CVE-2026-73470 Apache Syncope: Delegating users can grant unowned Roles

Improper Privilege Management vulnerability in Apache Syncope. Delegations can be created or updated with Roles not owned by the delegating User, or not for the same Realm subtree under the delegation management was granted for. This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, fro...

EUVD-2026-77464

Improper Privilege Management vulnerability in Apache Syncope. Delegations can be created or updated with Roles not owned by the delegating User, or not for the same Realm subtree under the delegation management was granted for. This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, fro...

CVE-2026-73470

Apache Syncope is affected by an Improper Privilege Management vulnerability in its delegation management feature. Delegations can be created or updated with Roles not owned by the delegating User, or not for the same Realm subtree under which delegation management was granted, allowing users to ...

WordPress PublishPress Authors plugin <= 4.15.0 - Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Authenticated Author+ Stored Cross-Site Scripting vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin PublishPress Authors versions = 4.15.0...

Astra Linux – Vulnerability in Tomcat9

An improper authorization vulnerability in Apache Tomcat occurs due to incorrect use of security-role-ref definitions as role aliases within the Realm, in addition to their proper use in Request.isUserInRole. This issue affects Apache Tomcat versions from 11.0.0-M1 through 11.0.24, from 10.1.0-M1...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: gadget: fix state inconsistency on gadget init failure When cdns3gadgetstart fails, the DRD hardware remains in gadget mode, while the software state remains INACTIVE, resulting in hardware/software state inconsistenc...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: USB: dwc3: core: Remove the lock of the OTG mode during gadget suspension/resumption to avoid deadlock. When the CONFIGUSBDWC3DUALROLE configuration is selected, and the system is triggered to enter suspension using the following...

Astra Linux – Vulnerability in PostgresSQL 11

Incomplete tracking of tables with row security in PostgreSQL allows a reused query to view or modify different rows than intended. CVE-2023-2455 and CVE-2016-2193 addressed most issues related to interactions between row security and changes to user IDs. However, they did not cover cases where a...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: USB: Roles – Fixed NULL pointer issue when referencing the module’s reference. In the current design, the USB role class driver will obtain a reference to the module of the usbroleswitch object after the user selects the...

MOODLE-3.X-Remote-Code-Execution

MOODLE-3.X-远程代码执行 CVE-2018-1133 Moodle 已认证为教师身份下的远程代码执行漏洞。...

CVE-2026-20773 Improper Authorization in PingFederate Administrative Expression Evaluation Endpoint

A role-based access control issue was identified in the administrative expression evaluation functionality. This could allow users with certain administrative roles to access expression testing capabilities beyond their intended permissions...

CVE-2026-20773

CVE-2026-20773 is an improper authorization flaw in PingFederate (Ping Identity), specifically in the administrative expression evaluation endpoint . A role-based access control (RBAC) deficiency allows users holding certain administrative roles to access expression testing capabilities beyond th...

EUVD-2026-77373

A role-based access control issue was identified in the administrative expression evaluation functionality. This could allow users with certain administrative roles to access expression testing capabilities beyond their intended permissions...

CVE-2024-28000-Exploit-Lab

CVE-2024-28000 — Laboratorio LiteSpeed Cache de WordPress Reproducción autorizada en laboratorio local de CVE-2024-28000 , un problema de escalada de privilegios no autenticada que afecta a versiones vulnerables del plugin LiteSpeed Cache de WordPress. Alcance: Este repositorio documenta pruebas...

CVE-2026-29000

CVE-2026-29000: pac4j JWT 认证绕过 PoC 概念验证 用于 CVE-2026-29000 - pac4j JWT 实现中的一个严重认证绕过漏洞，允许攻击者在没有有效签名的情况下伪造管理员令牌。 ⚠️ 免责声明 此工具仅用于教育和授权安全测试目的。作者对任何滥用、损坏或非法使用此漏洞利用不承担任何责任。 未经授权访问计算机系统在大多数司法管辖区是非法的 用户必须获得明确的书面许可 才能进行测试 作者对因滥用此工具而产生的任何后果概不负责 这是一个安全研究和教育工具 - 请合乎道德且合法地使用 📋 漏洞概述 该漏洞利用了 pac4j JWT...

CVE-2025-14156

CVE-2025-14156 Fox LMS – WordPress LMS 插件 1.0.4.7 - 1.0.5.1 – 通过 'createOrder' 实现未认证权限提升 ⚠️ CVE-2025-14156 – Fox LMS WordPress 未认证权限提升利用工具 🛡️ 漏洞概述 Fox LMS – WordPress LMS 插件（v1.0.4.7 至 v1.0.5.1）– 通过createOrder 实现未认证权限提升 所有版本直到并包括 1.0.5.1 的 Fox LMS for WordPress...

CVE-2025-2304-CamaleonCMS-PoC

PoC：CVE-2025-2304 - Camaleon CMS 权限提升 技术概述 本仓库包含一个针对 Camaleon CMS （2.8.1 之前版本）中 Mass Assignment 漏洞的功能性概念验证 PoC。该漏洞位于用户管理模块的 updatedajax 端点，应用程序未能严格过滤 password 参数哈希中的敏感属性。 通过在配置文件更新期间向 password 作用域注入 role 属性，低权限用户可以覆盖自身的权限以获得 admin 状态。 漏洞机制 该漏洞源于 Ruby on Rails 控制器中 Strong Parameters 的配置错误。当应用程序处理...

CVE-2025-39459

CVE-2025-39459 Real Estate 7 = 3.5.2 - 未经授权的权限提升 🧨 CVE-2025-39459 — Real Estate 7 = 3.5.2 未经授权的权限提升 📌 概述 该仓库包含一个针对 CVE-2025-39459 的 Python 概念验证工具，影响 Real Estate 7 WordPress 主题版本 = 3.5.2。 该漏洞允许未经身份验证的攻击者 注册新用户并将权限提升至管理员 ，导致网站完全沦陷。 产品： Real Estate 7（WordPress 主题） 漏洞类型： 未经授权的权限提升 受影响版本： = 3.5.2 CVE：...

CVE

Control Tower Notification Enabler 此 CDK 包安装了一个 Lambda 函数，并关联了一个 IAM 角色，同时将该 Lambda 函数订阅到 Control Tower 聚合安全通知。当发生 Control Tower 规则违规（例如 S3 存储桶公开可访问）时，Lambda 会向 Webhook 发送通知。 前提条件 组织的管理员访问权限。用于在审计账户中扮演 Control Tower 角色。 已安装 AWS CDK 已安装 AWS CLI 第二版 MacOS / Linux 在 macOS 或 Linux 上启用通知时，请以管理员用户身份运行...

PT-2026-91738

ZITADEL is an open source identity management platform. Prior to version 4.16.0, a bug in how ZITADEL updates permissions when multiple project roles are deleted at the same time can cause some user permissions to be missed. This issue specifically affects User Grants on Granted Projects projects...