CVE-2025-6254

CVE-2025-6254 — Doctreat Core = 1.6.8 — Unauthenticated Privilege Escalation via Role Injection 🔥 Vulnerability Summary The WordPress plugin Doctreat Core versions = 1.6.8 is vulnerable to an unauthenticated privilege escalation vulnerability. This critical flaw allows unauthenticated attackers t...

CVE-2026-5118

🔥 CVE-2026-5118 Divi Form Builder One hidden field. One changed value. Full access to the entire website. 🧨 What an Attacker Can Do? 🔬 Vulnerability Analysis Vulnerability Location root@kitploit: includes/shared/handlers/FormSubmissionHandler.php → createuser Vulnerable Code root@kitploit: // Lin...

CVE-2026-5118

CVE-2026-5118 — Divi Form Builder ≤ 5.1.2 Escalada de Privilegios No Autenticada mediante Inyección de Rol === Beelze zeroday 1diot9 === 📋 Información de la Vulnerabilidad Campo| Detalles ---|--- CVE ID| CVE-2026-5118 Puntuación CVSS| 9.8 Crítica Vector CVSS|...

CVE-2025-2304-CamaleonCMS-PoC

PoC: CVE-2025-2304 - Escalation dei Privilegi in Camaleon CMS Panoramica Tecnica Questo repository contiene un Proof of Concept PoC funzionale per una vulnerabilità di Mass Assignment in Camaleon CMS versioni precedenti alla 2.8.1. La vulnerabilità risiede nell'endpoint updatedajax del modulo di...

CVE-2025-2563

CVE-2025-2563 O plugin User Registration & Membership para WordPress anterior à versão 4.1.2 não impede que os usuários definam a função de suas contas quando o Membership Addon está habilitado, levando a um problema de escalonamento de privilégios e permitindo que usuários não autenticados...

CVE-2026-4484

CVE-2026-4484 Masteriyo LMS = 2.1.6 - Autorizzazione mancante per l'escalation dei privilegi da autenticato Studente+ ad Amministratore 🔴 Panoramica della vulnerabilità CVE-2026-4484 — Escalation dei privilegi autenticata Studente → Amministratore Descrizione: Il plugin Masteriyo LMS per WordPres...

CVE-2026-1492

CVE-2026-1492 User Registration & Membership = 5.1.2 - Escalation dei Privilegi Non Autenticata tramite la Registrazione alla Membership 🔴 Panoramica della Vulnerabilità CVE-2026-1492 — Escalation dei Privilegi Non Autenticata tramite la Registrazione alla Membership Descrizione: Il plugin User...

CVE-2025-2304_POC

CVE-2025-2304POC CVE-2025-2304 POC - Escalation dei privilegi di Camaleon CMS Questo POC viene utilizzato per sfruttare i privilegi di Camaleon CMS fino a diventare amministratore. L'exploit funziona iniettando un ruolo nella funzione di reset della password di un utente autenticato. Prerequisiti...

CVE-2026-1492

CVE-2026-1492 - Exploit di Privilege Escalation per il Plugin WordPress User Registration Descrizione Questo repository contiene un proof-of-concept per lo sfruttamento di CVE-2026-1492 , una vulnerabilità critica che interessa il plugin WordPress User Registration & Membership. La vulnerabilità...

CVE-2025-14736

CVE-2025-14736 Frontend Admin by DynamiApps - Escalation dei privilegi non autenticata Autore: Hyun Chiya Informazioni sulla vulnerabilità Campo| Valore ---|--- ID CVE| CVE-2025-14736 Plugin| Frontend Admin by DynamiApps Versioni interessate| B"Extract Nonce acfnonce & Form ID acfform" B --...

CVE-2026-5118

CVE-2026-5118 — Divi Form Builder = 5.1.2 — Nicht authentifizierte Privilegienausweitung durch Rolleninjektion 🔥 Zusammenfassung der Sicherheitslücke Das WordPress-Plugin Divi Form Builder in Versionen = 5.1.2 ist anfällig für eine nicht authentifizierte Privilegienausweitung. Dieser kritische...

CVE-2026-9816 Insufficient server-side validation of board member role fields permits privilege escalation

Mattermost versions 11.7.x = 11.7.6, 10.11.x = 10.11.21, 11.8.x = 11.8.3 fail to validate BoardMember.Scheme fields server-side on insert and archive-import paths which allows a board editor or non-guest team member to grant board admin to arbitrary users via POST /api/v2/boards/boardID/members a...

sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation

A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object granting root-level sudo...

CVE-2026-14474

A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object granting root-level sudo...

DEBIAN-CVE-2026-14474

A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object granting root-level sudo...

CVE-2026-14474

A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object granting root-level sudo...

CVE-2026-14474

SSSD (System Security Services Daemon) LDAP sudo provider is vulnerable when ldap_sudo_search_base is not configured; SSSD will search the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object, granting root-level ...

CVE-2026-14474 Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation

A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object granting root-level sudo...

CVE-2026-14474

A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object granting root-level sudo...

PT-2026-44186

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw exists in the Fine-Grained Admin Permissions FGAPv2 feature. An administrator with limited client management permissions can assign any realm role, including highly privileged ones, t...