Exploit for Incorrect Authorization in Systemd_Project Systemd

Exploit-CVE-2026-40224 CVE-2026-40224: systemd-machined local...

Sonatype Nexus Repository < 3.95.0 - Privilege Escalation via Repository Format Mismatch

Nexus Repository 3 CE/Pro 3.0.0 through 3.94.x contains an incorrect authorization vulnerability caused by inconsistent authorization checks in the repository-creation UI, letting delegated repository-admin users create unauthorized repository formats, exploit requires delegated repository-admin...

Parse Server < 8.6.21 / 9.x < 9.5.2 - Session Token Exfiltration

Parse Server 8.6.21 / 9.x 9.5.2 contains an information disclosure vulnerability caused by improper handling of the redirectClassNameForKey query parameter, letting authenticated or unauthenticated attackers exfiltrate session tokens, exploit requires ability to create or update an object with a...

CVE-2026-96512

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-96512 CVE-2026-96512 sudo 1.9.13p3 Debian bookworm - Sudo Project I am @abraxasnull. Local lab, not HTTP. The client is CVE-2026-96512-Abraxas-Labs.py. NOTBEFORE / NOTAFTER timestamps without a trailing Z go...

CVE-2022-0482_exploit

CVE-2022-0482 취약점 악용 소개 이 문서는 Easy!Appointments 예약 소프트웨어에서 식별된 심각한 보안 취약점인 CVE-2022-0482에 대한 상세 분석을 설명합니다. CWE-863에 해당하는 잘못된 권한 부여와 관련된 이 결함은 적절한 인증 없이 개인 식별 정보에 대한 무단 접근을 허용하여 데이터 기밀성과 무결성에 심각한 위험을 초래합니다. 저자 Mija Pilkaite 취약점 개요 CVE-2022-0482는 1.4.3 이전 버전의 Easy!Appointments에 영향을 미칩니다. 이 취약점은 202...

CVE-2026-54998-exp

ОТКАЗ ОТ ОТВЕТСТВЕННОСТИ Этот репозиторий предназначен только для образовательных и исследовательских целей. Автор не несет ответственности за любое неправомерное использование, ущерб или незаконные действия, вызванные использованием этого материала. Используйте на свой страх и риск. Соблюдайте...

gitea-CVE-2026-28699

CVE-2026-28699: Обход области OAuth2 в Gitea через HTTP Basic Auth Токен доступа OAuth2 Gitea, ограниченный только read:user, может выполнять полные операции записи, если он отправлен как Authorization: Basic base64:x-oauth-basic, а не как Bearer-токен. Проверка области пропускается для любого...

opencart-reward-free-checkout

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · opencart-reward-free-checkout opencart-reward-free-checkout OpenCart 4.1.0.4 - OpenCart Ltd CVE-2025-15116은 4.1.0.3까지 존재했던 쿠폰 레이스였다. 4.1.0.4에서는 coupon.save가 쿠폰이 변경될 때 paymentmethod를 unset한다. reward.save는 그렇지 않다...

Adobe Commerce/Magento - Customer Session Identity Switch

Adobe Commerce contains an incorrect authorization vulnerability caused by improper access control, letting attackers escalate privileges to access sensitive resources, exploit requires no user interaction. id: CVE-2026-71362 info: name: Adobe Commerce/Magento - Customer Session Identity Switch...

Exploit for CVE-2026-96512

abraxaslabs.tech · github.com/abraxas ·&...

Security Bulletin: Security Vulnerabilities in Third-Party Node.js Packages Used by IBM Rhapsody Systems Engineering

Summary Security vulnerabilities were identified in the product's Node.js dependencies. The issue has been mitigated by removing the vulnerable packages and updating dependencies to secure versions. Vulnerability Details CVEID:CVE-2026-29087 DESCRIPTION: @hono/node-server allows running the Hono...

Exploit for CVE-2026-96512

SudoTimeWarp — CVE-2026-96512 sudo: the caller's TZ decid...

CVE-2026-75745 Adobe Experience Manager Forms JEE | Incorrect Authorization (CWE-863)

Adobe Experience Manager Forms JEE is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user...

CVE-2026-75723 Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)

Adobe Campaign Classic ACC is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

CVE-2026-75728 Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)

Adobe Campaign Classic ACC is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

CVE-2026-75728 Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)

Adobe Campaign Classic ACC is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

BIT-KIBANA-2026-82302 Incorrect Authorization in Kibana Leading to Unauthorized Configuration Modification

Incorrect Authorization CWE-863 in Kibana can lead to unauthorized configuration modification via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...

BIT-ELK-2026-82302 Incorrect Authorization in Kibana Leading to Unauthorized Configuration Modification

Incorrect Authorization CWE-863 in Kibana can lead to unauthorized configuration modification via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...

BIT-ELK-2026-82299 Incorrect Authorization in Kibana Leading to Information Disclosure

Incorrect Authorization CWE-863 in Kibana can lead to information disclosure via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...

BIT-ELK-2026-82298 Incorrect Authorization in Kibana Leading to Denial of Service

Incorrect Authorization CWE-863 in Kibana can lead to denial of service via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180...