CVE-2025-29927-Nextjs-Analysis

Analisi di Next.js CVE-2025-29927 Questo repository contiene un ambiente di laboratorio Next.js self-hosted creato per analizzare CVE-2025-29927 in Docker. Panoramica CVE-2025-29927 è una vulnerabilità relativa ai controlli di autorizzazione implementati nel middleware di Next.js. Questo progetto...

EUVD-2026-67648

The All-in-One WP Migration Unlimited Extension plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ai1wmbackupspath' parameter in all versions up to, and including, 2.84. This is due to insufficient input sanitization and output escaping on user-supplied attributes combine...

WebSecProbe

.png WebSecProbe è un'utility di test di sicurezza progettata per ricercatori di sicurezza web, penetration tester e amministratori di sistema per analizzare le risposte HTTP 403 Forbidden e il comportamento dei controlli di accesso nelle applicazioni web. Lo strumento aiuta a identificare...

Apache OFBiz - Remote Code Execution

Apache OFBiz below 18.12.16 is vulnerable to unauthenticated remote code execution on Linux and Windows. An attacker with no valid credentials can exploit missing view authorization checks in the web application to execute arbitrary code on the server id: CVE-2024-45507 info: name: Apache OFBiz -...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ceph: fixed NULL pointer dereference in cephmdsauthmatch The CephFS kernel client has a regression starting from 6.18-rc1. We have a issue with cephmdsauthmatch if fsname is NULL: c const char fsname =...

EUVD-2026-54881

The PiWeb Cancel order / Refund request for WooCommerce WordPress plugin before 1.3.4.34 does not have authorization or ownership checks when adding the contents of a previous order to the cart, allowing unauthenticated users to disclose the contents of other customers' orders, as well as to clea...

CVE-2026-16589

The WP Directory Kit WordPress plugin before 1.5.5 does not sanitize and escape a parameter before using it in a SQL statement through one of its authenticated AJAX actions, which lacks authorization and nonce checks, allowing any authenticated user such as a Subscriber to perform SQL injection...

CVE-2026-16948

The CVE-2026-16948 entry documents a vulnerability in the Solace Extra WordPress plugin prior to version 1.6.1 where several AJAX actions lack proper capability checks and the admin nonce is exposed on pages reachable by low-privileged users. This permits users with a role as low as Subscriber to...

EUVD-2026-54740

The WP Directory Kit WordPress plugin before 1.5.5 does not perform authorization or nonce checks on one of its authenticated AJAX actions, allowing any authenticated user such as a Subscriber to disclose the WP Directory Kit WordPress plugin before 1.5.5 settings including sensitive API keys and...

CVE-2026-71242

Crater's NotePolicy checks only a blanket Bouncer ability manage-all-notes / view-all-notes with no company-ownership comparison, unlike InvoicePolicy and other sibling policies which additionally verify -hasCompany-companyid. Any authenticated user of one company can read, edit, or delete anothe...

CVE-2026-70473

Flowise (a UI for building LLM workflows) prior to version 3.1.3 exposed a server-wide upsert-history via GET /api/v1/upsert-history. The endpoint returned data scoped to none of the requester’s identity (user/tenant/workspace) and could exceed 100 MB, including sensitive configuration data such ...

CVE-2026-16546

The CVE-2026-16546 entry concerns the Wired Impact Volunteer Management WordPress plugin prior to 2.8.2. The issue is an authorization flaw in one AJAX action (wivm_remove_rsvp) that fails to verify that the RSVP being removed belongs to the requesting user. This permits users with a role as low ...

CVE-2026-15958

The CVE concerns the Easy Integration for Dropbox WordPress plugin prior to version 2.2.0. The issue is an authorization failure: several file-management AJAX actions are accessible to unauthenticated users, enabling them to list, download, and upload arbitrary files across the connected Dropbox ...

CVE-2026-68979 Apache NiFi: Missing Authorization for Components Referenced by Parameter Context Updates

Apache NiFI 1.10.0 through 2.10.0 provide a Parameter Context update REST API method that does not enforce authorization checking on components referencing Parameter values. Updating a Parameter Context can change parameter values that affect referencing components, but framework authorization wa...

PT-2026-67495

Name of the Vulnerable Software and Affected Versions Apache NiFi versions 1.10.0 through 2.10.0 Description A Parameter Context update REST API method fails to enforce authorization checks on components that reference parameter values. While framework authorization was limited to read and write...

CVE-2026-16105

A flaw was found in the RoleContainerResource component of Keycloak. The issue occurs because certain name-based endpoints in the admin REST API do not properly enforce authorization checks when managing composite roles. This allows a delegated administrator with manage-realm permissions to remov...

CVE-2026-14930

The JS Help Desk WordPress plugin before 3.1.4 does not perform any authorization, nonce, or ownership check on a front-end request dispatcher, allowing unauthenticated users to upload files limited to the JS Help Desk WordPress plugin before 3.1.4's inert allowed extensions and attach them to...

EUVD-2026-51481

A flaw was found in the RoleContainerResource component of Keycloak. The issue occurs because certain name-based endpoints in the admin REST API do not properly enforce authorization checks when managing composite roles. This allows a delegated administrator with manage-realm permissions to remov...

EUVD-2026-51421

The JS Help Desk WordPress plugin before 3.1.4 does not perform authorization or ownership checks before returning support-ticket content in a nonce-gated search handler, allowing any authenticated user Subscriber and above to read the subject and full message body of every other user's support...

CVE-2026-14930

The vulnerability CVE-2026-14930 affects the JS Help Desk WordPress plugin prior to 3.1.4. The issue is in a front-end request dispatcher that performs no authorization, nonce, or ownership checks, allowing unauthenticated users to upload files (constrained to the plugin’s inert allowed extension...