276776 matches found
PT-2026-126422
MrDoc through 1.1.1 contains a broken access control vulnerability in the manage doc share type 3 branch that allows authenticated users to modify other users' document share settings because updates lack an ownership check. Attackers can compute predictable share tokens from the MD5 of document ...
WEASEL
WEASEL: A Stealthy DNS Beacon WEASEL is a small in-memory implant using Python 3 with no dependencies. The beacon client sends a small amount of identifying information about its host to a DNS zone you control. WEASEL server can task clients to execute pre-baked or arbitrary commands. WEASEL is a...
EUVD-2026-110419
An access issue was addressed with improved access control. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. A malicious app may be able to access restricted system interfaces or launder launch attribution...
CVE-2026-86968
An access issue was addressed with improved access control. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. A malicious app may be able to access restricted system interfaces or launder launch attribution...
CVE-2026-86968
This vulnerability involves an access issue in Apple products, where a malicious app could potentially access restricted system interfaces or perform launch attribution laundering . The root cause is addressed through improved access control . This issue is fixed in iOS 27.2 , iPadOS 27.2 , macOS...
Malware in ctf-agent
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CVE-2026-70381
An access-control vulnerability has been identified in the web server configuration. Some resources intended for on-device use only could be accessed remotely by an unauthenticated attacker with network access to the web interface. The accessible resources do not expose credentials or provide...
Exploit for CVE-2026-38903
CVE-2026-38903 Alertus Desktop Alert: Unauthenticated Remo...
EUVD-2026-110302
An access-control vulnerability has been identified in the web server configuration. Some resources intended for on-device use only could be accessed remotely by an unauthenticated attacker with network access to the web interface. The accessible resources do not expose credentials or provide...
CVE-2026-70381 Unauthorized Access to Internal Web Resources
An access-control vulnerability has been identified in the web server configuration. Some resources intended for on-device use only could be accessed remotely by an unauthenticated attacker with network access to the web interface. The accessible resources do not expose credentials or provide...
CVE-2026-70381
An access-control vulnerability exists in a web server configuration , allowing an unauthenticated attacker with network access to the web interface to remotely access resources intended for on-device use only. While the accessible resources do not expose credentials or provide administrative fun...
Security Bulletin:Vulnerability in mariadb-java-client may affect IBM Infosphere Change Data Capture (CVE-2026-61700)
Summary A security vulnerability has been identified in mariadb-java-client, MariaDB Java Client. mariadb-java-client is used by IBM Infosphere Change Data Capture. IBM has addressed this vulnerability. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability Details...
CVE-2026-112839
Missing Authorization vulnerability in VillaTheme Customer Coupons for WooCommerce woo-customer-coupons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Customer Coupons for WooCommerce: from n/a through 1.3.14...
CVE-2026-112839 WordPress Customer Coupons for WooCommerce plugin <= 1.3.14 - Broken Access Control vulnerability
Missing Authorization vulnerability in VillaTheme Customer Coupons for WooCommerce woo-customer-coupons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Customer Coupons for WooCommerce: from n/a through 1.3.14...
CVE-2026-112839 WordPress Customer Coupons for WooCommerce plugin <= 1.3.14 - Broken Access Control vulnerability
Missing Authorization vulnerability in VillaTheme Customer Coupons for WooCommerce woo-customer-coupons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Customer Coupons for WooCommerce: from n/a through 1.3.14...
CVE-2026-112839
The VillaTheme Customer Coupons for WooCommerce plugin (version 1.3.14 and earlier) contains a Missing Authorization vulnerability (CWE-862). This flaw allows for Exploiting Incorrectly Configured Access Control Security Levels . The vulnerability is accessible via the network with low complexity...
EUVD-2026-110045
Missing Authorization vulnerability in VillaTheme Customer Coupons for WooCommerce woo-customer-coupons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Customer Coupons for WooCommerce: from n/a through 1.3.14...
WordPress Customer Coupons for WooCommerce plugin <= 1.3.14 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Arittro Sarkar in WordPress Plugin Customer Coupons for WooCommerce versions = 1.3.14...