37296 matches found
InvenTree 授权问题漏洞
InvenTree is an open-source inventory management system developed by InvenTree. It provides robust low-level inventory control and parts tracking capabilities. Versions of InvenTree prior to 1.2.7 and 1.3.0 contained authorization vulnerabilities. These vulnerabilities stemmed from improper...
PT-2026-31453
The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'elevation-track' shortcode in all versions up to, and including, 4.14. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...
CVE-2026-34765
CVE-2026-34765 : Electron prior to 39.8.5, 40.8.5, 41.1.0, and 42.0.0-alpha.5 has a window.open() targeting flaw where the named-window lookup is not scoped to the opener’s browsing context group. A renderer could navigate a child window opened by a different renderer if both share the same targe...
GHSA-F3PV-WV63-48X8 Electron: Named window.open targets not scoped to the opener's browsing context
Impact When a renderer calls window.open with a target name, Electron did not correctly scope the named-window lookup to the opener's browsing context group. A renderer could navigate an existing child window that was opened by a different, unrelated renderer if both used the same target name. If...
CVE-2026-35182
Brave CMS is an open-source CMS. Prior to 2.0.6, this vulnerability is a missing authorization check found in the update role endpoint at routes/web.php. The POST route for /rights/update-role/id lacks the checkUserPermissions:assign-user-roles middleware. This allows any authenticated user to...
BIT-DOTNET-SDK-2026-26131 .NET Elevation of Privilege Vulnerability
Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally...
BIT-DOTNET-2026-26131 .NET Elevation of Privilege Vulnerability
Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally...
Windows Kernel - Elevation of Privilege
Exploit Title : Windows Kernel - Elevation of Privilege Author : E1.Coders Contact : E1.Coders at Mail dot RU Security Risk : CNA: Microsoft Corporation Base Score: 7.0 HIGH...
CVE-2026-32186
Server-side request forgery ssrf in Microsoft Bing allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-18812
Microsoft Bing Elevation of Privilege Vulnerability...
CVE-2026-32186
Server-side request forgery ssrf in Microsoft Bing allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-32186 Microsoft Bing Elevation of Privilege Vulnerability
...
CVE-2026-32186
The provided connected feeds confirm CVE-2026-32186 is a Server-Side Request Forgery (SSRF) affecting Microsoft Bing, enabling an unauthenticated attacker to achieve privilege escalation over a network. Affected product: Microsoft Bing. The root concern is SSRF leading to elevation of privileges;...
CVE-2026-32186 Microsoft Bing Elevation of Privilege Vulnerability
...
CVE-2026-32186
Server-side request forgery ssrf in Microsoft Bing allows an unauthorized attacker to elevate privileges over a network...
Improper Privilege Management
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Improper Privilege Management via the pairing process. An attacker can gain elevated privileges by exploiting unbound bootstrap setup codes during device pairing. Remediation Upgrade...
EUVD-2026-18561
Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...
PT-2026-30207
Name of the Vulnerable Software and Affected Versions Microsoft Bing affected versions not specified Description A Server-Side Request Forgery SSRF issue exists within Bing's search infrastructure. This could allow attackers to pivot into Microsoft's internal networks. The vulnerability involves...
CVE-2026-33105
CVE-2026-33105 affects Microsoft Azure Kubernetes Service. The vulnerability is described as improper authorization that could allow an unauthorized attacker to elevate privileges over a network. The CVSS 3.1 vector indicates network access, low attack complexity, no user interaction, and a CRITI...