SAP_RECON

CVE-2020-6287、CVE-2020-6286 的 PoC（SAP RECON 漏洞） Pffff！RECON（远程可利用 NetWeaver 代码）？伙计们，真的吗？这就是你们想出的最佳代号？: 此脚本用于检测 SAP LM Configuration Wizard 缺少授权检查的漏洞，并作为 PoC 脚本利用 queryProtocol 方法中的目录遍历。 目录遍历允许从 SAP 服务器下载任意 zip 文件。 本项目仅用于教育目的，不能用于违法或个人牟利。 项目作者不对因本项目材料造成的任何可能损害负责。 原始发现： CVE-2020-6287：Pablo Artuso...

CVE-2023-32117

CVE-2023-32117 Integrate Google Drive ","username":"admin","name":"admin","email":"[email protected]","role":"Administrator","folders":,"id":2,"avatar":"","use...

cve-2025-66723

CVE-2025-66723：inMusic Brands Engine DJ =3.0.0 至 =3.0.0、4.3.4，适用于所有平台（macOS、Windows）。 经过专门测试发现受影响/存在漏洞的版本（macOS 和 Windows）： 3.0.0, 3.0.1, 3.1.0, 3.1.1, 3.2.0, 3.3.0, 3.4.0, 4.0.0, 4.0.1, 4.1.0, 4.2.0, 4.2.1, 4.3.0 经过专门测试发现不受影响的版本（macOS 和 Windows）： 2.0.0, 2.0.1, 2.0.2, 2.1.0, 2.2.0, 2.2.1, 2.2.2,...

CVE-2026-80050

ContiNew Admin versions through 4.1.0 contain a missing authorization and file-type allowlist vulnerability in its multipart upload endpoints (specifically MultipartUploadController). Authenticated users can initialize chunked uploads, send file parts, and complete uploads with arbitrary file ext...

CVE-2024-4898

CVE-2024-4898-Poc CVE-2024-4898 InstaWP Connect – 1-click WP Staging & Migration = 0.1.0.38 - Falta de autorización para configuración de API no autenticada/Actualización arbitraria de opciones/Creación de usuario administrador...

CVE-2026-69104

An authenticated user may initiate repository migration operations without required repository permissions, potentially causing information disclosure, unauthorized state changes, and service disruption. Fixed versions address the issue...

CVE-2026-44595

CVE-2026-44595 — YAMCS 未授权用户枚举漏洞（IAM API） 摘要 yamcs-core 中的 IAM API 端点（listUsers、getUser、listGroups、getGroup）未强制执行所需的 SystemPrivilege.ControlAccess 检查。任何已认证的用户——即使是没有任何权限的用户——都可以枚举所有用户账户、超级用户状态和组成员资格。 字段| 值 ---|--- CVE| CVE-2026-44595 严重性| 中危 CVSS 4.3 CWE| CWE-862：缺少授权 影响版本| yamcs-core admin...

CVE-2026-55528 praisonaiagents: AgentServer declares auth_token but never enforces it on any route (CWE-862)

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, AgentServer exposes ServerConfig.authtoken but AgentServer.createapp does not check it on any route. A remote caller can subscribe, publish, and perform other actions without a valid bearer token or X-Auth-Token even when...

CVE-2026-78360

A missing authorization flaw was found in Anitya. The user deletion endpoint checks that the caller is logged in but does not check that the caller is an administrator. Any authenticated user can delete arbitrary user accounts, including administrator accounts, which can remove administrative...

CVE-2024-5326-Poc

CVE-2024-5326 CVE-2024-5326 Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX = 4.1.2 - 缺少授权导致的任意选项更新 描述 Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX WordPress 插件存在由于 'postxpresetscallback' 函数缺少权限检查导致的数据未经授权修改漏洞，影响所有版本至...

CVE-2024-4898-Poc

CVE-2024-4898-Poc CVE-2024-4898 InstaWP Connect – 1-click WP Staging & Migration = 0.1.0.38 - Autorización faltante para configuración de API no autenticada/Actualización arbitraria de opciones/Creación de usuario administrativo...

CVE-2021-38647-noimages

CVE-2021-38647 又名 "OMIGOD" 一个Zeek包，用于检测CVE-2021-38647（又名OMIGOD）的利用尝试。 https://corelight.com/blog/detecting-cve-2021-38647-omigod https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38647 利用...

CVE-2026-79669

Ech0 before 4.4.3 lacks authorization checks on system log endpoints allowing any authenticated non-admin user to read and stream all server logs. Attackers can access historical logs and real-time log streams via GET /api/system/logs, GET /api/system/logs/stream, and WS /ws/system/logs to gather...

CVE-2026-79669

Ech0 versions before 4.4.3 lack authorization checks on system log endpoints, allowing any authenticated non-admin user to read and stream all server logs. The vulnerable endpoints are GET /api/system/logs , GET /api/system/logs/stream , and WS /ws/system/logs . An attacker can gather reconnaissa...

EUVD-2026-65445

Ech0 before 4.4.3 lacks authorization checks on system log endpoints allowing any authenticated non-admin user to read and stream all server logs. Attackers can access historical logs and real-time log streams via GET /api/system/logs, GET /api/system/logs/stream, and WS /ws/system/logs to gather...

CVE-2026-79669 Ech0 before 4.4.3 Missing Authorization on System Logs

Ech0 before 4.4.3 lacks authorization checks on system log endpoints allowing any authenticated non-admin user to read and stream all server logs. Attackers can access historical logs and real-time log streams via GET /api/system/logs, GET /api/system/logs/stream, and WS /ws/system/logs to gather...

CVE-2026-79666

Ech0 versions before 4.4.3 fail to enforce administrator authorization on dashboard log endpoints. Any authenticated user can query GET /api/system/logs and subscribe to SSE and WebSocket log streams, retrieving sensitive operational data including file paths, stack traces, and internal URLs . Th...

EUVD-2026-65448

Ech0 before 4.4.3 fails to enforce administrator authorization on dashboard log endpoints, allowing any authenticated user to access system logs. Attackers with valid user sessions can query GET /api/system/logs and subscribe to SSE and WebSocket log streams to retrieve sensitive operational data...

CVE-2026-17587 My Agile Privacy® <= 3.3.6 - Missing Authorization to Unauthenticated Plugin Settings Modification via map_missing_cookie_shield / map_check_consent_mode_status AJAX Actions

The My Agile Privacy® – CMP, Cookie Consent & Privacy Tools plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.3.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

CVE-2026-17587

My Agile Privacy® – CMP, Cookie Consent & Privacy Tools plugin for WordPress is affected by an authorization bypass in all versions up to and including 3.3.6 . The root cause is missing access-control checks on the map_missing_cookie_shield and map_check_consent_mode_status AJAX actions, allowing...