Nginx UI - Broken Access Control

Network attackers can fully control nginx service, including config modification and service restart, leading to complete service takeover. id: CVE-2026-33032 info: name: Nginx UI - Broken Access Control author: DhiyaneshDk severity: critical description: | Network attackers can fully control ngi...

ZimaOS - Authentication Bypass

ZimaOS = 1.5.0 contains a broken authentication caused by improper password validation for known system service accounts in the login function, letting attackers authenticate with any password for these accounts, exploit requires knowledge of common usernames. id: CVE-2026-21891 info: name: ZimaO...

DELMIA Apriso - Broken Access Control

DELMIA Apriso Release 2020 through Release 2025 contains a broken access control vulnerability caused by missing authorization, letting attackers gain privileged access to the application, exploit requires no special conditions. id: CVE-2025-6205 info: name: DELMIA Apriso - Broken Access Control...

UniFi Access - Broken Access Control

UniFi Access Application 3.3.22 through 3.4.31 contains a broken authentication caused by misconfiguration exposing management API without proper authentication, letting attackers on management network access management functions, exploit requires network access. id: CVE-2025-52665 info: name:...

LiteLLM - Arbitrary File Read

LiteLLM 1.83.0 contains a broken access control vulnerability caused by lack of admin role enforcement on /config/update endpoint, letting authenticated users modify configurations, execute code, read files, and take over accounts. id: CVE-2026-35029 info: name: LiteLLM - Arbitrary File Read...

WP Cerber < 8.9.3 - Broken Access Control

WP Cerber 8.9.3 contains a bypass of /wp-json access control caused by improper handling of trailing '?' character, letting unauthorized users access protected REST API endpoints, exploit requires sending a request with a trailing '?'. id: CVE-2021-37598 info: name: WP Cerber 8.9.3 - Broken Acces...

LearnPress < 4.3.2 - Broken Access Control

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the statistic function in all versions up to, and including, 4.3.1. This makes it possible for unauthenticated attackers to view the plugin's orders...

WordPress Broken Link Notifier < 1.3.1 - Unauthenticated SSRF

The Broken Link Notifier plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3.0 via the ajaxblinks function which ultimately calls the checkurlstatuscode function. This makes it possible for unauthenticated attackers to make web requests to...

Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit - Broken Access Control

The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the installoractivateaddonplugins function and a weak nonce hash in all...

WordPress FluentForms <= 5.1.16 - Broken Access Control

The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wp-json/fluentform/v1/global-settings REST API endpoint in all versions up to, and including,...

LottieFiles WordPress Plugin <= 3.0.0 - Missing Authorization

LottieFiles LottieFiles = 3.0.0 contains a broken access control vulnerability caused by incorrectly configured access control security levels, letting attackers exploit missing authorization, exploit requires no special privileges. id: CVE-2025-68043 info: name: LottieFiles WordPress Plugin =...

WooCommerce Wholesale Lead Capture <= 2.0.3.1 - Unauthenticated Privilege Escalation

Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture = 2.0.3.1 contains a broken access control vulnerability caused by incorrect privilege assignment, letting attackers escalate their privileges, exploit requires no special conditions. id: CVE-2026-27542 info: name: WooCommerce Wholesale Le...

Contest Gallery - Broken Access Control

Contest Gallery from n/a through 23.1.2 contains an exposure of sensitive information to an unauthorized actor caused by insufficient access controls, letting attackers access sensitive data, exploit requires no specific conditions. id: CVE-2024-43283 info: name: Contest Gallery - Broken Access...

LeadConnector < 3.0.22 - Unauthenticated Arbitrary Data Write

LeadConnector WordPress plugin 3.0.22 contains a broken access control caused by missing authorization in a REST route, letting unauthenticated attackers overwrite existing data remotely, exploit requires no authentication. id: CVE-2026-1890 info: name: LeadConnector 3.0.22 - Unauthenticated...

LightRAG <= 1.5.3 - Credentialed CORS Wildcard

LightRAG = 1.5.4 contains a broken access control vulnerability caused by default CORSORIGINS= with allowcredentials=True in lightragserver.py, letting malicious websites perform authenticated API requests, exploit requires authenticated user. id: CVE-2026-61736 info: name: LightRAG = 1.5.3 -...

Keycloak < 24.0.5 - Broken Access Control

A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perform actions reserved for administrators, potentially leading to data breaches or system compromise. id: CVE-2024-3656 info...

CVE-2024-52475

CVE-2024-52475 WordPress Wawp 插件 = 3.0.17 存在认证绕过漏洞（账户接管） 免责声明！ 本文档中提供的有关 CVE-2024-52475 的信息仅供学习和教育目的使用。我们不鼓励也不授权将本信息用于任何有害目的，包括但不限于漏洞利用、系统篡改或其他非法活动。 我们强调在探索和理解安全漏洞时必须遵循道德规范。请记住，使用这些信息时应保持负责任的态度，并遵守适用法律。因使用此信息而采取的任何行动均由用户自行承担全部责任。 使用本材料即表示您同意不滥用所提供的信息，并对因使用此类信息而可能产生的任何后果承担全部责任。 简介 在浏览了与该 CVE...

lazyweb

LazyWeb - 脆弱なWebアプリケーション LazyWeb は、一般的なサーバーサイドアプリケーションの脆弱性を示すためのデモンストレーション用Webアプリケーションです。各脆弱性はそれぞれの難易度評価で分類されており、開発者やセキュリティ愛好家に包括的な学習体験を提供します。 主な機能 Webアプリケーションにおける現実世界の脆弱性を示します。 基本的なものから高度なセキュリティ上の欠陥までを網羅し、ユーザーが様々なレベルでスキルをテストできます。 セキュリティ専門家が脆弱性の性質とその緩和方法を理解するのに役立つことを目的としています。 含まれる脆弱性...

CVE-2024-8949-POC

在 Sourcecodester 在线眼镜商城网站中发现越权访问漏洞：ID、购物车 ID 操纵导致用户的购物车被添加和删除非意愿的商品 CVE-2024-8949 厂商：Sourcecodester https://www.sourcecodester.com/php/16089/online-eyewear-shop-website-using-php-and-mysql-free-download.html 参考：https://github.com/gurudattch/ 产品：Online Eyewear Shop 版本：1.0 漏洞概述： Sourcecodester 开发的...

CVE-2022-1329

WP Elementor 3.6.0/1/2 远程代码执行 root@kitploit: Google Dork: 无 日期: 2022年4月16日 漏洞作者: AkuCyberSec https://github.com/AkuCyberSec 厂商主页: https://elementor.com/ 软件链接: https://wordpress.org/plugins/elementor/advanced/ 向下滚动以选择版本 版本: 3.6.0, 3.6.1, 3.62 测试环境: WordPress 5.9.3 操作系统无关，因为此漏洞不提供载荷 CVE:...