Lucene search
+L

65211 matches found

EUVD
EUVD
added 2026/08/21 12:30 p.m.6 views

EUVD-2026-63906

Authorization Bypass Through User-Controlled Key in the transaction API in Roskus Prospero Flow CRM 5.0.0 through 5.3.5 allows an authenticated user to read the transactions of other companies on the same instance via an incremented identifier in GET /api/transaction/id, which is resolved without...

8.7CVSS5.4AI score
SaveExploits0References4
CVE
CVE
added 2026/08/21 11:29 a.m.6 views

CVE-2026-77759

Roskus Prospero Flow CRM versions 5.0.0 through 5.3.5 contain an IDOR vulnerability in the transaction API. The endpoint GET /api/transaction/{id} resolves transaction identifiers without company scoping or any permission check, allowing an authenticated user to enumerate and read financial trans...

8.7CVSS5.2AI score
SaveExploits0References3
NVD
NVD
added 2026/08/21 7:16 a.m.5 views

CVE-2026-19435

The Duplicate Post WordPress plugin before 1.5.6 does not check the user's capabilities before returning post data, allowing users with a delegated role to read the content, metadata and passwords of posts they are not allowed to access, including other users' private and draft content...

2.7CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/21 6:00 a.m.10 views

CVE-2026-19435 Copy & Delete Posts < 1.5.6 - Authenticated Arbitrary Post Content and Password Disclosure

The Duplicate Post WordPress plugin before 1.5.6 does not check the user's capabilities before returning post data, allowing users with a delegated role to read the content, metadata and passwords of posts they are not allowed to access, including other users' private and draft content...

SaveExploits0References1
EUVD
EUVD
added 2026/08/21 6:00 a.m.7 views

EUVD-2026-63818

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not correctly check user capabilities on some of its admin REST API routes, checking only for a WooCommerce management capability instead of the Dokan: AI Powered WooCommerce Multivendor...

7.2CVSS5.6AI score
SaveExploits0References1
CVE
CVE
added 2026/08/21 6:00 a.m.14 views

CVE-2026-16962

The Tamara Checkout WordPress plugin through 1.9.9.20 does not verify the order key, a nonce, or any capability on its public payment cancel/fail return URLs, changing a WooCommerce order's status based solely on an attacker-supplied numeric order id, so an unauthenticated attacker can cancel or...

5.3CVSS5.5AI score
SaveExploits0References1
CVE
CVE
added 2026/08/21 2:43 a.m.18 views

CVE-2026-73267

In Red Hat's multicluster engine, the clusterclaims-controller deletes ManagedClusters based solely on clusterclaim.spec.namespace without verifying ownership. Any tenant with standard ClusterClaim permissions can delete any cluster, including the hub's local-cluster, causing a HIGH-severity (7.7...

7.7CVSS5.5AI score
SaveExploits0References2
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.20 views

WP Hotel Booking <= 2.3.2 - Cross-Site Scripting

The WP Hotel Booking plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'checkindate' parameter in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...

6.1CVSS5.6AI score0.00511EPSS
SaveExploits0References4
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.77 views

NocoBase - SQL Injection

NocoBase @nocobase/plugin-collection-sql versions prior to 2.0.39 are vulnerable to SQL injection via the sqlCollection:update endpoint. The checkSQL function, which blocks dangerous SQL keywords and ensures only SELECT statements are allowed, is not called during collection updates. id:...

7.2CVSS5.7AI score0.01833EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.86 views

HashiCorp Consul/Consul Enterprise - Server-Side Request Forgery

HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11 are susceptible to server-side request forgery. When redirects are returned by HTTP health check endpoints, Consul follows these HTTP redirects by default. An attacker can possibly obtain sensitive information, modify data,...

7.5CVSS6.9AI score0.08676EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.99 views

Powertek Firmware <3.30.30 - Authorization Bypass

Powertek firmware multiple brands before 3.30.30 running Power Distribution Units are vulnerable to authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface /cgi/getparam.cgi with the tmpToken cookie set to an...

9.8CVSS7.5AI score0.14285EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.16 views

User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Attachment Deletion

The WP User Frontend plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check in the FrontendFormAjax::submitpost function. This makes it possible for unauthenticated attackers to delete attachment records through the plugin's AJAX handling when a public...

5.3CVSS5.3AI score0.00616EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.135 views

reNgine 2.2.0 - Command Injection

reNgine before 2.1.2 allows OS Command Injection if an adversary has a valid session ID. The attack places shell metacharacters in an api/tools/wafdetector/?url= string. The commands are executed as root via subprocess.checkoutput. id: CVE-2023-50094 info: name: reNgine 2.2.0 - Command Injection...

8.8CVSS8.2AI score0.1354EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.79 views

Zitadel - User Registration Bypass

The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Due to a missing security check in versions prior to 2.64.0, 2.63.5, 2.62.7, 2.61.4, 2.60.4, 2.59.5, and 2.58.7, disabling the "User Registration allowed" option only hid the...

7.5CVSS7.5AI score0.02518EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.27 views

Check Point IKEv1 Remote-Access VPN - Certificate Authentication Bypass

IKEv1 key exchange contains a broken authentication caused by logic flow weakness in Remote Access and Mobile Access certificate validation, letting unauthenticated remote attackers bypass user authentication and establish VPN connections without valid passwords, exploit requires use of deprecate...

9.3CVSS8.9AI score0.82554EPSS
SaveExploits6References3
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.1466 views

Microsoft FrontPage Extensions - Information Disclosure

Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /vtibin/ virtual directory. id: CVE-2000-0114 info: name: Microsoft FrontPage Extensions - Information Disclosure author: r3naissance,matejsmycka severity...

5CVSS5.3AI score0.47595EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.34 views

Web-Check < 2.0.1 Screenshot API - OS Command Injection

Lissy93/web-check contains a command injection caused by unsanitized user input in the screenshot API, letting attackers execute arbitrary system commands, exploit requires sending crafted url parameters. id: CVE-2025-32778 info: name: Web-Check 2.0.1 Screenshot API - OS Command Injection author:...

9.3CVSS5.6AI score0.19326EPSS
SaveExploits4References4
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.7 views

Concrete CMS <9.5.1 - Unauthenticated File Usage Disclosure

Concrete CMS 9.5.0 and below is vulnerable to unauthenticated file usage disclosure via missing permission check in the usage controller. id: CVE-2026-6826 info: name: Concrete CMS 9.5.1 - Unauthenticated File Usage Disclosure author: str4k3r severity: medium description: | Concrete CMS 9.5.0 and...

6.9CVSS5.2AI score0.00562EPSS
SaveExploits1
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.31 views

Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit - Broken Access Control

The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the installoractivateaddonplugins function and a weak nonce hash in all...

9.8CVSS5.6AI score0.03021EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.43 views

Adminer 4.6.2 - 5.4.1 Unauthenticated Persistent DoS

Adminer = 5.4.1 contains a denial of service caused by lack of origin validation in version check endpoint, letting attackers trigger server errors via crafted POST requests, exploit requires no special privileges. id: CVE-2026-25892 info: name: Adminer 4.6.2 - 5.4.1 Unauthenticated Persistent Do...

7.5CVSS5.2AI score0.01586EPSS
SaveExploits1References2
Rows per page
Query Builder