CVE-2026-58575

Dell PowerStore is affected by an Authentication Bypass by Spoofing vulnerability that allows an authenticated attacker to escalate privileges to Administrator . The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating network-exploitable conditions with l...

EUVD-2026-69060

Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability. An authenticated attacker could potentially exploit this vulnerability to escalate privileges to Administrator...

CVE-2026-58575

Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability. An authenticated attacker could potentially exploit this vulnerability to escalate privileges to Administrator...

EUVD-2026-69057

This vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating parameter which could lead to exposure of sensitive information belonging to other users o...

EUVD-2026-69094

This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by uploading arbitrary files to a web accessible directory on the targeted system...

CVE-2020-14882-WebLogic-Analysis

Recherche de vulnérabilités : Exploitation de la chaîne CVE-2020-14882 et CVE-2020-14883 dans Oracle WebLogic Server Le dépôt contient un rapport technique Write-up et une preuve de concept PoC pour démontrer la chaîne de vulnérabilités de contournement d'authentification Authentication Bypass et...

CVE-2026-84187

AVideo contains a missing authentication vulnerability in plugin/Live/onpublish.php that allows unauthenticated attackers to mark arbitrary scheduled broadcasts as failed by sending crafted POST requests with schedule identifiers. Attackers can exploit the unguarded RTMP callback endpoint to modi...

CVE-2026-77194

The Simple Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in versions up to, and including, 4.8.0. This is due to improper identity verification during the public registration flow in WordPress Multisite environments, where the...

RLSA-2026:61378 Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Resource exhaustion due to oversized chunked HTTP...

wp2shell-poc

wp2shell PoC Первый в истории PoC эксплуатации SQL-инъекции на основе timing-атак до аутентификации для цепочки путаницы batch-маршрутов REST API WordPress CVE-2026-63030 + CVE-2026-60137 Достигнуто выполнение команд, а не просто попытка подбора пароля администратора. Затронутые версии: WordPress...

CVE-2026-84187 AVideo on_publish.php Missing Authentication Check via RTMP Callback

AVideo contains a missing authentication vulnerability in plugin/Live/onpublish.php that allows unauthenticated attackers to mark arbitrary scheduled broadcasts as failed by sending crafted POST requests with schedule identifiers. Attackers can exploit the unguarded RTMP callback endpoint to modi...

EUVD-2026-69024

AVideo contains a missing authentication vulnerability in plugin/Live/onpublish.php that allows unauthenticated attackers to mark arbitrary scheduled broadcasts as failed by sending crafted POST requests with schedule identifiers. Attackers can exploit the unguarded RTMP callback endpoint to modi...

CVE-2026-84187

AVideo contains a missing authentication vulnerability in the plugin/Live/on_publish.php RTMP callback endpoint. Unauthenticated attackers can send crafted POST requests with fabricated stream keys matching the pattern -ps- to mark arbitrary scheduled broadcasts as failed, effectively canceling l...

CVE-2026-84187 AVideo on_publish.php Missing Authentication Check via RTMP Callback

AVideo contains a missing authentication vulnerability in plugin/Live/onpublish.php that allows unauthenticated attackers to mark arbitrary scheduled broadcasts as failed by sending crafted POST requests with schedule identifiers. Attackers can exploit the unguarded RTMP callback endpoint to modi...

patch-CVE-2026-11553

Correctif : CVE-2026-11553 Détails de la vulnérabilité CVE : CVE-2026-11553 Produit : VMware vCenter Description : Contournement de l'authentification Gravité : Critique Statut du correctif : DÉPLOYÉ...

CVE-2026-77194 Simple Membership <= 4.8.1 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Multisite Identity Binding

The Simple Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in versions up to, and including, 4.8.0. This is due to improper identity verification during the public registration flow in WordPress Multisite environments, where the...

EUVD-2026-69022

The Simple Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in versions up to, and including, 4.8.0. This is due to improper identity verification during the public registration flow in WordPress Multisite environments, where the...

CVE-2026-77194

The Simple Membership WordPress plugin (versions up to 4.8.0 , with a partial fix in 4.8.1) is affected by an unauthenticated Authentication Bypass that can lead to Administrator Account Takeover in WordPress Multisite environments. The root cause is improper identity verification during the publ...

cve-2022-42475-poc

CVE-2022-42475 PoC Exécution de code à distance avant authentification sur SSL VPN Fortinet Description CVE-2022-42475 est une vulnérabilité de dépassement de tampon basé sur le tas heap-based buffer overflow dans le service SSL VPN de FortiOS qui permet à des attaquants non authentifiés d'exécut...

CVE-2024-21413-Microsoft-Outlook-Moniker-Link-Vulnerability

CVE-2024-21413 – Vulnérabilité Moniker Link de Microsoft Outlook Vue d'ensemble Ce dépôt documente mon analyse pratique de CVE-2024-21413 Moniker Link , une vulnérabilité critique de Microsoft Outlook qui contourne l'affichage protégé pour fuiter les identifiants Windows NetNTLMv2 via...