CVE-2025-39459-Nuclei-Template

📄 Template de Nuclei para CVE-2025-39459 🚀 Descripción general Este repositorio contiene un template de Nuclei diseñado específicamente para detectar una Vulnerabilidad de Elevación de Privilegios No Autenticada CVE-2025-39459 en el Tema Real Estate 7 de WordPress. Este problema permite a atacant...

CVE-2026-100879

A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. This affects the function checkRoleAllowed of the file SysRoleServiceImpl.java of the component dataScope Endpoint. The manipulation results in missing authorization. The attack may be performed from remote. The exploit h...

CVE-2026-100879 zhistaredu StarTraining dataScope Endpoint SysRoleServiceImpl.java checkRoleAllowed authorization

A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. This affects the function checkRoleAllowed of the file SysRoleServiceImpl.java of the component dataScope Endpoint. The manipulation results in missing authorization. The attack may be performed from remote. The exploit h...

CVE-2026-100879

A security flaw exists in zhistaredu StarTraining up to version 3.8.1 . The vulnerability is located in the checkRoleAllowed function within the SysRoleServiceImpl.java file of the dataScope Endpoint component. This flaw leads to missing authorization , which may be triggered via a remote attack ...

EUVD-2026-88034

A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. This affects the function checkRoleAllowed of the file SysRoleServiceImpl.java of the component dataScope Endpoint. The manipulation results in missing authorization. The attack may be performed from remote. The exploit h...

CVE-2026-100879 zhistaredu StarTraining dataScope Endpoint SysRoleServiceImpl.java checkRoleAllowed authorization

A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. This affects the function checkRoleAllowed of the file SysRoleServiceImpl.java of the component dataScope Endpoint. The manipulation results in missing authorization. The attack may be performed from remote. The exploit h...

CVE-2025-30772

🚨 CVE-2025-30772 - Escalada de Privilegios en WPC Smart Upsell Funnel for WooCommerce 📅 Publicado: 27 de marzo de 2025 🔐 Puntuación CVSS: 8.8 Alta 🔥 CWE-862: Autorización faltante 🐞 Resumen de la vulnerabilidad Una vulnerabilidad de Autorización faltante en el plugin WPC Smart Upsell Funnel for...

CVE-2025-31324

🔴 CVE-2025-31324 — SAP NetWeaver Visual Composer Unauthenticated File Upload Type: Proof of Concept — Vulnerability Research CVE: CVE-2025-31324 CVSS: 10.0 Critical AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Status: Patched — SAP Security Note 3594142 + 3604119 Added to CISA KEV: May 2025 ⚠️ Este PoC...

CVE-2025-5815-Nuclei-Template

📄 Plantilla de Nuclei para CVE-2025-5815 🚀 Descripción general Este repositorio contiene una plantilla de Nuclei específicamente diseñada para detectar una Vulnerabilidad de Deshabilitación de Registro de Bots sin Autenticación CVE-2025-5815 en el plugin Traffic Monitor de WordPress. Este problem...

CVE-2024-7135

CVE-2024-7135 Tainacan = 0.21.7 - Falta de autorización para lectura arbitraria de archivos por parte de usuarios autenticados Suscriptor+ Descripción El plugin Tainacan para WordPress es vulnerable al acceso no autorizado de datos debido a la falta de una comprobación de capacidad en la función...

CVE-2024-43998

CVE-2024-43998 Blogpoet = 1.0.2 - Missing Authorization via blogpoetinstallandactivateplugins Published: 2024-08-29 00:00:00 Classification: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N cvss-score: 5.3 cve-id: CVE-2024-43998 cpe: cpe:2.3:a:blogpoet:blogpoet:::::::: cwe-id: CWE-862...

CVE-2024-52429

CVE-2024-52429 WP Quick Setup history.pushState'', '', '/'; document.forms0.submit;...

CVE-2024-5324

CVE-2024-5324 Login/Signup Popup Inline Form + Woocommerce 2.7.1 - 2.7.2 - Autorización faltante para actualización arbitraria de opciones Descripción: El plugin Login/Signup Popup Inline Form + Woocommerce para WordPress es vulnerable a la modificación no autorizada de datos debido a una falta d...

Burp_CVE-2025-31324

CVE-2025-31324 Extensión de Burp Suite Resumen Esta extensión de Burp Suite basada en Python está diseñada para detectar la presencia de CVE-2025-31324 , una vulnerabilidad crítica en el componente Metadata Uploader de SAP NetWeaver Visual Composer. La vulnerabilidad permite la ejecución remota d...

CVE-2024-43998

CVE-2024-43998 Descripción CVE-2024-43998 : Vulnerabilidad de autorización faltante en el tema Blogpoet permite el acceso a funcionalidades no restringidas adecuadamente por ACLs. Este problema afecta a las versiones de Blogpoet desde n/a hasta 1.0.3. Uso usage: CVE-2024-43998.py -h -u URL -p...

CVE-2026-7459

CVE-2026-7459 CVE-2026-7459 Exploit de toma de cuentas por autorización faltante en Simple History...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the GET /api/station/stationid/file/id/play endpoint. An attacker can access and download media files from stations they do not have permission to view by enumerating sequential IDs and exfiltrating the complet...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the download endpoint. An attacker can access restricted audio content by directly requesting media files using valid media identifiers. Remediation Upgrade azuracast/azuracast to version 0.23.8 or higher...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the Liquidsoap API endpoint due to missing internal connection requirements and improper validation of the AutoDJ flag. An attacker can inject arbitrary now-playing metadata, disrupt live broadcasts, and disclo...

CVE-2025-5304

CVE-2025-5304 PT Project Notebooks 1.0.0 - 1.1.3 - Missing Authorization to Unauthenticated Privilege Escalation 🚀 PT Project Notebooks ≤ 1.1.3 — Unauthenticated Privilege Escalation CVE-2025-5304 PoC & exploit helper for PT Project Notebooks versions 1.0.0–1.1.3 : Missing authorization in...