87141 matches found
CVE-2026-56710 Grav Login Plugin before 1.0.16 Privilege Escalation via Unlock
Grav Login plugin versions before 1.0.16 fail to validate the target account's privilege level in the onApiUserListRowAction unlock handler. An attacker with api.users.write permission can clear login lockout counters on admin.super accounts, removing brute-force protection from the...
CVE-2026-19801 BetterLinks <= 3.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Short URL Creation via create_fbs_link AJAX Action
The BetterLinks – Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This...
CVE-2026-19801
The BetterLinks WordPress plugin (Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP) is vulnerable to authorization bypass in all versions up to and including 3.1.0 . The root cause is improper verification of user authorization in the create_fbs_link AJAX action, allowing an...
WordPress BetterLinks – Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP plugin <= 3.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Short URL Creation vulnerability
Missing Authorization to Authenticated Subscriber+ Arbitrary Short URL Creation vulnerability discovered by Wordfence PRISM in WordPress Plugin BetterLinks versions = 3.1.0...
CVE-2024-9234
CVE-2024-9234 GutenKit = 2.1.0 - رفع ملفات تعسفي بدون مصادقة الوصف إضافة GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor لووردبريس معرضة لرفع ملفات تعسفي بسبب عدم وجود فحص للصلاحية في الدالة installandactivatepluginfromexternal نقطة نهاية REST API...
CVE-2013-0156
इस रिपॉजिटरी में README नहीं है।...
cve-2014-2734
इस रिपॉजिटरी में README नहीं है।...
EUVD-2026-65158
A flaw has been found in Faveo Helpdesk up to 2.0.3. This impacts the function FormController::postticketreply of the file app/Http/Controllers/Client/helpdesk/FormController.php of the component post-ticket-reply Endpoint. This manipulation causes missing authentication. The attack can be...
little-joke
Ce depot n’a pas de fichier README...
CVE-2019-6447-ES-File-Explorer
CVE-2019-6447 : Service HTTP non authentifié d'ES File Explorer Un outil de recherche et d'analyse technique implémenté de manière indépendante et soucieux de la sécurité pour CVE-2019-6447 , un service HTTP non authentifié exposé par les versions vulnérables d'ES File Explorer pour Android...
PT-2026-81482
Name of the Vulnerable Software and Affected Versions Alluxio affected versions not specified Description The S3 REST proxy fails to verify AWS Signature Version 4 signatures when using the default configuration. This allows unauthenticated attackers to spoof user identity by extracting usernames...
CVE-2026-75465
An Incorrect Access Control vulnerability exists in the /api.php/user/get_list endpoint of Maccms v10 (version v2026.1000.4055 ). The endpoint performs no authentication or authorization checks, allowing an unauthenticated remote attacker to send a crafted HTTP GET request with limit and offset p...
CVE-2026-14457
RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate...
CVE-2023-40989
Ce depot n’a pas de fichier README...
autogpt-CVE-2026-30950-poc
POC CVE-2026-30950 pour AutoGPT Démonstration de preuve de concept pour CVE-2026-30950, une IDOR authentifiée Absence d'autorisation dans la plateforme AutoGPT qui permet à tout utilisateur connecté de réattribuer — et donc détourner — la session de discussion de tout autre utilisateur via une...
CVE-2026-66908
CVE-2026-66908 — camel-platform-http-main: عدم التحقق من JWT iss/aud مُعاد إنتاج reproducer لإثبات المفهوم PoC قابل للتشغيل للثغرة في Apache Camel، حيث يبني خادم HTTP المضمّن في camel-main موثِّق JWT من keystore وحده عندما لا يكون jwtIssuer ولا jwtAudience مضبوطين، لذا تُفحص الرموز الواردة من حيث...
CVE-2025-49844
Ce depot n’a pas de fichier README...
CVE-2025-4389
CVE-2025-4389 Эксплойт Детали Опубликовано : 16 мая 2025 г. Обновлено : 17 мая 2025 г. Критичность : Критический оценка CVSS: 9.8 CWE : CWE-434: CWE-434 Неограниченная загрузка файла опасного типа Затронутые версии : Все версии от n/a до 2.6.8.1 Исследователь :...
CVE-2025-2907
استغلال CVE-2025-2907 التفاصيل نشر : 2025-04-04 تحديث : 2025-03-28 الخطورة : حرجة درجة CVSS: 9.8 CWE : CWE-862: CWE-862 نقص التفويض الإصدارات المتأثرة : جميع الإصدارات من n/a حتى 12.3.1 الباحث : https://www.wordfence.com/threat-intel/vulnerabilities/researchers/mike-gozdiskowski متجه CVSS إصدار...