2021052 matches found
CVE-2026-72662
Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized disclosure, modification, and deletion of data via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user granted the Timeline feature privilege in a Kibana space could...
CVE-2026-78582
Missing Authorization CWE-862 in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user holding Synthetics privileges scoped to a single Kibana space could permanently delete Synthetics monitors that a...
Exploit for CVE-2026-97163
CVE-2026-97163 — UP Plugin GitHub Remote Code Installation Jo...
Exploit for CVE-2026-97161
CVE-2026-97161 — UP Plugin Path Traversal / File Read Joomla...
Exploit for CVE-2026-97160
CVE-2026-97160 — UP Plugin PHP Code Injection Joomla Python...
CVE-2026-78582
Missing Authorization CWE-862 in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user holding Synthetics privileges scoped to a single Kibana space could permanently delete Synthetics monitors that a...
CVE-2026-78582 Missing Authorization in Kibana Leading to Unauthorized Deletion of Data
Missing Authorization CWE-862 in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user holding Synthetics privileges scoped to a single Kibana space could permanently delete Synthetics monitors that a...
CVE-2026-72662 Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of Data
Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized disclosure, modification, and deletion of data via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user granted the Timeline feature privilege in a Kibana space could...
CVE-2026-72662
Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized disclosure, modification, and deletion of data via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user granted the Timeline feature privilege in a Kibana space could...
Exploit for CVE-2026-94132
CVE-2026-94132 — AcyMailing Enterprise Mailbox RCE Python 3 P...
magento-instant-purchase-custom-price
abraxaslabs.tech · github.com/abraxas ·&...
Exploit for Interpretation Conflict in Wordpress
LANGZ — wp2shell Exploit Tool Author: LANGZ CVE: CV...
Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials
The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as-a-service MaaS platform called Lunex. The new findings come from Ontinue, which described the activity as a four-stage attack chain aime...
CVE-2026-77203
The Groups – Memberships and Access Control plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.6.0. This is due to the groupsjoin function deriving group-join eligibility from the ambient post's author capabilities via the global $post-postauthor...
CVE-2026-77203 Groups <= 4.6.0 - Authenticated (Subscriber+) Privilege Escalation via 'groups_join' Shortcode
The Groups – Memberships and Access Control plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.6.0. This is due to the groupsjoin function deriving group-join eligibility from the ambient post's author capabilities via the global $post-postauthor...
EUVD-2026-87787
The Groups – Memberships and Access Control plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.6.0. This is due to the groupsjoin function deriving group-join eligibility from the ambient post's author capabilities via the global $post-postauthor...
CVE-2026-77203
The Groups – Memberships and Access Control plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.6.0. This is due to the groupsjoin function deriving group-join eligibility from the ambient post's author capabilities via the global $post-postauthor...
Exploit for Missing Authentication for Critical Function in Cpanel
CVE-2026-41940 ⚠ This tool is created solely for education...