CVE-2026-84147

This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by uploading arbitrary files to a web accessible directory on the targeted system...

CVE-2026-58575

Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability. An authenticated attacker could potentially exploit this vulnerability to escalate privileges to Administrator...

Important: Red Hat Security Advisory: iscsi-initiator-utils security update

An update for iscsi-initiator-utils is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket

A flaw was found in open-iscsi. An incorrect authorization vulnerability allows unprivileged local users to bypass authentication for the iscsiuio control socket. This enables unauthorized access to the control socket, potentially leading to system compromise or disruption of iSCSI Internet Small...

CVE-2026-58575

Dell PowerStore is affected by an Authentication Bypass by Spoofing vulnerability that allows an authenticated attacker to escalate privileges to Administrator . The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating network-exploitable conditions with l...

EUVD-2026-69060

Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability. An authenticated attacker could potentially exploit this vulnerability to escalate privileges to Administrator...

CVE-2026-58575

Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability. An authenticated attacker could potentially exploit this vulnerability to escalate privileges to Administrator...

EUVD-2026-69057

This vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating parameter which could lead to exposure of sensitive information belonging to other users o...

EUVD-2026-69094

This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by uploading arbitrary files to a web accessible directory on the targeted system...

CVE-2020-14882-WebLogic-Analysis

취약점 연구: Oracle WebLogic Server의 CVE-2020-14882 및 CVE-2020-14883 체인 익스플로잇 이 저장소는 Oracle WebLogic Server 관리 콘솔 구성 요소에서 인증 우회Authentication Bypass 및 원격 코드 실행RCE 취약점 체인을 시연하기 위한 기술 보고서Write-up와 개념 증명Proof of Concept, PoC을 포함합니다. 🛑 경고 및 면책 조항: 본 자료는 교육 목적과 합법적인 보안 감사Pentest 수행을 위해서만 준비되었습니다. 소유자의 사전 서...

CVE-2026-84187

AVideo contains a missing authentication vulnerability in plugin/Live/onpublish.php that allows unauthenticated attackers to mark arbitrary scheduled broadcasts as failed by sending crafted POST requests with schedule identifiers. Attackers can exploit the unguarded RTMP callback endpoint to modi...

CVE-2026-77194

The Simple Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in versions up to, and including, 4.8.0. This is due to improper identity verification during the public registration flow in WordPress Multisite environments, where the...

RLSA-2026:61378 Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Resource exhaustion due to oversized chunked HTTP...

wp2shell-poc

wp2shell PoC WordPress REST API 배치 라우트 혼동 체인CVE-2026-63030 + CVE-2026-60137을 악용한 사전 인증pre-auth 타이밍 기반 SQL 인젝션 PoC 중 최초의 PoC입니다. 단순히 관리자 비밀번호를 크랙하려는 시도 없이 명령 실행을 달성했습니다. 영향을 받는 버전: WordPress 6.9.0–6.9.4 및 7.0.0–7.0.1. 6.9.5 및 7.0.2에서 수정되었습니다. root@kitploit: python3 poc.py https://target.example...

CVE-2026-84187 AVideo on_publish.php Missing Authentication Check via RTMP Callback

AVideo contains a missing authentication vulnerability in plugin/Live/onpublish.php that allows unauthenticated attackers to mark arbitrary scheduled broadcasts as failed by sending crafted POST requests with schedule identifiers. Attackers can exploit the unguarded RTMP callback endpoint to modi...

EUVD-2026-69024

AVideo contains a missing authentication vulnerability in plugin/Live/onpublish.php that allows unauthenticated attackers to mark arbitrary scheduled broadcasts as failed by sending crafted POST requests with schedule identifiers. Attackers can exploit the unguarded RTMP callback endpoint to modi...

CVE-2026-84187

AVideo contains a missing authentication vulnerability in the plugin/Live/on_publish.php RTMP callback endpoint. Unauthenticated attackers can send crafted POST requests with fabricated stream keys matching the pattern -ps- to mark arbitrary scheduled broadcasts as failed, effectively canceling l...

CVE-2026-84187 AVideo on_publish.php Missing Authentication Check via RTMP Callback

AVideo contains a missing authentication vulnerability in plugin/Live/onpublish.php that allows unauthenticated attackers to mark arbitrary scheduled broadcasts as failed by sending crafted POST requests with schedule identifiers. Attackers can exploit the unguarded RTMP callback endpoint to modi...

patch-CVE-2026-11553

패치: CVE-2026-11553 취약점 세부 정보 CVE : CVE-2026-11553 제품 : VMware vCenter 설명 : 인증 우회 심각도 : 치명적 패치 상태: 배포됨 필드| 값 ---|--- 패치 날짜| 2026-04-28 상태| 배포됨 배포 대상| 프로덕션 검증자| SecOps 팀 참고 자료 NVD CISA KEV...

CVE-2026-77194 Simple Membership <= 4.8.1 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Multisite Identity Binding

The Simple Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in versions up to, and including, 4.8.0. This is due to improper identity verification during the public registration flow in WordPress Multisite environments, where the...