112248 matches found
CVE-2026-105995
The Booking Package WordPress plugin, in versions before 1.7.30 , is vulnerable to an information disclosure flaw. The plugin fails to perform necessary authorization checks before returning stored reservation data. This allows unauthenticated users to access and disclose sensitive information, i...
CVE-2026-105976
The Portfolio Filter Gallery WordPress plugin (versions before 2.2.1 ) is vulnerable to an incorrect authorization flaw (CWE-863). The plugin fails to perform proper authorization checks within a set of AJAX actions , which allows users with at least the Contributor role to perform unauthorized a...
OWASSRF
This repository does not have a README...
CVE-2022-36539
CVE-2022-36539 Insecure Direct Object Reference IDOR WeDayCare B.V. WeDayCare B.V Ouderapp before v1.1.22 allows attackers to alter the ID value within intercepted calls to gain access to data of other parents and children. Traffic with the API is made transparent via a proxy such as Burp Suite...
CVE-2015-1328
tes...
CVE-2022-1388
This repository does not have a README...
CVE-2024-34444-Exploit-Poc
CVE-2024-34444 - Slider Revolution Missing Authorization Scanner Professional mass scanner for CVE-2024-34444 affecting Slider Revolution WordPress plugin 6.7.0 Banner 🎯 Description CVE-2024-34444 is a Missing Authorization vulnerability in the Slider Revolution WordPress plugin versions 6.7.0...
CVE-2024-0509
This repository does not have a README...
EUVD-2026-96085
The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference / Missing Authorization in versions up to, and including, 5.7.2. This is due to the publicly reachable stepsstart and stepsloadstep routes...
CVE-2017-3248
This repository does not have a README...
CVE-2026-5201
CVE-2026-5201 Heap-based buffer overflow in gdk-pixbuf JPEG loader Hi, I'm Kağan Çapar. I discovered a heap-based buffer overflow vulnerability in gdk-pixbuf's JPEG image loader that affects virtually all Linux desktop environments. The vulnerability was assigned CVE-2026-5201 and acknowledged by...
CVE-2026-41452-PoC
CVE-2026-41452 — Krayin CRM Installer Auth Bypass → Admin Takeover CVSS 9.8 Critical · CWE-287 / CWE-306 · Jiva writeup · VulnCheck Summary Krayin CRM's installer exposes POST /install/api/admin-config-setup plus run-migration, run-seeder without CSRF protection withoutMiddleware'web' group. The...
CVE-2025-49844
This repository does not have a README...
ms09050
This repository does not have a README...
CVE-2017-12624
This repository does not have a README...
routerfirmwares
This repository does not have a README...
CVE-2024-31508
This repository does not have a README...
Rie
This repository does not have a README...