CVE-2026-116393

The Optima Express WordPress plugin (versions

EUVD-2026-112072

Missing Authorization vulnerability in iHomefinder, Inc. Optima Express optima-express allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optima Express: from n/a through 9.0.0...

CVE-2026-116393 WordPress Optima Express + MarketBoost IDX Plugin plugin <= 8.7.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in iHomefinder, Inc. Optima Express optima-express allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optima Express: from n/a through 9.0.0...

CVE-2026-116393 WordPress Optima Express + MarketBoost IDX Plugin plugin <= 8.7.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in iHomefinder, Inc. Optima Express optima-express allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optima Express: from n/a through 9.0.0...

CVE-2026-116404 WordPress Redux Framework plugin <= 4.5.16 - Broken Access Control vulnerability

Missing Authorization vulnerability in David Anderson Redux Framework redux-framework allows Lifting Sensitive Data Embedded in Cache.This issue affects Redux Framework: from n/a through 4.5.16...

HAProxy-CVE-2023-45539-PoC

HAProxy-CVE-2023-45539-PoC HAProxy before 2.8.2 accepts as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a pathend rule, such as routing index.html.png to a static server. What gets misroute...

CVE-2023-22855

CVE-2023-22855 This vulnerability was discovered and disclosed by Nico Viakowski and myself. This repository will hold the advisory and the exploit. This repository is only for educational purposes. Links Vendor Website: https://www.kardex.com/en/mlog-control-center Exploit on Exploit-DB:...

CVE-2026-76071

CVE-2026-76071: Unauthenticated Pre-Auth Stack Buffer Overflow via sscanf %^, in skkset.cgi ipFilterList Handler in Netis NC63 Researcher: Özcan Ersan @ozcanpng Disclosure status CVE: CVE-2026-76071 Vendor: Netis Systems Co., Ltd. Product: Netis NC63 AC1200 Wireless Dual Band Gigabit MU-MIMO Rout...

CVE

CVE Writeups for CVE-2025-67586, CVE-2025-67985, CVE-2025-67986 -------------- CVE-2025-67586 Exploit PoC -------------- Exploit Title: WordPress Plugin 5.2.0 - Broken Access Control Software Link: https://wordpress.org/plugins/highlight-and-share/ Version: Description A broken access control...

CVE-2020-24029

CVE-2020-24029 Description Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request. Important Dates Announcement to Vendor: 2020-07-12 Public disclosure date: 2020-08-31 Vulnerability Type Incorrect...

CVE-2026-67073

HCL BigFix AEX is impacted by an Unrestricted File Upload and Improper Access Control vulnerability. This flaw allows an attacker to upload malicious or unauthorized files and subsequently access or download sensitive content directly. Such actions could result in information disclosure , unautho...

CVE-2026-67073 HCL BigFix AEX is affected by multiple security vulnerabilities.

HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an attacker to upload malicious or unauthorized files and directly access or download sensitive uploaded content, potentially leading to information disclosure, unauthorized acces...

EUVD-2026-112030

HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an attacker to upload malicious or unauthorized files and directly access or download sensitive uploaded content, potentially leading to information disclosure, unauthorized acces...

CVE-2026-116855

Missing Authorization vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My auctions allegro: from n/a through 4.0.3...

CVE-2022-22828

CVE-2022-22828 Synametrics - SynaMan version 4.9 Summary Viden Labs has found an Insecure Direct Object Reference IDOR vulnerability in Synametric's SynaMan. This vulnerability is present in versions 4.9 and earlier. This vulnerability has since been patched in version 5.0. “Insecure direct objec...

wacker

Overview A set of scripts to help perform an online dictionary attack against a WPA3 access point. Wacker leverages the wpasupplicant control interface to control the operations of the supplicant daemon and to get status information and event notifications ultimately helping speedup connection...

EUVD-2026-112023

Missing Authorization vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My auctions allegro: from n/a through 4.0.3...

CVE-2026-116855 WordPress My auctions allegro plugin <= 4.0.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My auctions allegro: from n/a through 4.0.3...

CVE-2026-116855

The wphocus My auctions allegro WordPress plugin (versions

WordPress My auctions allegro plugin <= 4.0.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by ashv4ni in WordPress Plugin My auctions allegro versions = 4.0.3...