CVE-2026-5465

CVE-2026-5465: تصعيد الامتيازات في إضافة Amelia لـ WordPress ⚠️ الملخص التنفيذي ثغرة حرجة من نوع المرجع المباشر غير الآمن للكائنات IDOR في إضافة Amelia تسمح لمستخدم مُصادق بدور موظف Provider بتصعيد الامتيازات حتى السيطرة الكاملة Account Takeover على موقع WordPress، بما في ذلك الوصول الإداري. 📋...

EUVD-2026-70303

Cheshire Cat AI's GET /memory/collections/collectionid/points endpoint fails to apply per-user filtering when retrieving episodic memory points. Authenticated attackers with MEMORY:READ permission can retrieve all users' stored conversation messages and personal data by paginating through the...

CVE-2026-85093

Cheshire Cat AI (an open-source AI agent framework) contains an information disclosure vulnerability in its GET /memory/collections/{collection_id}/points endpoint. The root cause is a missing per-user filter when retrieving episodic memory points, allowing any authenticated user with MEMORY:READ...

CVE-2026-26012

CVE-2026-26012 — Vaultwarden Cipher Enumeration PoC Full Cipher Enumeration Ignoring Organization Collection Permissions A proof-of-concept exploit for CVE-2026-26012, a broken access control vulnerability in Vaultwarden = 1.35.2 that allows any organization member to retrieve and decrypt all...

Exploit-CVE-2023-22515

Exploit CVE-2023-22515 Un exploit de script bash simple para CVE-2023-22515. Información Las instancias de Confluence Data Center y Server tienen una vulnerabilidad de control de acceso roto CVE-2023-22515, que permite a los atacantes crear cuentas de administrador de Confluence no autorizadas y...

OpenChoreo: Cross-project command execution and wirelog view access via OpenChoreo openchoreo-api exec and wirelogs endpoints

Summary The OpenChoreo API server openchoreo-api authorized requests to its exec and wirelogs endpoints against the project supplied by the caller in the request, rather than against the project that actually owns the target component. The target component was resolved by name only, and the...

CVE-2026-1375

CVE-2026-1375: IDOR autenticado / Control de acceso roto en el plugin Tutor LMS Aviso: Este repositorio se crea solo con fines educativos y divulgación ética. La vulnerabilidad ha sido reportada de manera responsable al proveedor y ya ha sido parcheada. No utilice esta información para explotar...

CVE-2025-15260

CVE-2025-15260：插件 MyRewards – WooCommerce 忠诚度积分与奖励中的授权缺失/访问控制失效 免责声明： 本仓库仅用于教育目的及负责任的披露 。该漏洞已向厂商报告并获得修复。请勿利用此信息在未经授权的情况下攻击系统。 摘要 在 WooCommerce 的 MyRewards（WooRewards） 插件（版本 mSource-write$data; 业务影响 经济损失： 通过操纵“订单金额”积分倍数，攻击者可生成无限奖励积分，并将其兑换为高价值折扣券或免费商品，绕过电商支付网关。 权限提升： 普通客户（订阅者）可执行插件管理操作。 数据完整性受损：...

CVE-2025-24000-exploit

CVE-2025-24000 — Post SMTP 权限提升漏洞利用 概述 该脚本利用了 CVE-2025-24000 ，这是 Post SMTP WordPress 插件 （版本 ≤ 3.2.0）中的一个高危访问控制缺陷。它允许任何具有低权限账户（例如订阅者）的认证用户访问该插件的 REST API 邮件日志，窃取管理员密码重置链接，并接管管理员账户。 CVE: CVE-2025-24000 Plugin: Post SMTP WPExperts 受影响版本： ≤ 3.2.0 修复版本： 3.3.0 CVSS 评分： 8.8（高危） 影响： 权限提升 → 完全接管管理员账户 工作原理...

CVE-2026-26417

CVE-2026-26417 Control de Acceso Roto en la Funcionalidad de Restablecimiento de Contraseña Resumen de la Vulnerabilidad Se identificó una vulnerabilidad de control de acceso roto en Tata Consultancy Services TCS – Cognix Recon Client v3.0. El problema permitía a usuarios autenticados restablecer...

CVE-2026-6201-IDOR

Control de Acceso Roto en CodeAstro Online Job Portal Permite la Eliminación Arbitraria de Empleos Detalles Vendedor: CodeAstro Producto: Proyecto de Portal de Empleo en Línea en PHP MySQL Versión: 1.0 Tipo de Vulnerabilidad: Control de Acceso Roto IDOR CWE: CWE-639 Archivo Afectado:...

CVE-2026-27344

Control de acceso roto en Inseri Core plugin de WordPress Plugin: Inseri Core Componente afectado: /includes/restapi.php Tipo de vulnerabilidad: Control de acceso roto Falta de autorización Estado: Reportada en agosto de 2026– cerrada como Duplicada. Resumen Mientras realizaba pruebas este verano...

cve-2026-32699-facturascripts-nick-bypass

CVE-2026-32699 - Control de Acceso Roto en el Parámetro Nick de EditUser en FacturaScripts Descripción Resumen La aplicación no valida el parámetro nick durante una solicitud POST al controlador EditUser. Aunque la interfaz de usuario impide editar este campo, un usuario puede omitir esta...

CVE-2026-53635

Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 59bb6d6, the view function setcoursemodeprice at lms/djangoapps/instructor/views/instructordashboard.py:430 is decorated only with @loginrequired and performs no course-level permission check. An...

CVE-2026-77124

In Nexus Repository 3 , the script execution endpoint (POST /service/rest/v1/script/{name}/run) failed to check whether script execution had been administratively disabled via nexus.scripts.allowCreation=false. As a result, an account holding script-execution permission could still execute previo...

CVE-2026-53635

Open edX Platform is affected by an insufficient permission check in the set_course_mode_price() view at lms/djangoapps/instructor/views/instructor_dashboard.py:430. The endpoint is protected only by @login_required and performs no course-level authorization, meaning any authenticated user —inclu...

CVE-2026-40776

CVE-2026-40776 التحكم في الوصول المعطوب في Eventin wp-event-solution كشف للبيانات الشخصية القابلة للتعريف PII وتزوير للطلبات دون مصادقة في البرنامج المساعد Eventin لووردبريس أكثر من 10,000 تثبيت نشط. نقطة نهاية REST عامة تمنح أي زائر wprest nonce، وتقبل ثلاثة استدعاءات لاحقة لأذونات التحقق هذا ال...

CVE-2026-45730

Nuclio is a serverless framework for real-time events and data processing. The vulnerability exists in the Nuclio Dashboard's project management API on write paths (PUT /api/projects/{id}, DELETE /api/projects). The root cause is that these endpoints construct PermissionOptions without setting Me...

CVE-2026-45730 Nuclio: Missing authorization on project write paths allows any authenticated user to modify or delete any project

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.0, there is a vulnerability in Nuclio Dashboard's project management API, allowing any authenticated user without membership in the target project to bypass OPA authorization checks on write paths P...

EUVD-2026-70123

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the build CLI command does not check the Item/Cancel permission when using the -s flag to cancel a build triggered to wait for completion, allowing attackers with Item/Build permission to cancel builds started by other users...