CVE-2026-0920

CVE-2026-0920 扫描器 基于Python的扫描器，用于检测和验证WordPress站点中因使用易受攻击的LA-Studio Element 插件版本而暴露的CVE-2026-0920 漏洞。 概述 该工具旨在自动化识别可能受CVE-2026-0920 影响的WordPress目标，该漏洞涉及易受攻击的插件版本在注册流程中的不恰当角色处理。 脚本处理目标列表，尝试验证检查，并将成功结果记录到输出文件中供后续审查。 功能 多线程目标处理 自动目标规范化 AJAX nonce 提取 针对易受攻击端点的注册流程测试 成功和失败目标的结果记录 自定义邮箱/用户名/密码参数...

CVE-2026-27604: Exposure of Sensitive Information to an Unauthorized Actor

FOSSBilling is a free, open-source billing and client management system. Starting in version 0.5.4 and prior to version 0.8.0, an authorization bypass in the API role handling allows unauthenticated access to privileged /api/system/ endpoints. Because system resolves to the cron admin identity,...

WordPress plugin User Registration & Membership 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

ALSA-2024:10785 Important: postgresql:12 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID CVE-2024-10978 postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code CVE-2024-10979 postgresq...

Exposure of Data Element to Wrong Session

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Exposure of Data Element to Wrong Session due to the improper handling of user roles during the login process. An attacker can gain unauthorized access and perform actions without administrative approval...

Multi-Master Replication Manager for MySQL mmm_agentd Remote Command Injection Vulnerabilities

Summary Multiple exploitable remote command injection vulnerabilities exist in the MySQL Master-Master Replication Manager MMM mmmagentd daemon 2.2.1. mmmagentd commonly runs with root privileges and does not require authentication by default. A specially crafted MMM protocol message can cause a...