CVE-2022-22965-Spring4Shell

لا يحتوي هذا المستودع على ملف README...

CVE-2026-56423-MISP-deleteSelection-BrokenAccessControl

CVE-2026-56423 — MISP deleteSelection बिगड़ा पहुँच नियंत्रण MISP के बल्क डिलीट फ़्लो में इवेंट रिपोर्ट और शेयरिंग ग्रुप के लिए लापता प्राधिकरण दोष का अवधारणा प्रमाण। deleteSelection हैंडलर प्रत्येक चयनित आइटम को एक कॉलबैक के साथ प्राधिकृत करते हैं जो आइटम को अनदेखा करता है और कॉल करने वाले की...

CVE-2026-103337

Missing Authorization vulnerability in Kirillbdev WC Ukraine Shipping wc-ukr-shipping allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WC Ukraine Shipping: from n/a through 1.23.2...

CVE-2026-105695

The open-source design and prototyping platform Penpot contains a missing authorization vulnerability in its chunked-upload assembly functionality. Prior to version 2.18.0 , the assemble-chunks function retrieves an upload session using only its session ID, failing to scope the lookup to the auth...

CVE-2026-105695 Penpot: Missing authorization in chunked-upload assembly lets another authenticated user consume a victim's upload session

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, assemble-chunks retrieves an upload session using only its session ID, while upload-chunk correctly scopes the lookup to the authenticated profile. An authenticated user who obtains another user's live, completed...

CVE-2026-105695 Penpot: Missing authorization in chunked-upload assembly lets another authenticated user consume a victim's upload session

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, assemble-chunks retrieves an upload session using only its session ID, while upload-chunk correctly scopes the lookup to the authenticated profile. An authenticated user who obtains another user's live, completed...

CVE-2026-105695 Penpot: Missing authorization in chunked-upload assembly lets another authenticated user consume a victim's upload session

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, assemble-chunks retrieves an upload session using only its session ID, while upload-chunk correctly scopes the lookup to the authenticated profile. An authenticated user who obtains another user's live, completed...

CVE-2026-51947-Advisory

इस रिपॉजिटरी में README नहीं है।...

CVE-2026-105687 Penpot: A team admin (non-owner) can remove the team owner via ::delete-team-member — missing owner-protection

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the delete-team-member RPC allows a team administrator to remove any member other than themselves but does not protect the team owner. A non-owner administrator can delete the owner's team-profile-rel membership and lock t...

CVE-2022-3992

CVE-2022-3992 ثغرة برمجة نصية عبر المواقع XSS في WonderCMS الوصف: تسمح ثغرة أمنية من نوع البرمجة النصية عبر المواقع XSS في نظام إدارة التعقيم الإصدار 1.0 للمهاجمين المحتملين برفع ملفات عشوائية عبر اسم معدل في حقول شعار النظام ضمن حقول معلومات النظام. لا يحتوي ملف تعريف الارتباط على علامة HttpOnly...

CVE-2024-7135

CVE-2024-7135 إن إضافة Tainacan لـ WordPress معرضة للوصول غير المصرح به إلى البيانات بسبب عدم وجود فحص للصلاحية في الدالة 'getfile' في جميع الإصدارات حتى 0.21.7 وما يشملها. كما أن الدالة معرضة أيضًا لثغرة اجتياز الدليل directory traversal. وهذا يتيح للمهاجمين المصادق عليهم، من مستوى Subscriber فم...

CVE-2026-97303

Missing Authorization vulnerability in Apps Mav Scratch & Win – Giveaways and Contests scratch-win-giveaways-for-website-facebook allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Scratch & Win – Giveaways and Contests: from n/a through 3.0.2...

CVE-2026-97304

Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Timetics: from n/a through 1.0.63...

CVE-2026-97309

Missing Authorization vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Retrieve Embedded Sensitive Data.This issue affects RepairBuddy: from n/a through 4.1226...

CVE-2026-58865

In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-103086

Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UsersWP: from n/a through 1.2.74...

CVE-2026-102383

Missing Authorization vulnerability in VillaTheme Lookzy woo-lookbook allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lookzy: from n/a through 1.1.14...

CVE-2026-20253

CVE-2026-20253 — Splunk Enterprise प्री-ऑथ RCE लैब अप्रमाणित मनमाना फ़ाइल निर्माण और कटाव PostgreSQL साइडकार के माध्यम से CVSS 9.8 · क्रिटिकल · CWE-306 · सक्रिय रूप से शोषित CISA KEV ⚠️ अस्वीकरण यह रिपॉजिटरी केवल शैक्षिक और अधिकृत सुरक्षा अनुसंधान उद्देश्यों के लिए है। सभी परीक्षण आपके स्वामित्व...

EUVD-2026-92618

In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58865

In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...