8AI score0.00142EPSS
SaveExploits0References1
EUVD
EUVD
added 3 days ago10 views

EUVD-2026-51430

The Ultimate Member WordPress plugin before 2.12.1 does not filter administrator-level capabilities from the roles it makes selectable on its registration forms, and its post-registration safeguard against elevated accounts is disabled by default, allowing unauthenticated users to register with a...

8.1CVSS5.9AI score0.00226EPSS
SaveExploits0References1
Cvelist
Cvelist
added 3 days ago36 views

CVE-2026-12251 Ultimate Member < 2.12.1 - Unauthenticated Privilege Escalation via Role Selection Field

The Ultimate Member WordPress plugin before 2.12.1 does not filter administrator-level capabilities from the roles it makes selectable on its registration forms, and its post-registration safeguard against elevated accounts is disabled by default, allowing unauthenticated users to register with a...

0.00226EPSS
SaveExploits0References1
NVD
NVD
added 3 days ago11 views

CVE-2026-55502

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, POST /api/v4/admin/policy/oauth/signin requires only Admin.Read even though GetOauthRedirectService persists caller-supplied OneDrive secret and appid values, allowing an OAuth token without Admin.Write to modify...

7.1CVSS0.00338EPSS
SaveExploits0References1
CVE
CVE
added 3 days ago21 views

CVE-2026-55502

Cloudreve prior to version 4.17.0 contains an OAuth scope bypass in the admin storage policy route POST /api/v4/admin/policy/oauth/signin. The admin route is under RequiredScopes(Admin.Read) and does not apply the local Admin.Write guard used by sibling policy mutation routes, allowing an attacke...

7.1CVSS5.9AI score0.00338EPSS
SaveExploits0References1
EUVD
EUVD
added 3 days ago11 views

EUVD-2026-51394

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, POST /api/v4/admin/policy/oauth/signin requires only Admin.Read even though GetOauthRedirectService persists caller-supplied OneDrive secret and appid values, allowing an OAuth token without Admin.Write to modify...

7.1CVSS5.9AI score0.00338EPSS
SaveExploits0References1
OSV
OSV
added 3 days ago5 views

CVE-2026-55502 Cloudreve: OAuth Admin.Read scope can update OneDrive storage policy credentials

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, POST /api/v4/admin/policy/oauth/signin requires only Admin.Read even though GetOauthRedirectService persists caller-supplied OneDrive secret and appid values, allowing an OAuth token without Admin.Write to modify...

7.1CVSS5.5AI score0.00338EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 3 days ago12 views

PT-2026-66749

A Cross-Site Request Forgery CSRF vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user, leading to unauthorized administrative actions,...

6.9CVSS5.4AI score0.00166EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 3 days ago11 views

PT-2026-66750

A SQL injection vulnerability has been identified in the PHP Jabbers - PHP Poll Script. Improper neutralization of input provided by user to pjAdminPolls.controller.php endpoint allows an authenticated attacker to perform SQL Injection attacks. This issue was fixed in version 4.1...

8.6CVSS5.8AI score0.00297EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 3 days ago7 views

JFrog Artifactory 7.146.x < 7.146.34 / 7.161.x < 7.161.15 Multiple Vulnerabilities

According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is affected by multiple vulnerabilities: - An authenticated privilege-escalation vulnerability in JFrog Platform may be exploited under admin-provisioned account conditions. Successful...

7.2CVSS5.6AI score0.00335EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 3 days ago6 views

Qnap QTS and QuTS hero OS Command Injection (CVE-2025-66279)

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS...

8.6CVSS5.7AI score0.01049EPSS
SaveExploits0References2
EUVD
EUVD
added 3 days ago10 views

EUVD-2026-51644

PrestaShop module, totadministrativemandate 1.8.1 is vulnerable to Cross Site Request Forgery CSRF. The payment validation controller has no CSRF token. An attacker can confirm an order in an awaiting status by hijacking a link...

5.4AI score0.00145EPSS
SaveExploits0References2
CVE
CVE
added 3 days ago10 views

CVE-2026-52371

CVE-2026-52371 describes a Server-Side Request Forgery (SSRF) in the xxl-job-admin/jobinfo/trigger component of xxl-job v3.4.0 . An authenticated attacker can trigger requests to arbitrary resources by supplying a crafted HTTP request, enabling resource scanning from the vulnerable server. The de...

5.5AI score0.0016EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 3 days ago9 views

PT-2026-66834

Stored cross-site scripting in the participant URL handling in AWS Ops Wheel before PR 168 might allow an authenticated remote user to steal session tokens and escalate to full administrative control of the deployed instance via a crafted participant url value containing a dangerous URI scheme. T...

7.3CVSS5.3AI score0.00282EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 3 days ago9 views

PT-2026-66860

Name of the Vulnerable Software and Affected Versions Modern Loan Management System version 1.0 Description An issue exists that allows SQL Injection, a technique where malicious SQL statements are inserted into entry fields for execution, at the '/admin/delete group.php' endpoint via the id...

5.6AI score0.00156EPSS
SaveExploits0References5
EUVD
EUVD
added 3 days ago10 views

EUVD-2025-210575

SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in /admin/deletegroup.php?id=1...

5.8AI score0.00156EPSS
SaveExploits0References3
CVE
CVE
added 3 days ago9 views

CVE-2025-69948

CVE-2025-69948 affects SourceCodester Modern Loan Management System 1.0. The vulnerability is a SQL Injection in the parameter id of the script /admin/delete_group.php?id=1. The connected sources (NVD and CVE records) confirm the presence of this injection flaw but do not provide details on affec...

5.8AI score0.00156EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 3 days ago8 views

PT-2026-66866

Name of the Vulnerable Software and Affected Versions xxl-job version 3.4.0 Description A Server-Side Request Forgery SSRF exists in the 'xxl-job-admin/jobinfo/trigger' endpoint. This issue allows authenticated attackers to scan internal resources by sending a specially crafted HTTP request. SSRF...

5.5AI score0.0016EPSS
SaveExploits0References3
NVD
NVD
added 4 days ago6 views

CVE-2026-66420

MeshCentral 1.1.21 contains a cross-site WebSocket hijacking protection bypass vulnerability that allows unauthenticated remote attackers to hijack authenticated administrator sessions by exploiting an unconditional early return in the CheckWebServerOriginName function within webserver.js when...

8.8CVSS0.00165EPSS
SaveExploits0References4
NVD
NVD
added 4 days ago6 views

CVE-2026-66421

OpenClaw Dashboard contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to execute arbitrary JavaScript in the administrator's browser session by injecting HTML markup into agent transcript messages processed through the sessions API. Attackers can cra...

9.3CVSS0.00363EPSS
SaveExploits0References3
Rows per page
Query Builder