Lucene search
+L

348 matches found

Kitploit
Kitploit
•added 2026/09/28 11:57 p.m.•19 views

ad-ldap-enum

ad-ldap-enum ad-ldap-enum is a Python script developed to collect users/computers and their group membership from Active Directory. In large Active Directory environments, tools such as NBTEnum were not quick enough. By executing LDAP queries against a domain controller, ad-ldap-enum is able to...

6.1AI score
SaveExploits0References9
Kitploit
Kitploit
•added 2026/09/27 11:20 a.m.•8 views

CVE-2021-1675

CVE-2021-1675 Fix without disabling Print Spooler Script checks the existance of de CVE-2021-1675 fix from Microsoft and removes members from the "Pre-Windows 2000 Compatible Access" group on the domain. Issues: With an empty "Pre-Windows 2000 Compatible Access" group the following things stop...

9.3CVSS7.9AI score0.85305EPSS
SaveExploits64
OSV
OSV
•added 2026/09/24 4:46 p.m.•8 views

CVE-2026-91161 OpenWA: VIEWER API keys can read WhatsApp group invite codes

OpenWA is a free, open source, self-hosted WhatsApp API gateway. Prior to 0.23.5, the GET /api/sessions/sessionId/groups/groupId/invite-code endpoint and the GroupGetInviteCode MCP tool have no OPERATOR role requirement, allowing a valid VIEWER key scoped to a session to retrieve an active group...

6.4CVSS5.9AI score
SaveExploits0References7
NVD
NVD
•added 2026/09/19 3:17 p.m.•19 views

CVE-2026-94000

A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The issue occurs in the group-membership endpoints where the system fails to check if a group grants administrative privileges before allowing a user to be added. This allows a delegated...

6.6CVSS0.00401EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/19 2:09 p.m.•16 views

EUVD-2026-83601

A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The issue occurs in the group-membership endpoints where the system fails to check if a group grants administrative privileges before allowing a user to be added. This allows a delegated...

6.6CVSS5.7AI score0.00401EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/19 2:09 p.m.•9 views

CVE-2026-94000 Keycloak-services: keycloak-services: delegated admin with manage-users can escalate to realm-admin via group membership

A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The issue occurs in the group-membership endpoints where the system fails to check if a group grants administrative privileges before allowing a user to be added. This allows a delegated...

6.6CVSS5.7AI score0.00401EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/19 2:09 p.m.•40 views

CVE-2026-94000

A flaw in the Admin REST API of Keycloak (open-source identity and access management) exists in the group-membership endpoints . The system fails to check whether a group grants administrative privileges before allowing a user to be added to it. This allows a delegated administrator holding the m...

6.6CVSS5.7AI score0.00401EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/19 2:09 p.m.•49 views

CVE-2026-94000 Keycloak-services: keycloak-services: delegated admin with manage-users can escalate to realm-admin via group membership

A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The issue occurs in the group-membership endpoints where the system fails to check if a group grants administrative privileges before allowing a user to be added. This allows a delegated...

6.6CVSS0.00401EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/09/19 2:09 p.m.•12 views

CVE-2026-94000

A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The issue occurs in the group-membership endpoints where the system fails to check if a group grants administrative privileges before allowing a user to be added. This allows a delegated...

6.6CVSS5.8AI score0.00401EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/19 12:00 a.m.•3 views

CVE-2026-94000: Missing Authorization

A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The issue occurs in the group-membership endpoints where the system fails to check if a group grants administrative privileges before allowing a user to be added. This allows a delegated...

6.6CVSS5.7AI score0.00401EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/18 12:00 a.m.•5 views

EulerOS Virtualization 2.11.1 : libsodium (EulerOS-SA-2026-3431)

According to the versions of the libsodium package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to...

4.5CVSS5.7AI score0.00182EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•12 views

Astra Linux – Vulnerability in Samba

A flaw was discovered in Samba. The Samba smbd file server must map Windows group identities SIDs to Unix group IDs gids. The code responsible for this mapping contained a flaw that could allow it to read data beyond the end of the array, in the event that a negative cache entry was added to the...

6.8CVSS6.6AI score0.01616EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/10 12:00 a.m.•9 views

JetBrains YouTrack < 2026.2.18634 Multiple Vulnerabilities

The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.18634. It is, therefore, affected by multiple vulnerabilities: - In JetBrains YouTrack before 2026.2.18634 unchecked group membership changes allowed privilege escalation. CVE-2026-86482 - In JetBrains YouTrack befo...

8.8CVSS5.9AI score0.00643EPSS
SaveExploits0References7
NVD
NVD
•added 2026/09/07 5:17 p.m.•9 views

CVE-2026-86482

In JetBrains YouTrack before 2026.2.18634, insufficient validation of role assignments allowed privilege escalation...

8.8CVSS0.00417EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/07 4:26 p.m.•11 views

CVE-2026-86482

In JetBrains YouTrack before 2026.2.18634, insufficient validation of role assignments allowed privilege escalation...

8.8CVSS5.7AI score0.00417EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/07 4:26 p.m.•26 views

CVE-2026-86482

JetBrains YouTrack prior to version 2026.2.18634 is affected by a privilege escalation vulnerability caused by unchecked group membership changes , allowing a low-privileged user to escalate their permissions. The flaw is exploitable over the network with low attack complexity and no user interac...

8.8CVSS5.7AI score0.00417EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/07 4:26 p.m.•9 views

EUVD-2026-72498

In JetBrains YouTrack before 2026.2.18634 unchecked group membership changes allowed privilege escalation...

8.8CVSS5.7AI score0.00417EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/07 4:26 p.m.•35 views

CVE-2026-86482

In JetBrains YouTrack before 2026.2.18634, insufficient validation of role assignments allowed privilege escalation...

8.8CVSS0.00417EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/07 12:01 p.m.•87 views

CVE-2026-76578

FreeIPA is affected by a critical flaw (CVSS 9.8 ) in its self-managed OTP token ACI , which does not require authentication and fails to restrict which attributes may be added alongside a token entry. Combined with a related flaw in the underlying directory server's ACI evaluation (tracked separ...

9.8CVSS6AI score0.00974EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•14 views

PT-2026-86854

In JetBrains YouTrack before 2026.2.18634 unchecked group membership changes allowed privilege escalation...

8.8CVSS5.7AI score0.00417EPSS
SaveExploits0References3
Rows per page
Query Builder