CVE-2020-10977

Gitlab निजी इंस्टेंस में मनमानी फ़ाइल पढ़ने के लिए Python Exploit 03/23/2020 की तारीख में, एक कमज़ोरी रिपोर्ट उसके PoC के साथ hackerone पर William Bowling द्वारा जारी की गई थी। इस कमज़ोरी की मदद से हम gitlab सर्वर पर /etc/passwd जैसी कोई भी विश्व-पठनीय फ़ाइलें अनुमति 444 या अधिक के साथ पढ़ सकते...

CVE-2026-85486

Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form, the submitted text could immediately be processed. A malicious actor with basic access can supply crafted input to execute arbitrary code...

cve-2021-3164

الإصدار 2.6.4 من Church Rota عرضة لثغرة تنفيذ تعليمات برمجية عن بُعد بعد المصادقة. لا يحتاج المستخدم إلى صلاحية رفع الملفات لرفع وتنفيذ أي ملف. بعد تسجيل الدخول إلى Church Rota، أرسل الطلب التالي مع استبدال PHPSESSID بقيمتك الخاصة: POST /resources.php?action=newsent HTTP/1.1 Host: localhost:8081...

K000163592: Samba vulnerability CVE-2026-2340

Security Advisory Description A flaw was found in Samba’s vfsworm module. The module is intended to provide write-once, read-many WORM protections by preventing modification of files after a configurable grace period. Due to insufficient validation during rename operations, an authenticated user...

CVE-2024-30167

PoC para Injeção de Comando Autenticada no Atlona OME Aviso Legal : Esta prova de conceito é fornecida exclusivamente para fins educacionais e de pesquisa. Não utilize este código em sistemas que você não possui ou sem permissão explícita para testar. Não me responsabilizo por qualquer uso...

CVE-2026-85488

Brocade ASCG versions prior to 3.5.0 are susceptible to a hardcoded credential exposure. A well-known Brocade default password is embedded within a script distributed to every customer. A local authenticated user with read access to the installation path can discover these credentials. If default...

CVE-2026-85486

Brocade ASCG versions prior to 3.5.0 are vulnerable to Remote Code Execution (RCE) due to improper input processing. The software evaluates form data before performing necessary validation. An authenticated user with basic access can submit a configuration form containing crafted input , which th...

EUVD-2026-94789

Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form, the submitted text could immediately be processed. A malicious actor with basic access can supply crafted input to execute arbitrary code...

CVE-2026-85486

Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form, the submitted text could immediately be processed. A malicious actor with basic access can supply crafted input to execute arbitrary code...

CVE-2026-94244

The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability check, and relies on a token any authenticated user can obtain from a front-end page, before generating a report containing every customer's wallet transaction history, allowing any authenticated user,...

CVE-2026-94245

The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not verify that the user submitting a wallet transfer owns the wallet being debited, allowing any authenticated user, including one with only the Subscriber role, to move an arbitrary user's wallet balance, including an...

CVE-2026-94246

The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not verify that the wallet account named in a withdrawal submission belongs to the user making it, allowing any authenticated user, such as a subscriber, to file a withdrawal request against another user's wallet for an amount a...

CVE-2026-5048

In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters...

CVE-2026-105197

The Appointment Booking Plugin WordPress plugin before 5.6.5 does not verify that a backend staff user is authorized to act on the specific record targeted for deletion, allowing an authenticated user with a record-scoped staff role to irreversibly delete any order, customer, or transaction on th...

CVE-2026-104645

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify authorization on several of its gallery and image management actions, checking ownership against a different object than the one being acted on, or omitting the check entirely, allowing any...

CVE-2026-5769

A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosting the Brocade SANnav Virtual Machine VM. This can happen when the SANnav server encounters an Out Of Memory OOM condition. The...

EUVD-2026-94752

The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not verify that the wallet account named in a withdrawal submission belongs to the user making it, allowing any authenticated user, such as a subscriber, to file a withdrawal request against another user's wallet for an amount a...

EUVD-2026-94751

The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not verify that the user submitting a wallet transfer owns the wallet being debited, allowing any authenticated user, including one with only the Subscriber role, to move an arbitrary user's wallet balance, including an...

EUVD-2026-94750

The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability check, and relies on a token any authenticated user can obtain from a front-end page, before generating a report containing every customer's wallet transaction history, allowing any authenticated user,...

CVE-2026-94244 Wallet System for WooCommerce < 2.8.0 - Subscriber+ Store-Wide Wallet Transaction Disclosure via Export

The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability check, and relies on a token any authenticated user can obtain from a front-end page, before generating a report containing every customer's wallet transaction history, allowing any authenticated user,...