Lucene search
+L

70 matches found

Kitploit
Kitploit
•added 2026/10/01 8:17 p.m.•15 views

YT-Spammer-Purge

YouTube Spammer Purge 这是什么? - 允许你通过多种方式过滤和搜索你频道(以及其他人的频道)上的垃圾评论,并一次性删除/举报它们(详见下方功能)。 如何下载: 点击右侧的 "Releases" 链接,然后在最新版本下,点击 'Assets' 下的 "YTSpammerPurge.exe" 进行下载。(你可能需要点击 "Assets" 才能查看该版本的下载文件) Linux 安装说明 MacOS 安装说明 (如果使用 exe 文件,则无需在 Windows 上安装。但请参见此页面了解如何设置所需的 API 密钥) 详细信息和文档 → 请访问 Wiki 点击此处...

6.1AI score
SaveExploits0References9
OSV
OSV
•added 2026/09/02 4:39 p.m.•11 views

DRUPAL-CONTRIB-2026-133

This module enables you to delete Webform submissions in bulk using a specified date range. The module doesn't sufficiently restrict access to the delete form. A separate PHP fatal error issue may prevent exploitation in practice on Drupal 10+...

5.9AI score
SaveExploits0References1
NVD
NVD
•added 2026/07/30 3:16 p.m.•30 views

CVE-2026-41187

Calico's apiserver wraps tier-scoped resources so that every operation runs through AuthorizeTierOperation, but the Delete override on NetworkPolicy, GlobalNetworkPolicy, and their staged variants is not invoked for DeleteCollection requests. A user holding the deletecollection verb or wildcard...

6.5CVSS0.00388EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/07/30 2:45 p.m.•14 views

CVE-2026-41187

Calico's apiserver wraps tier-scoped resources so that every operation runs through AuthorizeTierOperation, but the Delete override on NetworkPolicy, GlobalNetworkPolicy, and their staged variants is not invoked for DeleteCollection requests. A user holding the deletecollection verb or wildcard...

6.2CVSS5.9AI score0.00388EPSS
SaveExploits0References6Affected Software2
Cvelist
Cvelist
•added 2026/07/30 2:45 p.m.•48 views

CVE-2026-41187 Calico Tier Authorization Bypass via DeleteCollection

Calico's apiserver wraps tier-scoped resources so that every operation runs through AuthorizeTierOperation, but the Delete override on NetworkPolicy, GlobalNetworkPolicy, and their staged variants is not invoked for DeleteCollection requests. A user holding the deletecollection verb or wildcard...

6.2CVSS0.00388EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/07/30 2:45 p.m.•16 views

CVE-2026-41187 Calico Tier Authorization Bypass via DeleteCollection

Calico's apiserver wraps tier-scoped resources so that every operation runs through AuthorizeTierOperation, but the Delete override on NetworkPolicy, GlobalNetworkPolicy, and their staged variants is not invoked for DeleteCollection requests. A user holding the deletecollection verb or wildcard...

6.2CVSS5.8AI score0.00388EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•28 views

PT-2026-66490

Name of the Vulnerable Software and Affected Versions Calico affected versions not specified Description The apiserver fails to invoke the Delete override for DeleteCollection requests on NetworkPolicy, GlobalNetworkPolicy, and their staged variants. This occurs because these resources are wrappe...

6.5CVSS5.8AI score0.00388EPSS
SaveExploits0References9
CVE
CVE
•added 2026/07/28 5:39 a.m.•41 views

CVE-2026-15136

Technical details beyond what is provided in the initial document are not publicly available in the supplied materials. Monitor for updates to verification, remediation status, and affected versions.

4.3CVSS5.7AI score0.00192EPSS
SaveExploits0References6
CVE
CVE
•added 2026/07/16 9:13 p.m.•92 views

CVE-2026-44174

Kirby CMS (versions prior to 4.9.1 and 5.4.1) exposes REST API search and collection queries that did not validate model attributes, allowing authenticated users to invoke arbitrary model methods (e.g., password(), root(), loginPasswordless(), delete()) via collection endpoints. This can disclose...

8.7CVSS6.2AI score0.00487EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/07/10 1:26 p.m.•72 views

CVE-2026-22660 FlaskBB Logic Flaw Authorization Group Deletion via Bulk AJAX Endpoint

FlaskBB through 2.2.0, fixed in commit a5da9a5, contains a logic flaw vulnerability that allows authenticated administrators to delete all built-in authorization groups by exploiting a type mismatch in the bulk delete protection check. The bulk AJAX endpoint in the management views compares...

8.6CVSS0.00606EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/07/10 1:26 p.m.•21 views

CVE-2026-22660 FlaskBB Logic Flaw Authorization Group Deletion via Bulk AJAX Endpoint

FlaskBB through 2.2.0, fixed in commit a5da9a5, contains a logic flaw vulnerability that allows authenticated administrators to delete all built-in authorization groups by exploiting a type mismatch in the bulk delete protection check. The bulk AJAX endpoint in the management views compares...

8.6CVSS6AI score0.00606EPSS
SaveExploits0References3
GithubExploit
GithubExploit
•added 2026/07/10 1:27 a.m.•93 views

Exploit for Missing Authorization in Misp-Project Misp

CVE-2026-56423 — MISP deleteSelection Broken Access Control...

9.4CVSS6AI score0.00469EPSS
SaveExploits1
NVD
NVD
•added 2026/07/01 5:16 p.m.•20 views

CVE-2026-49087

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user can submit a specially crafted bulk deletion request that causes excessive resource consumption, which may render Kibana unavailable...

6.5CVSS0.00472EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/01 4:35 p.m.•52 views

CVE-2026-49087

The CVE-2026-49087 issue concerns Kibana: Allocation of Resources Without Limits or Throttling (CWE-770) leading to a denial of service (CAPEC-130). An authenticated user can submit a crafted bulk deletion request that inflates resource use and can render Kibana unavailable. Connected sources spe...

6.5CVSS5.8AI score0.00472EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/07/01 4:35 p.m.•16 views

CVE-2026-49087

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user can submit a specially crafted bulk deletion request that causes excessive resource consumption, which may render Kibana unavailable...

6.5CVSS5.8AI score0.00472EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/07/01 4:35 p.m.•12 views

CVE-2026-49087 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user can submit a specially crafted bulk deletion request that causes excessive resource consumption, which may render Kibana unavailable...

6.5CVSS5.8AI score0.00472EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/01 4:35 p.m.•25 views

EUVD-2026-41088

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user can submit a specially crafted bulk deletion request that causes excessive resource consumption, which may render Kibana unavailable...

6.5CVSS5.8AI score0.00472EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/01 4:35 p.m.•17 views

CVE-2026-49087 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user can submit a specially crafted bulk deletion request that causes excessive resource consumption, which may render Kibana unavailable...

6.5CVSS6AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2026/07/01 4:35 p.m.•55 views

CVE-2026-49087 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user can submit a specially crafted bulk deletion request that causes excessive resource consumption, which may render Kibana unavailable...

6.5CVSS0.00472EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/01 12:00 a.m.•1 views

CVE-2026-49087: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user can submit a specially crafted bulk deletion request that causes excessive resource consumption, which may render Kibana unavailable...

6.5CVSS6.7AI score0.00472EPSS
SaveExploits0References3
Rows per page
Query Builder