217200 matches found
WordPress Mang Board WP plugin <= 2.3.7 - Authenticated (Subscriber+) Privilege Escalation to Forged Authentication Cookie vulnerability
Authenticated Subscriber+ Privilege Escalation to Forged Authentication Cookie vulnerability discovered by daroo in WordPress Plugin Mang Board WP versions = 2.3.7...
CVE-2026-75977 Mang Board WP <= 2.3.7 - Authenticated (Subscriber+) Privilege Escalation to Forged Authentication Cookie
The Mang Board WP plugin for WordPress is vulnerable to Missing Authorization via Authentication Cookie Forgery in all versions up to, and including, 2.3.7. This is due to flawed HMAC generation in the mbwgethashkey function that uses the current user's identity instead of the cookie username...
CVE-2026-75977
Mang Board WP WordPress plugin (all versions ≤ 2.3.7 ) suffers from a Missing Authorization vulnerability via authentication cookie forgery. The root cause is flawed HMAC generation in mbw_get_hash_key(), which uses the current user's identity instead of the cookie's username parameter when a Wor...
CVE-2024-28000
LiteSpeed Cache Privilege Escalation Exp CVE-2024-28000Scan.py Questo script prima identifica la versione, determina se è una versione vulnerabile, successivamente tenta di verificare se il file di log esiste; se esiste, tenterà di inviare un pacchetto e poi richiedere nuovamente il file di log p...
CVE-2023-22809
CVE-2023-22809 Youtube PoC: https://m.youtube.com/watch?v=b0UV7WgtKyI Questo repository contiene l'exploit per sfruttare CVE-2023-22809. Lo sfruttamento dipende dal consentire agli utenti sudo di eseguire sudoedit secondo sudo -l. Maggiori dettagli nella mailing list OpenWall. Informazioni Questo...
CVE-2025-40602
CVE-2025-40602 📌 Panoramica CVE-2025-40602 è una vulnerabilità di escalation dei privilegi locale che colpisce i dispositivi della serie SonicWall Secure Mobile Access SMA 1000. Il difetto è presente nella Appliance Management Console AMC a causa di controlli di autorizzazione insufficienti , che...
CVE-2025-65271
CVE-2025-65271 PoC für CVE-2025-65271 Wie ausführen? node server.js Beschreibung Client-seitige Template-Injection CSTI im Admin-Dashboard von Azuriom CMS ermöglicht es einem Benutzer mit niedrigen Berechtigungen, beliebigen Template-Code im Kontext einer Administrator-Sitzung auszuführen. Dies...
EventLogin-CVE-2025-29969
EventLogin - CVE-2025-29969 EventLogin ist eine Time-of-Check-Time-of-Use-Schwachstelle im MS-EVEN-Protokoll. Die Schwachstelle ermöglicht es niedrig privilegierten Benutzern, beliebige Dateien auf einem entfernten Rechner zu schreiben, wodurch die Notwendigkeit eines Administratorkontos für eine...
kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer
A use-after-free vulnerability was found in the Linux kernel's IPv6 FIB rule lookup path. In fib6rulesuppress, when a route is suppressed and released via ip6rtputflags, the res-rt6 pointer is not cleared. If no later rule supplies a replacement route, fib6rulelookup returns the stale freed rt6in...
CVE-2026-78237
Admin By Request (ABR) for macOS is affected by an insufficient input validation flaw (CVE-2026-78237, CVSS 7.8 HIGH ). A low-privileged local user can inject malicious entries into the sudoers file during an ABR session, granting persistent root access that remains effective even after the eleva...
CVE-2026-78237 Insufficient input validation in Admin By Request (ABR)
Insufficient input validation in ABR allows a low-privileged user to inject malicious entries into the sudoers file, resulting in persistent root access that remained effective after the ABR session ended...
CVE-2026-78236 Insecure PIN derivation mechanism in Admin By Request (ABR)
An insecure PIN derivation mechanism in ABR allows a low-privileged user to escalate privileges to administrator by communicating over Cross-Process Communication XPC while masquerading as an Apple-signed process...
CVE-2026-78236 Insecure PIN derivation mechanism in Admin By Request (ABR)
An insecure PIN derivation mechanism in ABR allows a low-privileged user to escalate privileges to administrator by communicating over Cross-Process Communication XPC while masquerading as an Apple-signed process...
EUVD-2026-66331
An insecure PIN derivation mechanism in ABR allows a low-privileged user to escalate privileges to administrator by communicating over Cross-Process Communication XPC while masquerading as an Apple-signed process...
CVE-2026-78236
CVE-2026-78236 affects Admin By Request (ABR) , a macOS privilege-escalation utility. The root cause is an insecure PIN derivation mechanism that allows a low-privileged user to escalate to administrator by communicating over Cross-Process Communication (XPC) while masquerading as an Apple-signed...
CVE-2026-58094
The FIOSSHMLPGCNF ioctl2 operation configures the page size for a largepage shared memory object. This is intended to be used immediately after creating the object, before any memory is allocated for the object. The handler checked whether a page size had already been configured without holding t...
CVE-2026-58093
The TIOCSCTTY ioctl handler drops the tty lock in order to acquire the process tree lock. After reacquiring the tty lock, the handler did not revalidate the state of the terminal, and could proceed to link a terminal that was concurrently being destroyed to the calling process' session. An...
CVE-2026-19220
The Forminator Forms WordPress plugin before 1.57.1 does not verify that site registration is enabled on the network before creating a site signup, allowing unauthenticated visitors to create a new site on a WordPress multisite network and gain administrator privileges on it...
kernel: zram: fix use-after-free in zram_bvec_write_partial()
A flaw was found in the Linux kernel, specifically within the zram module. This vulnerability is a use-after-free error, where the system attempts to use a piece of memory after it has been freed. This occurs when the zrambvecwritepartial function allows an asynchronous read to write into a page...
CVE-2026-19220
Forminator Forms WordPress plugin versions before 1.57.1 fail to verify that site registration is enabled on the network before creating a site signup. This allows unauthenticated visitors to create a new site on a WordPress multisite network and gain administrator privileges on it, effectively a...