CVE-2026-105305 Keycloak-services: keycloak-services: device authorization grant bypasses per-client minimum.acr.value enforcement

A flaw was found in the OIDC implementation of Keycloak, specifically within the Device Authorization Grant flow. This component allows devices with limited input capabilities to obtain security tokens. The issue occurs because the flow fails to check the minimum authentication level required by ...

CVE-2026-105305 Keycloak-services: keycloak-services: device authorization grant bypasses per-client minimum.acr.value enforcement

A flaw was found in the OIDC implementation of Keycloak, specifically within the Device Authorization Grant flow. This component allows devices with limited input capabilities to obtain security tokens. The issue occurs because the flow fails to check the minimum authentication level required by ...

EUVD-2026-93019

A flaw was found in the OIDC implementation of Keycloak, specifically within the Device Authorization Grant flow. This component allows devices with limited input capabilities to obtain security tokens. The issue occurs because the flow fails to check the minimum authentication level required by ...

CVE-2026-105305

A flaw was found in the OIDC implementation of Keycloak, specifically within the Device Authorization Grant flow. This component allows devices with limited input capabilities to obtain security tokens. The issue occurs because the flow fails to check the minimum authentication level required by ...

CVE-2026-6741

CVE-2026-6741 ثغرة CVE-2026-6741 هي ثغرة تصعيد صلاحيات Privilege Escalation بتقييم CVSS 8.8 عالية ومُوثَّقة Authenticated Agent+ في إضافة LatePoint – Calendar Booking Plugin CVE-2026-6741 — ماسح تصعيد الصلاحيات في LatePoint الإضافة: LatePoint – Calendar Booking Plugin للمواعيد والفعاليات latepoin...

CVE-2026-44277

🚨 CVE-2026-44277 - FortiAuthenticator RCE غير مصادق عليه ثغرة تنفيذ أوامر عن بُعد غير مصادق عليه حرجة في Fortinet FortiAuthenticator 📋 نظرة عامة CVE-2026-44277 هي ثغرة أمنية حرجة في Fortinet FortiAuthenticator تسمح للمهاجمين غير المصادق عليهم بتنفيذ أوامر عن بُعد RCE عبر التحكم غير السليم في الوص...

CVE-2026-105701

The ACPT Premium plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.66 via the render function. This is due to missing capability check on the REST API form creation endpoint and unsandboxed Twig environment rendering email templates. This makes ...

CVE-2026-105701

The ACPT (Premium) plugin for WordPress is vulnerable to Remote Code Execution (RCE) in all versions up to and including 2.0.66 . The root cause is a missing capability check on the REST API form creation endpoint combined with an unsandboxed Twig environment used for rendering email templates. A...

CVE-2026-105701 ACPT (Premium) <= 2.0.66 - Authenticated (Subscriber+) Remote Code Execution via REST API Email Template

The ACPT Premium plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.66 via the render function. This is due to missing capability check on the REST API form creation endpoint and unsandboxed Twig environment rendering email templates. This makes ...

EUVD-2026-92986

The ACPT Premium plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.66 via the render function. This is due to missing capability check on the REST API form creation endpoint and unsandboxed Twig environment rendering email templates. This makes ...

CVE-2026-105701 ACPT (Premium) <= 2.0.66 - Authenticated (Subscriber+) Remote Code Execution via REST API Email Template

The ACPT Premium plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.66 via the render function. This is due to missing capability check on the REST API form creation endpoint and unsandboxed Twig environment rendering email templates. This makes ...

CVE-2026-94293

The aas-edge-client REST API is vulnerable to a missing authentication flaw for critical functions. An unauthenticated remote attacker can perform PATCH requests to modify Asset Administration Shell submodel data and use GET endpoints to read all exposed data. No specific exploit details or remed...

CVE-2026-94293 Missing authentication for critical function in the aas-edge-client REST API

An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints...

CVE-2026-94293 Missing authentication for critical function in the aas-edge-client REST API

An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints...

CVE-2026-63030

🚨 CVE-2026-63030 — WP2Shell ارتباك مسار REST API في ووردبريس → تنفيذ أكواد عن بعد ثغرة حرجة في نواة ووردبريس تؤدي إلى ارتباك مسار REST API يمكن ربطها مع حقن SQL لتحقيق تنفيذ أكواد عن بعد بدون مصادقة. 📖 نظرة عامة CVE-2026-63030 هي ثغرة حرجة تؤثر على نواة ووردبريس. المشكلة موجودة في نقطة نهاية REST...

Exploit for CVE-2026-8206

🛡️ CVE-2026-8206: Unauthenticated Account Takeover Lab Analysi...

CVE-2026-8181

CVE-2026-8181 تسمح هذه الثغرة للمهاجمين غير الموثّقين الذين يعرفون اسم مستخدم مسؤول صالح بانتحال شخصية ذلك المسؤول أثناء طلبات REST API باستخدام أي كلمة مرور غير صحيحة في رأس Basic Authentication. يمكن للمهاجمين استغلال هذا العيب لإنشاء حساب مسؤول جديد دون مصادقة مسبقة...

proofpoint-CVE-2023-0090

À propos Chercheur en sécurité : ly1g3, ly1g3attuta.io Empreinte GPG : https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Aperçu : Exécution de code à distance - RCE non authentifiée CVE : CVE-2023-0090 Chronologie : Découvert - ly1g3 Signalé - ly1g3 Corrigé -...

cybermeowfia-termux

CyberMeowfia مدير الجذر لـ Termux أداة رفع الامتيازات ومدير صلاحيات الجذر لـ Termux استنادًا إلى ثغرة النواة CVE-2026-43501. الميزات استغلال ثغرة النواة CVE-2026-43501 واجهة إدارة ويب Flask 25 واجهة برمجة تطبيقات مصادقة التوكن HMAC-SHA256 إدارة العمليات والوصول إلى نظام الملفات إدارة وحدات Magisk...

wp2shell

🔍 wp2shell - Scanner de vulnérabilité et exploit pour WordPress CVE-2026-63030 ⚡ Scanner de vulnérabilités et exploit rapide et en temps réel pour CVE-2026-63030 wp2shell 📌 Aperçu wp2shell est une boîte à outils complète pour détecter et exploiter CVE-2026-63030 , une vulnérabilité critique dans...