CVE-2026-9256-Poc

nginx ngxhttprewritemodule Переполнение буфера в куче Описание nginx Plus и nginx Open Source ngxhttprewritemodule содержат уязвимость переполнения буфера в куче. Когда директива rewrite использует регулярное выражение с несколькими перекрывающимися группами захвата PCRE например, ^/.$ и замену,...

EUVD-2026-88561

Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in admin.users.php that allows attackers to delete user groups without token verification. Attackers can craft malicious links or pages that trick authenticated administrators into deleting custom groups and their associate...

overwrite

Laravel Nova 向けの、簡単かつ完全なフレキシブルフィールド。繰り返し可能で柔軟なフィールドグループに最適です。 クイックスタート ここでは、すぐに始めるための非常に簡潔なガイドを紹介します。 完全なドキュメントはこちらをご覧ください: https://whitecube.github.io/nova-flexible-content インストール composer require whitecube/nova-flexible-content 使用方法 フレキシブルフィールドを使用すると、繰り返し可能で順序変更可能なフィールドグループを簡単に管理できます。Laravel No...

CVE-2023-2825

CVE-2023-2825 Non authentifié La traversée de répertoire permet la lecture de fichiers. Résumé de la CVE Un problème a été découvert dans GitLab CE/EE affectant uniquement la version 16.0.0. Un utilisateur malveillant non authentifié peut utiliser une vulnérabilité de traversée de chemin pour lir...

CVE-2026-101093

Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in admin.users.php that allows attackers to delete user groups without token verification. Attackers can craft malicious links or pages that trick authenticated administrators into deleting custom groups and their associate...

CVE-2026-101093 Cotonti through 1.0.0 Cross-Site Request Forgery via User Group Deletion

Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in admin.users.php that allows attackers to delete user groups without token verification. Attackers can craft malicious links or pages that trick authenticated administrators into deleting custom groups and their associate...

CVE-2026-101093 Cotonti through 1.0.0 Cross-Site Request Forgery via User Group Deletion

Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in admin.users.php that allows attackers to delete user groups without token verification. Attackers can craft malicious links or pages that trick authenticated administrators into deleting custom groups and their associate...

CVE-2026-101093

Cotonti versions through 1.0.0 are vulnerable to a Cross-Site Request Forgery (CSRF) in the admin.users.php component. The root cause is a lack of token verification when deleting user groups. An attacker can craft malicious links or pages that trick an authenticated administrator into deleting c...

AZL-105092 CVE-2026-102278 affecting package nodejs-nodemon 2.0.3-5

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand to recurse once per nesting level at comma-member and single-set expansion sites, exhausting the native stack before...

CVE-2026-102278

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand to recurse once per nesting level at comma-member and single-set expansion sites, exhausting the native stack before...

EUVD-2026-88555

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand to recurse once per nesting level at comma-member and single-set expansion sites, exhausting the native stack before...

CVE-2026-102278 brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand to recurse once per nesting level at comma-member and single-set expansion sites, exhausting the native stack before...

CVE-2026-102278 brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand to recurse once per nesting level at comma-member and single-set expansion sites, exhausting the native stack before...

CVE-2026-56423-MISP-deleteSelection-BrokenAccessControl

CVE-2026-56423 — Contrôle d'accès défaillant dans deleteSelection de MISP Preuve de concept pour une faille d'absence d'autorisation dans les flux de suppression en masse de MISP pour les Rapports d'événements et les Groupes de partage. Les gestionnaires deleteSelection autorisent chaque élément...

CVE-2024-8349-and-CVE-2024-8350

CVE-2024-8349 et CVE-2024-8350 Informations générales Uncanny Groups for LearnDash uncanny-learndash-group est un plugin tiers pour LearnDash LMS sfwd-lms. Le plugin permet aux chefs de groupe rôle personnalisé LearnDash de gérer les utilisateurs de leurs propres groupes LearnDash depuis...

WordPress Groups – Memberships and Access Control plugin <= 4.6.0 - Authenticated (Subscriber+) Privilege Escalation vulnerability

Authenticated Subscriber+ Privilege Escalation vulnerability discovered by daroo in WordPress Plugin Groups versions = 4.6.0...

CVE-2026-100903 ООО НПО Ритм GEOritm REST API obj-groups missing authentication

A vulnerability was identified in ООО НПО Ритм GEOritm up to 2.45.1. This affects an unknown part of the file /restapi/objects/obj-groups of the component REST API. Such manipulation of the argument objectId leads to missing authentication. The attack can be launched remotely. The exploit is...

PT-2026-102389

Name of the Vulnerable Software and Affected Versions Cotonti version 1.0.0 Description A cross-site request forgery CSRF issue exists in the 'admin.users.php' endpoint. This occurs because the system fails to perform token verification, allowing an attacker to trick an authenticated administrato...

CVE-2025-65950

CVE-2025-65950: WBCE CMS уязвим для временной слепой SQL-инъекции через параметр groups Обзор Поле| Детали ---|--- CVE ID| CVE-2025-65950 Критичность| КРИТИЧЕСКИЙ Уведомление| Посмотреть уведомление Обнаружено| Lukasz Rybak Затронутые продукты WBCE/WBCECMS Детали Краткое описание Критическая...

CVE-2025-65094

CVE-2025-65094: WBCE CMS уязвим для повышения привилегий через манипуляцию ID группы IDOR Обзор Поле| Подробности ---|--- CVE ID| CVE-2025-65094 Severity| HIGH Рекомендации| Посмотреть рекомендации Обнаружено| Lukasz Rybak Затронутые продукты WBCE/WBCECMS Подробности Сводка Пользователь с низкими...