Project-Frame-Jacking-The-Gallery-Heist

Executive Summary A comprehensive penetration test was conduc...

PT-2025-35765

Name of the Vulnerable Software and Affected Versions: Support Genix versions through 1.4.23 Description: A missing authorization flaw exists in PalsCode Support Genix due to incorrectly configured access control security levels. This allows for exploitation of the issue. Recommendations: Update...

PT-2025-35737

Name of the Vulnerable Software and Affected Versions: Surfer versions through 1.6.4.574 Description: A missing authorization issue exists in Surfer, allowing exploitation of incorrectly configured access control security levels. Recommendations: Update Surfer to a version later than 1.6.4.574...

PT-2025-35764

Name of the Vulnerable Software and Affected Versions: PeachPay Payments versions n/a through 1.117.4 Description: A missing authorization flaw exists in PeachPay Payments, allowing exploitation of incorrectly configured access control security levels. Recommendations: Update PeachPay Payments to...

WordPress plugin Frisbii Pay 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

WordPress plugin PeachPay Payments 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2025-35740

Name of the Vulnerable Software and Affected Versions: CozyThemes SaasLauncher versions through 1.3.0 Description: The SaasLauncher software contains a missing authorization flaw due to incorrectly configured access control security levels. Recommendations: Update SaasLauncher to a version later...

PT-2025-35729

Name of the Vulnerable Software and Affected Versions: Brizy versions through 2.7.12 Description: Brizy suffers from a missing authorization issue, allowing exploitation of incorrectly configured access control security levels. Recommendations: Update Brizy to a version later than 2.7.12...

net/http: Request smuggling due to acceptance of invalid chunked data in net/http

A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...

Linux Distros Unpatched Vulnerability : CVE-2024-34002

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore feedback modules...

Linux Distros Unpatched Vulnerability : CVE-2024-34005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore database activity...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Ivanti Endpoint_Manager_Mobile

CVE-2025-4428 & CVE-2025-4427 CVE-2025-4428 is a post-auth re...

WordPress Plugin B Slider Access Control Break Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An access control disruption vulnerability exists in WordPress plugin B Slider, which stems from a lack ...

CVE-2025-58192

Missing Authorization vulnerability in Xylus Themes WP Bulk Delete wp-bulk-delete allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Bulk Delete: from n/a through = 1.3.6...

CVE-2025-58198

Missing Authorization vulnerability in Xpro Xpro Theme Builder xpro-theme-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Xpro Theme Builder: from n/a through = 1.2.9...

CVE-2025-48350

Missing Authorization vulnerability in Basar Ventures AutoWP autowp-ai-content-writer-rewriter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AutoWP: from n/a through = 2.2.8...

CVE-2025-48348

Incorrect Privilege Assignment vulnerability in chandrashekharsahu Site Offline site-offline allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Offline: from n/a through = 1.5.7...

CVE-2025-48108

Missing Authorization vulnerability in Mojoomla School Management allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects School Management: from n/a through 93.2.0...

CVE-2025-54714

Missing Authorization vulnerability in Dylan James Zephyr Project Manager zephyr-project-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zephyr Project Manager: from n/a through = 3.3.201...

CVE-2025-53230

Missing Authorization vulnerability in honzat Page Manager for Elementor page-manager-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Page Manager for Elementor: from n/a through = 2.0.5...