13196 matches found
CVE-2025-69459
CVE-2025-69459 – Sistema de Calificación de Películas 1.0 Control de Acceso Roto Creación de Cuenta de Administrador No Autenticado WriteUp CVE-2025-69459 – ExploitDB 50621...
CVE-2023-22515
CVE-2023-22515: Informe de análisis de vulnerabilidad de escalada de privilegios en Confluence Data Center & Server 1. Resumen Overview CVE-2023-22515 es una vulnerabilidad crítica de Control de Acceso Roto Broken Access Control encontrada en los productos Atlassian Confluence Data Center y...
cve-2023-22515-1
🛡️ CVE-2023-22515: Confluence 权限提升漏洞深度分析 !IMPORTANT 紧急安全警告 : 此漏洞的CVSS评分为10.0 Critical ，属于最高风险漏洞。如果您正在使用受影响版本，请立即进行补丁更新。 1. 概述 Overview CVE-2023-22515 是 Atlassian Confluence Data Center 和 Server 中发现的一个严重的破损访问控制 漏洞。攻击者可以在无需认证的情况下远程操纵服务器的配置状态，创建管理员账户，并完全控制系统。 项目| 详细信息 ---|--- 漏洞ID| CVE-2023-22515...
CVE-2022-1329
WP Elementor 3.6.0/1/2 远程代码执行 root@kitploit: Google Dork: 无 日期: 2022年4月16日 漏洞作者: AkuCyberSec https://github.com/AkuCyberSec 厂商主页: https://elementor.com/ 软件链接: https://wordpress.org/plugins/elementor/advanced/ 向下滚动以选择版本 版本: 3.6.0, 3.6.1, 3.62 测试环境: WordPress 5.9.3 操作系统无关，因为此漏洞不提供载荷 CVE:...
wordpress-jetpack-broken-access-control-vulnerable-application
wordpress-jetpack-broken-access-control-vulnerable-application Esta es una aplicación vulnerable para probar el exploit del control de acceso roto Jetpack 13.9.1 CVE-2024-9926. ¡ADVERTENCIA! Esta aplicación contiene vulnerabilidades de seguridad graves. ¡Ejecútela bajo su propio riesgo! Se...
wordpress-jetpack-broken-access-control-exploit
wordpress-jetpack-broken-access-control-exploit Este es un programa en Python3 que explota la vulnerabilidad de control de acceso roto en Jetpack 13.9.1 CVE-2024-9926. DESCARGO DE RESPONSABILIDAD Esta herramienta está pensada para ingenieros de seguridad y personal de AppSec para evaluaciones de...
EUVD-2026-66377
A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on the same Grafana instance, and can recover a snapshot's secret delete key using only its public share key broken access control...
EUVD-2026-66224
Kimai before 2.56.0 does not enforce team-membership checks in TimesheetVoter::voteOnAttribute, which maps permissions only to owntimesheet or othertimesheet. As a result, any authenticated user with ROLETEAMLEAD or a role holding editothertimesheet/deleteothertimesheet can read, modify, and...
CVE-2026-81762
Subscriber Broken Access Control in Booking and Rental Manager = 2.7.6 versions...
CVE-2026-81758
Subscriber Broken Access Control in OwnerRez API = 1.2.6 versions...
CVE-2026-81296
Unauthenticated Broken Access Control in Fluent Forms Pro Add On Pack = 6.2.12 versions...
CVE-2026-50199
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.1, endpoints/currency/updateexchange.php loads the first Fixer/API Layer credential globally instead of loading the credential for the authenticated user. As a result, a normal authenticated user without...
EUVD-2026-68786
Subscriber Broken Access Control in Booking and Rental Manager = 2.7.6 versions...
CVE-2026-81762 WordPress Booking and Rental Manager plugin <= 2.7.6 - Broken Access Control vulnerability
Subscriber Broken Access Control in Booking and Rental Manager = 2.7.6 versions...
CVE-2026-81762
CVE-2026-81762 is a Broken Access Control vulnerability in the Booking and Rental Manager WordPress plugin (for WooCommerce), affecting versions 2.7.6 and earlier . The flaw allows users with the Subscriber role to perform actions they should not be permitted to, resulting in a High integrity imp...
EUVD-2026-68785
Subscriber Broken Access Control in OwnerRez API = 1.2.6 versions...
CVE-2026-81758 WordPress OwnerRez API plugin <= 1.2.6 - Broken Access Control vulnerability
Subscriber Broken Access Control in OwnerRez API = 1.2.6 versions...
CVE-2026-81758
CVE-2026-81758 is a Broken Access Control vulnerability in the WordPress plugin OwnerRez API , affecting versions ≤ 1.2.6 . The flaw allows users with the Subscriber role to perform actions they should not be authorized for, as discovered by JunHee CHO via PatchStack. The CNA-assigned CVSS 3.1 sc...