13937 matches found
PT-2026-90523
A deployment mode intended to expose only read access to a bundled packet-analysis component's interface denies a list of write-capable routes by pattern, but the pattern omits routes that modify tags attached to stored session records, and the proxy configuration otherwise permits the request...
PT-2026-90519
The application's role-authorization lookup defaults to granting access when a request handler's name is not present in its table of role requirements, rather than defaulting to deny. Any request handler that is not explicitly registered in this table is reachable by any authenticated user...
CVE-2025-24000-exploit
CVE-2025-24000 — Post SMTP Privilege Escalation Exploit Overview This script exploits CVE-2025-24000 , a high-severity broken access control vulnerability in the Post SMTP WordPress plugin versions ≤ 3.2.0. It allows any authenticated user with a low-privilege account e.g. Subscriber to access th...
CVE-2026-9225
IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an authenticated attacker to access sensitive files belonging to other users due to improper access control in the File/Read File component. When executing flows through the /api/v1/run/advanced/flowid endpoint, the application allows...
n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check
Impact A log streaming event destination may reference a generic HTTP credential, and the destination resolved and decrypted whichever credential it named without checking that the caller had access to it. A user holding a custom global role scoped to Log Streaming operations could therefore name...
WordPress Masteriyo - LMS plugin <= 3.4.0 - Broken Access Control vulnerability
WordPress Masteriyo - LMS plugin = 3.4.0 - Broken Access Control vulnerability discovered by MYUNGYONG LEE in WordPress Plugin Masteriyo - LMS versions = 3.4.0...
WordPress Booktics plugin <= 1.0.24 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Supakiad S. m3ez in WordPress Plugin Booktics versions = 1.0.24...
WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.21 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by sungbyeongchan in WordPress Plugin Flexible Quantity – Measurement Price Calculator for WooCommerce versions = 2.3.21...
WordPress Deposits and Partial Payments for WooCommerce plugin <= 3.1.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Arif Shaikh in WordPress Plugin Deposits and Partial Payments for WooCommerce versions = 3.1.0...
vRealizeLogInsightRCE
VMSA-2023-0001 POC para VMSA-2023-0001 que afecta a VMware vRealize Log Insight e incluye los siguientes CVEs: Vulnerabilidad de Directory Traversal en VMware vRealize Log Insight CVE-2022-31706 Vulnerabilidad de control de acceso roto en VMware vRealize Log Insight CVE-2022-31704 VMware vRealize...
CVE-2026-1375
CVE-2026-1375: Authenticated IDOR / Broken Access Control in Tutor LMS Plugin Disclaimer: This repository is created for educational purposes and ethical disclosure only. The vulnerability has been responsibly reported to the vendor and patched. Do not use this information to exploit systems...
CVE-2026-88959
Anchor CMS through 0.12.7 fails to enforce role-based access control in admin user-management endpoints, allowing any authenticated low-privilege user to create administrator accounts or modify existing ones. Attackers with editor or user roles can POST directly to admin/users/add or...
EUVD-2026-75572
Anchor CMS through 0.12.7 fails to enforce role-based access control in admin user-management endpoints, allowing any authenticated low-privilege user to create administrator accounts or modify existing ones. Attackers with editor or user roles can POST directly to admin/users/add or...
cve-2026-86060
CVE-2026-86060 — MikroTik RouterOS SSH Pre-Authentication Privilege Escalation to Full Administrative Control Field| Value ---|--- CVE| CVE-2026-86060 Product| MikroTik RouterOS SSH service Affected versions| RouterOS 6.x and 7.0.0 – 7.23.3 inclusive Fixed versions| RouterOS 7.23.4 and later...
CVE-2026-84821
Unauthenticated Broken Access Control in WP Fast Total Search = 1.82.284 versions...
CVE-2026-81799
Unauthenticated Broken Access Control in Return Refund and Exchange For WooCommerce = 4.6.4 versions...
CVE-2026-81794
Unauthenticated Broken Access Control in Shirt Product Designer for WooCommerce 1.0.4 versions...
CVE-2026-81793
Unauthenticated Broken Access Control in Salon booking system = 10.31.5 versions...