EUVD-2026-96561

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysLogController delete handler that allows any authenticated user to delete audit log entries. Low-privileged attackers can obtain log ids from the unguarded /sys/log/list endpoint and delete chosen syslog records to...

EUVD-2026-96562

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysLogController deleteBatch handler that allows any authenticated user to delete system audit log entries. Low-privileged attackers can send a DELETE request with ids set to allclear to wipe the entire syslog table,...

EUVD-2026-96556

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to create message templates by calling POST /sys/message/sysMessageTemplate/add. Attackers holding only minimal roles can insert arbitrary notification templates with chosen codes...

EUVD-2026-96552

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController release handler that allows any authenticated user to publish or unpublish other users' AI applications. Low-privileged attackers can send POST requests to /airag/app/release to obtain share tokens...

EUVD-2026-96555

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController deleteBatch handler that allows any authenticated user to delete AI evaluator records. Low-privileged attackers can send comma-separated ids to DELETE /airag/extData/deleteBatch, which lacks owner...

EUVD-2026-96557

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to modify message templates via PUT /sys/message/sysMessageTemplate/edit. Attackers can obtain template ids from the unguarded list endpoint and overwrite system notification titl...

EUVD-2026-96549

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController edit handler that allows any authenticated user to modify word templates. Low-privileged attackers can send PUT or POST requests to /airag/word/edit to overwrite shared templates that other...

EUVD-2026-96550

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController delete handler that allows any authenticated user to delete word templates. Low-privileged attackers can send DELETE requests to /airag/word/delete with an id parameter to permanently remove a...

EUVD-2026-96551

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController deleteBatch handler that allows low-privileged authenticated users to delete word templates. Attackers can send a DELETE request to /airag/word/deleteBatch with comma-separated ids to...

EUVD-2026-96545

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController deleteById handler that allows any authenticated user to delete OCR records. Low-privileged attackers can obtain record ids from the unguarded GET /airag/ocr/list endpoint and repeatedly delete every...

EUVD-2026-96544

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController updateById handler that allows any authenticated user to modify global OCR templates. Low-privileged attackers can send PUT requests to /airag/ocr/edit to overwrite LLM prompts in the shared airag:ocr...

CVE-2025-26417

इस रिपॉजिटरी में README नहीं है।...

papercut-toolkit

Kit de Defesa para PaperCut CVE-2026-81578 + CVE-2026-82078 Um kit defensivo para verificar e compreender a exposição às vulnerabilidades encadeadas de execução remota de código sem autenticação no PaperCut: CVE-2026-81578 — Ausência de Autenticação para Função Crítica CWE-306. Uma solicitação...

CVE-2024-11643

CVE-2024-11643 Accessibility by AllAccessible input type="hidden" name="optname" value="defaultrole...

MDC

Este repositorio nao tem um README...

CVE-2026-55994

Reproductor de Injeção de User-Header camel-iggy CVE-2026-55994 Este projeto demonstra uma injeção de cabeçalho de mensagem no componente camel-iggy do Apache Camel, rastreada como CVE-2026-55994. O consumidor Iggy copia os user-headers de uma mensagem de entrada para o Camel Exchange sem...

cve-2023-3519

Este repositorio nao tem um README...

CVE-2024-4875

CVE-2024-4875 HT Mega – Absolute Addons For Elementor = 2.5.2 - विकल्प अपडेट हेतु प्राधिकरण का अभाव विवरण: WordPress के लिए HT Mega – Absolute Addons For Elementor प्लगइन, संस्करण 2.5.2 तक 2.5.2 सहित, 'ajaxdismiss' फ़ंक्शन पर क्षमता जाँच capability check की कमी के कारण डेटा के अनधिकृत संशोधन|डेटा...

CVE-2023-6700

CVE-2023-6700 Cookie Information | Solução Gratuita de Consentimento GDPR = 2.0.22 - Atualização Arbitrária de Opções Autenticada Subscriber+ Descrição: CVE-2023-6700 O plugin Cookie Information | Free GDPR Consent Solution para WordPress é vulnerável a atualizações arbitrárias de opções devido a...

CVE-2024-30485

Exploit CVE-2024-30485 📌 Visão Geral CVE-2024-30485 é uma vulnerabilidade de alta gravidade encontrada no plugin Finale Lite para WordPress versões = 2.18.0. A vulnerabilidade permite que usuários autenticados Assinante+ instalem e ativem plugins arbitrários sem a devida autorização. Gravidade :...