8993 matches found
CVE-2026-104472
YesWiki before 4.6.7 contains a missing authorization vulnerability in the attachment download handler that allows unauthenticated attackers to bypass page read ACLs. Attackers can request the download handler with a known page tag and file parameter to retrieve confidential attachments from...
CVE-2026-104455
YesWiki before 4.6.7 contains an access control bypass vulnerability that allows unauthenticated attackers to read restricted page content via the recentchangesrssplus RSS action. Attackers can request the xml method of a page hosting the action to retrieve 500-character body excerpts of every...
CVE-2026-104455 YesWiki before 4.6.7 Read-ACL Bypass via recentchangesrssplus RSS Action
YesWiki before 4.6.7 contains an access control bypass vulnerability that allows unauthenticated attackers to read restricted page content via the recentchangesrssplus RSS action. Attackers can request the xml method of a page hosting the action to retrieve 500-character body excerpts of every...
EUVD-2026-91466
YesWiki before 4.6.7 contains an access control bypass vulnerability that allows unauthenticated attackers to read restricted page content via the recentchangesrssplus RSS action. Attackers can request the xml method of a page hosting the action to retrieve 500-character body excerpts of every...
CVE-2026-104455
YesWiki versions prior to 4.6.7 are vulnerable to an access control bypass via the recentchangesrssplus RSS action. Unauthenticated attackers can request the xml method of a page hosting this action to retrieve 500-character body excerpts of all latest pages. This includes access to read-restrict...
Privilege-escalation-ASKEY
Privilege-escalation-ASKEY-Router-RTF3505VW-N1 CVE-2022-47040 ASKEY 路由器上的权限提升漏洞 设备：ASKEY RTF3505VW-N1 固件：BRSVg000R3505VMN1001s327（未在其他版本上测试） CLI 版本：ReducedCLIHGUv13 漏洞利用： ASKEY RTF3505VW-N1 设备可通过 ssh 访问受限的默认 shell： 该受限 shell 可以访问 "ReducedCLI"，且环境受到限制，无法执行大多数 linux/unix 命令。 受限 shell 中存在 "tcpdump"...
shiro-cve-2010-3863
apach shiro路径穿越 CVE-2010-3863 漏洞复现 docker本地搭建环境 打开yakit抓包 payload:/./admin/ 成功...
CVE-2026-103289
The Ghost content management system, specifically versions 5.9.0 before 6.44.1 , is vulnerable to an authorization bypass within its comments feature . An input validation issue allows authenticated members to access and view restricted comment data for which they lack proper authorization. No sp...
CVE-2026-103289 Ghost 5.9.0 before 6.44.1 Authorization Bypass via Comments
Ghost from 5.9.0 before 6.44.1 contains an input validation issue in the comments feature that allows authenticated members to access comments they are not authorized to view, resulting in disclosure of restricted comment data...
CVE-2026-103289 Ghost 5.9.0 before 6.44.1 Authorization Bypass via Comments
Ghost from 5.9.0 before 6.44.1 contains an input validation issue in the comments feature that allows authenticated members to access comments they are not authorized to view, resulting in disclosure of restricted comment data...
CVE-2026-103289 Ghost 5.9.0 before 6.44.1 Authorization Bypass via Comments
Ghost from 5.9.0 before 6.44.1 contains an input validation issue in the comments feature that allows authenticated members to access comments they are not authorized to view, resulting in disclosure of restricted comment data...
CVE-2026-103271
Ghost versions from 4.0.0 before 6.63.0 are vulnerable to a content API vulnerability that enables unauthenticated visitors to bypass content restrictions. Attackers can directly query the content API to retrieve gated post content without providing any authentication. No specific exploit details...
CVE-2026-103491
In JetBrains YouTrack before 2026.2.19422 iDOR in the issue activities API allowed reading restricted issues...
CVE-2026-103488
In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to add themselves to project teams and access restricted issues...
CVE-2026-103491
In JetBrains YouTrack before 2026.2.19422 iDOR in the issue activities API allowed reading restricted issues...
EUVD-2026-90582
In JetBrains YouTrack before 2026.2.19422 iDOR in the issue activities API allowed reading restricted issues...
CVE-2026-103491
JetBrains YouTrack versions prior to 2026.2.19422 are vulnerable to an Insecure Direct Object Reference (IDOR) flaw within the issue activities API . This vulnerability allows an attacker to read restricted issues that they should not have access to. The base CVSS score is 6.5 (MEDIUM) , indicati...
CVE-2026-103491
In JetBrains YouTrack before 2026.2.19422 iDOR in the issue activities API allowed reading restricted issues...
CVE-2026-103488
JetBrains YouTrack versions prior to 2026.2.19422 are vulnerable to a missing authorization flaw. This vulnerability allows authenticated users to perform unauthorized actions by adding themselves to project teams, subsequently granting them access to restricted issues . Exploitation details are ...