276754 matches found
phpsploit
Framework C2 completo che persiste silenziosamente sul webserver tramite una riga di PHP polimorfica Manutenibilità codeclimate Creato da nil0x42 e contributori !https://assets.kitploit.com/production/public/readmes/320/aca304368ddb3...
EUVD-2026-96294
ZTE Z80 Ultra has an unauthorized information disclosure vulnerability. The access control for methods within the framework is insufficient. An attacker can exploit this method to read device-related information...
CVE-2026-108504 Unauthorized information retrieval vulnerability in ZTE Z80 Ultra product
ZTE Z80 Ultra has an unauthorized information disclosure vulnerability. The access control for methods within the framework is insufficient. An attacker can exploit this method to read device-related information...
CVE-2026-108504
The ZTE Z80 Ultra product contains an unauthorized information disclosure vulnerability due to insufficient access control for methods within the framework. An attacker can exploit this flaw to read device-related information . No specific remediation steps or exploit details are provided in the ...
CVE-2026-108504 Unauthorized information retrieval vulnerability in ZTE Z80 Ultra product
ZTE Z80 Ultra has an unauthorized information disclosure vulnerability. The access control for methods within the framework is insufficient. An attacker can exploit this method to read device-related information...
CVE-2026-93950
The StylemixThemes Motors WordPress theme (versions up to and including 1.4.108 ) is susceptible to a Broken Access Control vulnerability. The issue arises from Missing Authorization , specifically allowing for the exploitation of Incorrectly Configured Access Control Security Levels . This vulne...
CVE-2026-93950 WordPress Motors theme <= 1.4.108 - Broken Access Control vulnerability
Missing Authorization vulnerability in StylemixThemes Motors motors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors: from n/a through 1.4.108...
CVE-2026-93950 WordPress Motors theme <= 1.4.108 - Broken Access Control vulnerability
Missing Authorization vulnerability in StylemixThemes Motors motors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors: from n/a through 1.4.108...
CVE-2026-108503 Unauthorized information acquisition vulnerability in ZTE Z80 Ultra product
ZTE Z80 Ultra has an interface permission validation vulnerability. The callable functions provided by the system lack sufficient access control. An attacker can leverage these functions to read relevant information...
CVE-2026-108503 Unauthorized information acquisition vulnerability in ZTE Z80 Ultra product
ZTE Z80 Ultra has an interface permission validation vulnerability. The callable functions provided by the system lack sufficient access control. An attacker can leverage these functions to read relevant information...
SUSE CVE-2026-78663
The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...
PT-2026-109838
Unauthenticated Broken Access Control in Barcode Scanner with Inventory & Order Manager = 1.13.1 versions...
PT-2026-109757
Name of the Vulnerable Software and Affected Versions Wordable versions prior to 8.2.11 Description Broken access control exists for subscribers, allowing unauthorized access or actions. Recommendations Update to version 8.2.11 or later...
GFI Kerio Control 9.4.5 Unsigned Firmware Update Remote Code Execution
GFI Kerio Control version 9.4.5 accepts unsigned firmware images, allowing an authenticated attacker to execute arbitrary code as root. This proof of concept creates and uploads a modified upgrade image. https://packetstorm.news/download/235083...
PT-2026-109846
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Product Add-Ons allows Retrieve Embedded Sensitive Data. This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.34.0...
PT-2026-109702
Missing Authorization vulnerability in Web Impian Bayarcash WooCommerce bayarcash-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bayarcash WooCommerce: from n/a through 4.4.2...
PT-2026-109698
Missing Authorization vulnerability in VillaTheme GIFT4U gift4u-gift-cards-all-in-one-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GIFT4U: from n/a through 1.1.3...
PT-2026-109773
Unauthenticated Broken Access Control in Grand News = 3.4 versions...
PT-2026-109744
Missing Authorization vulnerability in VillaTheme ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce woo-alidropship allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce: from n/...