Lucene search
+L

65204 matches found

CVE
CVE
added 2026/08/21 11:29 a.m.3 views

CVE-2026-77759 IDOR and missing authorization in the Prospero Flow CRM transaction API allow cross-tenant reading of financial records

Authorization Bypass Through User-Controlled Key in the transaction API in Roskus Prospero Flow CRM 5.0.0 through 5.3.5 allows an authenticated user to read the transactions of other companies on the same instance via an incremented identifier in GET /api/transaction/id, which is resolved without...

8.7CVSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/21 6:00 a.m.7 views

EUVD-2026-63818

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not correctly check user capabilities on some of its admin REST API routes, checking only for a WooCommerce management capability instead of the Dokan: AI Powered WooCommerce Multivendor...

5.6AI score
SaveExploits0References1
CVE
CVE
added 2026/08/21 6:00 a.m.13 views

CVE-2026-16962

The Tamara Checkout WordPress plugin (≤1.9.9.20) exposes public payment cancel/fail return URLs that change WooCommerce order status using only an attacker-supplied numeric order ID, with no verification of order key, nonce, or capability. An unauthenticated attacker can enumerate IDs to cancel o...

5.5AI score
SaveExploits0References1
CVE
CVE
added 2026/08/21 2:43 a.m.17 views

CVE-2026-73267

In Red Hat's multicluster engine, the clusterclaims-controller deletes ManagedClusters based solely on clusterclaim.spec.namespace without verifying ownership. Any tenant with standard ClusterClaim permissions can delete any cluster, including the hub's local-cluster, causing a HIGH-severity (7.7...

7.7CVSS5.5AI score
SaveExploits0References2
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.20 views

WP Hotel Booking <= 2.3.2 - Cross-Site Scripting

The WP Hotel Booking plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'checkindate' parameter in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...

6.1CVSS5.6AI score0.00511EPSS
SaveExploits0References4
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.77 views

NocoBase - SQL Injection

NocoBase @nocobase/plugin-collection-sql versions prior to 2.0.39 are vulnerable to SQL injection via the sqlCollection:update endpoint. The checkSQL function, which blocks dangerous SQL keywords and ensures only SELECT statements are allowed, is not called during collection updates. id:...

7.2CVSS5.7AI score0.01833EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.86 views

HashiCorp Consul/Consul Enterprise - Server-Side Request Forgery

HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11 are susceptible to server-side request forgery. When redirects are returned by HTTP health check endpoints, Consul follows these HTTP redirects by default. An attacker can possibly obtain sensitive information, modify data,...

7.5CVSS6.9AI score0.08676EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.99 views

Powertek Firmware <3.30.30 - Authorization Bypass

Powertek firmware multiple brands before 3.30.30 running Power Distribution Units are vulnerable to authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface /cgi/getparam.cgi with the tmpToken cookie set to an...

9.8CVSS7.5AI score0.14285EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.16 views

User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Attachment Deletion

The WP User Frontend plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check in the FrontendFormAjax::submitpost function. This makes it possible for unauthenticated attackers to delete attachment records through the plugin's AJAX handling when a public...

5.3CVSS5.3AI score0.00616EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.135 views

reNgine 2.2.0 - Command Injection

reNgine before 2.1.2 allows OS Command Injection if an adversary has a valid session ID. The attack places shell metacharacters in an api/tools/wafdetector/?url= string. The commands are executed as root via subprocess.checkoutput. id: CVE-2023-50094 info: name: reNgine 2.2.0 - Command Injection...

8.8CVSS8.2AI score0.1354EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.27 views

Check Point IKEv1 Remote-Access VPN - Certificate Authentication Bypass

IKEv1 key exchange contains a broken authentication caused by logic flow weakness in Remote Access and Mobile Access certificate validation, letting unauthenticated remote attackers bypass user authentication and establish VPN connections without valid passwords, exploit requires use of deprecate...

9.3CVSS8.9AI score0.82554EPSS
SaveExploits6References3
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.79 views

Zitadel - User Registration Bypass

The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Due to a missing security check in versions prior to 2.64.0, 2.63.5, 2.62.7, 2.61.4, 2.60.4, 2.59.5, and 2.58.7, disabling the "User Registration allowed" option only hid the...

7.5CVSS7.5AI score0.02518EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.1466 views

Microsoft FrontPage Extensions - Information Disclosure

Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /vtibin/ virtual directory. id: CVE-2000-0114 info: name: Microsoft FrontPage Extensions - Information Disclosure author: r3naissance,matejsmycka severity...

5CVSS5.3AI score0.47595EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.34 views

Web-Check < 2.0.1 Screenshot API - OS Command Injection

Lissy93/web-check contains a command injection caused by unsanitized user input in the screenshot API, letting attackers execute arbitrary system commands, exploit requires sending crafted url parameters. id: CVE-2025-32778 info: name: Web-Check 2.0.1 Screenshot API - OS Command Injection author:...

9.3CVSS5.6AI score0.19326EPSS
SaveExploits4References4
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.7 views

Concrete CMS <9.5.1 - Unauthenticated File Usage Disclosure

Concrete CMS 9.5.0 and below is vulnerable to unauthenticated file usage disclosure via missing permission check in the usage controller. id: CVE-2026-6826 info: name: Concrete CMS 9.5.1 - Unauthenticated File Usage Disclosure author: str4k3r severity: medium description: | Concrete CMS 9.5.0 and...

6.9CVSS5.2AI score0.00562EPSS
SaveExploits1
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.42 views

Adminer 4.6.2 - 5.4.1 Unauthenticated Persistent DoS

Adminer = 5.4.1 contains a denial of service caused by lack of origin validation in version check endpoint, letting attackers trigger server errors via crafted POST requests, exploit requires no special privileges. id: CVE-2026-25892 info: name: Adminer 4.6.2 - 5.4.1 Unauthenticated Persistent Do...

7.5CVSS5.2AI score0.01586EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.31 views

Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit - Broken Access Control

The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the installoractivateaddonplugins function and a weak nonce hash in all...

9.8CVSS5.6AI score0.03021EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/21 12:39 a.m.6 views

EUVD-2026-63777

This issue was addressed with improved permissions checking. This issue is fixed in watchOS 26.4. An attacker with physical access to a locked Apple Watch may be able to view user contacts...

5.1AI score
SaveExploits0References1
EUVD
EUVD
added 2026/08/20 9:29 p.m.3 views

EUVD-2026-63668

Mailpit is an email testing tool and API for developers. From 1.29.0 until 1.30.6, Mailpit's server/server.go origin middleware checks the raw RequestURI for the /api/ prefix while Go's ServeMux routes using the percent-decoded URL path, and server/websockets/client.go configures...

6.5CVSS5.4AI score
SaveExploits0References3
NVD
NVD
added 2026/08/20 7:16 p.m.7 views

CVE-2026-54624

django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0.8, renderobjectstructure in cms/views.py renders cms/toolbar/structure.html for a PageContent object without calling usercanviewpage. Any staff account can request a restricted...

6.5CVSS
SaveExploits0References4
Rows per page
Query Builder