190 matches found
CVE-2026-103752-Authorizer-Privilege-Escalation
This repository does not have a README...
CVE-2026-81294
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-81294 Write-up: https://abraxaslabs.tech/research/CVE-2026-81294 CVE-2026-81294 Authorizer 3.15.1 - Paul Ryan I am @abraxasnull. Loopback lab. The client is CVE-2026-81294-Abraxas-Labs.py. Unverified email is...
FreeBSD : sqlite3 -- multiple vulnerabilities (84cd82e1-d49f-11f1-bae2-3497f65b111b)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 84cd82e1-d49f-11f1-bae2-3497f65b111b advisory. VulnCheck reports: Ten vulnerabilities fixed in SQLite 3.54.0 were published on 2026-10-30. Fo...
CVE-2026-118952
A flaw was found in the Kroxylicious ACL authorizer. Its prefix-matching logic may apply a rule to a principal of a different type, or fail to check a broader matching rule when prefixes overlap. Depending on the ACL configuration, this may allow an authenticated Kafka client to access a resource...
CVE-2026-118952
A flaw was found in the Kroxylicious ACL authorizer. Its prefix-matching logic may apply a rule to a principal of a different type, or fail to check a broader matching rule when prefixes overlap. Depending on the ACL configuration, this may allow an authenticated Kafka client to access a resource...
CVE-2026-118952 Kroxylicious-authorizer-acl: kroxylicious: acl prefix matching can bypass authorization rules
A flaw was found in the Kroxylicious ACL authorizer. Its prefix-matching logic may apply a rule to a principal of a different type, or fail to check a broader matching rule when prefixes overlap. Depending on the ACL configuration, this may allow an authenticated Kafka client to access a resource...
CVE-2026-118952
A flaw in the Kroxylicious ACL authorizer prefix-matching logic may cause it to apply rules to principals of different types or skip broader matching rules when prefixes overlap. This vulnerability could allow an authenticated Kafka client to access unauthorized resources, such as reading a restr...
EUVD-2026-113733
A flaw was found in the Kroxylicious ACL authorizer. Its prefix-matching logic may apply a rule to a principal of a different type, or fail to check a broader matching rule when prefixes overlap. Depending on the ACL configuration, this may allow an authenticated Kafka client to access a resource...
CVE-2026-118952
A flaw was found in the Kroxylicious ACL authorizer. Its prefix-matching logic may apply a rule to a principal of a different type, or fail to check a broader matching rule when prefixes overlap. Depending on the ACL configuration, this may allow an authenticated Kafka client to access a resource...
PT-2026-133294
A flaw was found in the Kroxylicious ACL authorizer. Its prefix-matching logic may apply a rule to a principal of a different type, or fail to check a broader matching rule when prefixes overlap. Depending on the ACL configuration, this may allow an authenticated Kafka client to access a resource...
CVE-2026-118952: Red Hat: A flaw was found in the Kroxylicious ACL authorizer
A flaw was found in the Kroxylicious ACL authorizer. Its prefix-matching logic may apply a rule to a principal of a different type, or fail to check a broader matching rule when prefixes overlap. Depending on the ACL configuration, this may allow an authenticated Kafka client to access a resource...
sqlite3 -- multiple vulnerabilities
VulnCheck reports: Ten vulnerabilities fixed in SQLite 3.54.0 were published on 2026-10-30. Four of them corrupt the heap: buffer overflows in the FTS5 functions fts5MergeRowidLists and fts5DoSecureDelete and in the session extension sessionUpdateFind, and a use-after-free in the R-Tree function...
Exploit for CVE-2026-103752
CVE-2026-103752: Unauthenticated Privilege Escalation in WordP...
WordPress Authorizer 3.15.3 Privilege Escalation Scanner
WordPress Authorizer versions through 3.15.3 contain an unauthenticated privilege escalation vulnerability. The supplied Python tool passively detects installed versions and optionally inspects Azure OAuth2 configuration...
CVE-2026-103752
Unauthenticated Privilege Escalation in Authorizer = 3.15.3 versions...
CVE-2026-103752
The WordPress Authorizer plugin versions
EUVD-2026-90851
Unauthenticated Privilege Escalation in Authorizer = 3.15.3 versions...
CVE-2026-103752 WordPress Authorizer plugin <= 3.15.3 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Authorizer = 3.15.3 versions...
