CVE-2026-102583

A flaw exists in Moodle due to an incorrect capability check within the artificial intelligence (AI) editor placement's image generation web service. This vulnerability allows an authenticated user to bypass required permissions to invoke the feature, resulting in unauthorized access and usage of...

EUVD-2026-89722

A flaw was found in Moodle. An incorrect capability check in the artificial intelligence AI editor placement's image generation web service allows an authenticated user to invoke the feature without holding the required capability. This flaw permits unauthorized users to access and utilize the AI...

CVE-2026-102583 Moodle: incorrect capability check in ai generate image web service

A flaw was found in Moodle. An incorrect capability check in the artificial intelligence AI editor placement's image generation web service allows an authenticated user to invoke the feature without holding the required capability. This flaw permits unauthorized users to access and utilize the AI...

Microsoft-Windows-SMBGhost-Vulnerability-Checker---CVE-2020-0796---SMBv3-RCE

Сканер уязвимости SMBGhost в Microsoft Windows - CVE-2020-0796 - SMBv3-RCE Сканер предназначен только для проверки, уязвим ли сервер. Он не предназначен для исследований или разработки, отсюда и фиксированная полезная нагрузка. Он проверяет диалект SMB 3.1.1 и поддержку сжатия с помощью запроса...

CVE-2026-102583

A flaw was found in Moodle. An incorrect capability check in the artificial intelligence AI editor placement's image generation web service allows an authenticated user to invoke the feature without holding the required capability. This flaw permits unauthorized users to access and utilize the AI...

CVE-2026-102584

A flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recalculation of grade penalties without holding the required permissions. This issue allows unauthorized users to modify grade penalty records, potentially altering student assessme...

CVE-2026-102579

A flaw was found in Moodle. An incorrect capability check in the grade web service allows an authenticated student to access profile information of other students enrolled in the same course that they should not have permission to view. This issue leads to unauthorized information disclosure...

CVE-2026-90953

The Image Optimizer WordPress plugin before 1.7.7 does not enforce its intended capability check on several of its read REST routes, allowing any authenticated user to read attachment metadata and site-wide statistics that should be restricted to administrators...

CVE-2026-88797

The Vayu X WordPress theme before 1.0.6 does not perform any capability check on one of its AJAX actions and exposes the nonce guarding it to every logged-in user, allowing any authenticated user, such as a subscriber, to install and activate any hosted on the WordPress.org repository...

CVE-2026-90953

The Image Optimizer WordPress plugin by Elementor (versions before 1.7.7 ) contains a vulnerability where it fails to enforce intended capability checks on several read REST routes . This flaw allows any authenticated user to access attachment metadata and site-wide statistics that are normally r...

EUVD-2026-89614

The Vayu X WordPress theme before 1.0.6 does not perform any capability check on one of its AJAX actions and exposes the nonce guarding it to every logged-in user, allowing any authenticated user, such as a subscriber, to install and activate any hosted on the WordPress.org repository...

ehir-vuln-enterprise-login

Configuration locale du portail d'entreprise Ce projet contient une configuration localisée en conteneurs comprenant un portail frontend et une passerelle backend intégrée. Structure de l'espace de travail client/ : Contient les fichiers statiques du frontend index.html utilisant Bootstrap 5 et l...

FRAGNESIA-Charan-cve-2026-46300

Architecture Charantej : Staging de conteneurs durcis et laboratoire de télémétrie d'appels système Un cadre de confinement de conteneurs et de télémétrie de sécurité d'exécution de niveau entreprise, appliquant une défense en profondeur. Conçu du point de vue d'un architecte de cybersécurité...

LinusWare-Source-Code-Internal

Linusware 1.2 — Исходный код и архитектура движка Реконструировано, подвергнуто обратной разработке и задокументировано tekkenbugatti Целевая платформа: Linux x8664 / Luau / Roblox Runtime Engine Обзор Linusware 1.2 — это нативное расширение среды выполнения и исполнительный движок для Roblox /...

CVE-2024-5326-Poc

CVE-2024-5326 CVE-2024-5326 Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX = 4.1.2 - Missing Authorization to Arbitrary Options Update Description Le plugin Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX pour WordPress est vulnérable à une modification non autorisée de...

CVE-2024-7135

CVE-2024-7135 Плагин Tainacan для WordPress уязвим к несанкционированному доступу к данным из-за отсутствия проверки прав доступа в функции 'getfile' во всех версиях вплоть до 0.21.7 включительно. Функция также уязвима к обходу каталога directory traversal. Это позволяет аутентифицированным...

CVE-2026-18366

CVE-2026-18366 Events Manager 7.4.1 — Неаутентифицированное повышение привилегий до администратора 🔗 Будьте в курсе Актуальные zero-day уязвимости, эксплойты и исследования в области безопасности 📋 Обзор уязвимости Атрибут| Детали ---|--- CVE ID| CVE-2026-18366 Серьёзность| 🔴 КРИТИЧЕСКИЙ CVSS 9.8...

CVE-2023-4800

ID CVE: CVE-2023-4800 Type de vulnérabilité: Exposition de données sensibles Description: Le plugin DoLogin Security pour WordPress est vulnérable à un accès non autorisé aux données en raison d'une vérification de capacité manquante sur le widget du tableau de bord dans les versions jusqu'à 3.7...

CVE-2025-5394

🚨 CVE-2025-5394 - Téléchargement arbitraire de plugin non authentifié dans le thème Alone 📌 Produit concerné : Alone – Thème WordPress caritatif polyvalent à but non lucratif Versions : = 7.8.3 CVE : CVE-2025-5394 Score CVSS : 9.8 Critique 🔥 Résumé de la vulnérabilité : Le thème Alone pour...

CVE-2024-12172

CVE-2024-12172 WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses = 3.2.21 - Absence d'autorisation permettant à un utilisateur authentifié Abonné+ de mettre à jour arbitrairement les métadonnées d'un utilisateur Description Le plugin WP Courses LMS –...