CVE-2026-104682

The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post they name rather than that they are allowed to create the Envira Gallery WordPress plugin before 1.16.2's own gallery...

CVE-2026-104682 Envira Gallery < 1.16.2 - Contributor Missing Authorization via Convert Gallery REST Route

The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post they name rather than that they are allowed to create the Envira Gallery WordPress plugin before 1.16.2's own gallery...

EUVD-2026-96741

The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post they name rather than that they are allowed to create the Envira Gallery WordPress plugin before 1.16.2's own gallery...

hpfeeds

hpfeeds About hpfeedsは、軽量で認証付きのパブリッシュ/サブスクライブプロトコルです。シンプルなワイヤーフォーマットを備えているため、誰でもお気に入りの言語でほぼ即座にフィードにサブスクライブできます。異なるフィードはチャンネルごとに分離され、任意のバイナリペイロードをサポートします。つまり、チャンネルの利用者がデータ構造を決定します。hpfeedsではJSONをやり取りするのが一般的です。 このプロジェクトは、asyncio上に構築されたモダンなPython 3互換のブローカーと、Python 3互換のクライアントを提供することを目的としています。...

SiYuan <= v3.6.1 - Bookmark Data Disclosure

SiYuan v3.6.2 contains an information disclosure vulnerability caused by improper authorization checks in the publish service's bookmark filtering, letting unauthenticated visitors access bookmarked blocks from password-protected documents, exploit requires access to the publish service. id:...

SiYuan <=3.7.2 - SQL Injection

SiYuan before v3.7.3 contains a SQL injection caused by direct concatenation of the keyword parameter in /api/filetree/searchDocs endpoint, letting attackers with publish RoleReader token or unauthenticated in publish mode read and modify database content. id: CVE-2026-69085 info: name: SiYuan...

SiYuan <= 3.6.5 - Unauthenticated Path Traversal

SiYuan = 3.6.5 contains a path traversal via double URL-encoding in the /assets/ route publish mode port 6808, allowing unauthenticated attackers to read arbitrary files inside WorkspaceDir including conf/conf.json which exposes the API token and access auth code. id: CVE-2026-54066 info: name:...

EUVD-2026-96552

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController release handler that allows any authenticated user to publish or unpublish other users' AI applications. Low-privileged attackers can send POST requests to /airag/app/release to obtain share tokens...

CVE-2026-108613

Versions of JeecgBoot through 3.9.5 are affected by a missing authorization vulnerability within the AiragAppController release handler. This flaw allows any authenticated user to perform unauthorized actions on other users' AI applications. Specifically, a low-privileged attacker can send POST r...

CVE-2024-50335

CVE-2024-50335：已验证的XSS漏洞在“发布密钥”字段中允许未经授权的管理员用户创建 摘要 SuiteCRM 编辑个人资料页面中的“发布密钥”字段存在反射型跨站脚本（XSS）漏洞，允许攻击者注入恶意 JavaScript 代码。该漏洞可被利用来窃取 CSRF 令牌并执行未经授权的操作，例如在没有适当认证的情况下创建新的管理员用户。 详情 该漏洞源于 SuiteCRM 应用程序对发布密钥字段的输入验证和清理不足。当攻击者注入恶意脚本时，该脚本会在已认证用户的会话上下文中执行。注入的脚本（o.js）随后利用捕获的 CSRF 令牌伪造请求，创建新的管理员用户，从而有效破坏 CRM...

CVE-2018-11686

CVE-2018-11686 CVE-2018-11686 - FlexPaper PHP Publish Service RCE = 2.3.6 발견자: Red Timmy Security 기술 분석: https://www.exploit-db.com/docs/english/46521-flexpaper-=-2.3.6-remote-code-execution-whitepaper.pdf 보안 권고: 알 수 없음 개념 증명: 1. config 파일 제거 FlexPaperPHP의 changeconfig.php 파일은 관리자가 제대로 인증되었는지 확인하...

CVE-2026-68004

CVE-2026-68004：SRS 인증되지 않은 RTMP Publish 개요 이 저장소는 CVE-2026-68004에 대한 기술 보고서와 개념 증명PoC을 포함합니다. CVE-2026-68004는 vhost.security가 비활성화되어 있고 다른 publish 인증이 구성되지 않은 OSSRS / SRS 배포 환경에서 발생하는 인증되지 않은 RTMP publish 문제입니다. 파일 파일| 용도 ---|--- CVEReportSRSUnauthPublish.md| 취약점 보고서 pocsrsunauthpublish.py| 표준...

EUVD-2026-96058

The Hello Plus plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with Contributor-level access...

CVE-2026-8054

1. 취약점 개요 CVE-2026-8054는 dotCMS Core의 퍼블리시 감사 APIPublish Audit API에 존재하는 고위험 인증 불필요 SQL 인젝션 취약점Pre-auth SQL Injection입니다. 이 취약점은 공식적으로 보안 이벤트 SI-75 로 추적되었으며, 2026년 5월 말에 공식적으로 등록 및 공개되었습니다. 공격자가 별도의 계정 권한 없이 원격으로 트리거할 수 있기 때문에 잠재적 피해가 매우 심각합니다. 속성| 값 ---|--- CVE 번호| CVE-2026-8054 공식 추적| SI-75 취약점...

CVE-2026-104079 Envira Gallery Lite < 1.16.2 Missing Authorization via Gallery Conversion REST Endpoint

Envira Gallery Lite before 1.16.2 contains a missing authorization vulnerability in its gallery conversion REST endpoint that allows lower-privileged authenticated users to create and publish Envira galleries without the required capabilities, because the endpoint only checks edit permissions on...

PT-2026-108880

Envira Gallery Lite before 1.16.2 contains a missing authorization vulnerability in its gallery conversion REST endpoint that allows lower-privileged authenticated users to create and publish Envira galleries without the required capabilities, because the endpoint only checks edit permissions on...

CVE-2026-97147

In OpenStack Mistral through 23.0.0, several of the v2 API write paths resolve the target object with a query that can return another project's resource, then write to it. An authenticated project member can use this to rewrite and un-publish another project's public action definitions and...

CVE-2026-97147

The OpenStack Mistral service (through version 23.0.0 ) contains an incorrect authorization vulnerability in several v2 API write paths . The root cause is that these paths resolve target objects using a query that can return resources belonging to different projects, subsequently allowing unauth...

GO-2026-6654 SiYuan: 17 block metadata/content endpoints in kernel/api/block.go have zero publish-access filtering, reachable by anonymous publish-mode readers in github.com/siyuan-note/siyuan/kernel

SiYuan: 17 block metadata/content endpoints in kernel/api/block.go have zero publish-access filtering, reachable by anonymous publish-mode readers in github.com/siyuan-note/siyuan/kernel...

CVE-2026-103870

A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as directory names. A user who can sync or upload that tree can make the publish task create a new directory outside the task work area and write that tree's repository metadata and...