108496 matches found
CVE-2026-104388
The PowerPress Podcasting plugin for WordPress (versions
EUVD-2026-92322
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0...
EUVD-2026-92320
Missing Authorization vulnerability in Jeroen Peters Name Directory name-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Name Directory: from n/a through 1.34.2...
CVE-2026-104397 WordPress Name Directory plugin <= 1.34.2 - Arbitrary Shortcode Execution vulnerability
Missing Authorization vulnerability in Jeroen Peters Name Directory name-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Name Directory: from n/a through 1.34.2...
CVE-2026-104397
The Jeroen Peters Name Directory WordPress plugin (versions up to and including 1.34.2 ) is vulnerable to a Missing Authorization vulnerability. This flaw allows for the exploitation of incorrectly configured access control security levels , potentially leading to Arbitrary Shortcode Execution . ...
log4shell-lab
Este repositorio no tiene un README...
EUVD-2026-92312
Missing Authorization vulnerability in WP Mailster WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through 1.9.0.0...
EUVD-2026-92309
Missing Authorization vulnerability in Brandtoss WP Admin Audit wp-admin-audit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Admin Audit: from n/a through 1.2.17...
CVE-2026-0300
Este repositorio no tiene un README...
CVE-2025-65856
此存储库没有 README。...
EUVD-2026-92304
Missing Authorization vulnerability in WPFunnels Team WP VR wpvr allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP VR: from n/a through 9.1.3...
CVE-2024-12172
CVE-2024-12172 WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses = 3.2.21 - Autorización faltante para usuarios autenticados Suscriptor+ que permite la actualización arbitraria de metadatos de usuario Descripción El plugin WP Courses LMS – Online...
CVE-2026-23744
Este repositorio no tiene un README...
CVE-2025-65857
Este repositorio no tiene un README...
CVE-2018-6574
This repository does not have a README...
CVE-2026-68138
Este repositorio no tiene un README...
Missing Authorization
Apache HBase is vulnerable to Missing Authorization. The vulnerability is due to missing owner checks in the fetch and close steps, where the server uses the scanner ID returned by the open step to identify scanner instances but fails to verify that the ID belongs to the requesting user, allowing...
CVE-2017-5123
CVE-2017-5123 漏洞概述 Linux 内核中的 Waitid 系统调用未验证所使用的目标地址。此缺陷可允许拥有本地权限的用户写入内核内存区域，可能导致设备上的权限提升或沙箱逃逸。 漏洞描述 漏洞分类 权限提升 沙箱逃逸（Chrome） 漏洞代码 kernel/exit.c SYSCALLDEFINE5waitid, int, which, pidt, upid, struct siginfo user , infop, int, options, struct rusage user , ru struct rusage r; struct waitidinfo info =...
Craftcms-PoC-CVE-2026-31266
CVE-2026-31266 - Craft CMS 缺少授权 CVE 信息 字段| 值 ---|--- CVE ID| CVE-2026-31266 供应商| Pixel & Tonic 产品| Craft CMS 受影响版本| self::ALLOWANONYMOUSLIVE | self::ALLOWANONYMOUSOFFLINE, ; 概念验证 当 allowAdminChanges=false 时 curl -X POST "http://target/actions/app/migrate" 证据 攻击前: mysql SELECT COUNT FROM sessions;...