11117 matches found
PT-2026-83497
The Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.3. This is due to the plugin accepting an attacker-controlled afreg select user role value from the unauthenticated WooCommerce Store API...
CVE-2024-28000
CVE-2024-28000 - LiteSpeed Cache Privilege Escalation PoC !WARNING This repository is intended for educational and research purposes only. Use the provided PoC exclusively on systems you own or have explicit permission to test. Unauthorized access , exploitation, or misuse of any material in this...
CVE-2025-2563
CVE-2025-2563 O plugin User Registration & Membership para WordPress anterior à versão 4.1.2 não impede que os usuÑrios definam a função de suas contas quando o Membership Addon estÑ habilitado, levando a um problema de escalonamento de privilégios e permitindo que usuÑrios não autenticados...
CVE-2026-55764
Klever-Go (the Go implementation of the Klever blockchain protocol), prior to 1.7.19 , contains a signed int64 overflow in the semi-fungible token add-quantity path. In core/kapp/systemAccount/systemAcount.go, SFTAddCirculation added amount to meta.Circulation before comparing against MaxSupply, ...
CVE-2026-55764 Klever-Go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, Klever-Go allows a mint-role holder to bypass a finite per-nonce MaxSupply on the semi-fungible token add-quantity path. In core/kapp/systemAccount/systemAcount.go, SFTAddCirculation performed meta.Circulation ...
DB_Audit_Research
Self-Defeating Audits β reproduzierbares Labor Lizenz: MIT Code / CC BY 4.0 Doku Forschung zur defensiven Sicherheit, die testet, ob eine privilegienarme, nur zur Injektion fΓ€hige Datenbankrolle einen trigger-basierten Auditor reversibel blenden und die Attribuierung auf Standard-PostgreSQL...
CVE-2026-72585-PoC
CVE-2026-72585 β Grafana: Correzione incompleta di CVE-2026-21724 consente al ruolo Editor di eliminare i contact point protetti Prodotto: Grafana Grafana Labs β fino alla 13.2.0 File: pkg/services/ngalert/provisioning/contactpoints.go CWE: CWE-284 β Controllo degli accessi improprio CVSS 3.1:...
CVE-2024-50485
CVE-2024-50485 Exam Matrix = 1.5 - Escalation dei privilegi non autenticata Descrizione: Il plugin Exam Matrix per WordPress Γ¨ vulnerabile all'escalation dei privilegi in tutte le versioni fino alla 1.5 inclusa. CiΓ² Γ¨ dovuto al fatto che il plugin non limita adeguatamente le funzionalitΓ , rendend...
GHSA-CVW4-55PP-3HFQ Yamcs's Missing Authorization on Role and Privilege Enumeration Endpoints Allows Any Authenticated User to Disclose Full Security Configuration
Summary Missing authorization checks on three IAM API endpoints GET /api/roles, GET /api/roles/name, GET /api/privileges allow any authenticated user β regardless of their assigned permissions β to enumerate the complete list of system privileges and role definitions. An attacker with only a...
Yamcs's Missing Authorization on Role and Privilege Enumeration Endpoints Allows Any Authenticated User to Disclose Full Security Configuration
Summary Missing authorization checks on three IAM API endpoints GET /api/roles, GET /api/roles/name, GET /api/privileges allow any authenticated user β regardless of their assigned permissions β to enumerate the complete list of system privileges and role definitions. An attacker with only a...
CVE-2026-55547
CVE-2026-55547 affects Yamcs , a mission control framework, in versions prior to 5.12.8 and 5.13.2 . The root cause is missing SystemPrivilege.ControlAccess authorization checks in three IAM API endpoints (GET /api/roles, GET /api/roles/{name}, GET /api/privileges) within IamApi.java. Any authent...
EUVD-2026-67840
Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs omits SystemPrivilege.ControlAccess checks from IamApi.listRoles, IamApi.getRole, and IamApi.listPrivileges in yamcs-core/src/main/java/org/yamcs/http/api/IamApi.java. Any authenticated account can call GET /api/roles, GET...
GHSA-962X-CCWF-8X6P Yamcs Core API has Multiple Missing Function Level Access Control vulnerabilities
Summary Multiple Missing Function Level Access Control vulnerabilities exist in the Yamcs Core API. These vulnerabilities allow any authenticated user, regardless of their assigned roles or privileges e.g., an unprivileged "Guest", to bypass intended access controls. An attacker can exploit these...
CVE-2026-4484
CVE-2026-4484 Masteriyo LMS = 2.1.6 - Autorizzazione mancante per l'escalation dei privilegi da autenticato Studente+ ad Amministratore π΄ Panoramica della vulnerabilitΓ CVE-2026-4484 β Escalation dei privilegi autenticata Studente β Amministratore Descrizione: Il plugin Masteriyo LMS per WordPres...
CVE-2026-1492
CVE-2026-1492 User Registration & Membership = 5.1.2 - Escalation dei Privilegi Non Autenticata tramite la Registrazione alla Membership π΄ Panoramica della VulnerabilitΓ CVE-2026-1492 β Escalation dei Privilegi Non Autenticata tramite la Registrazione alla Membership Descrizione: Il plugin User...
CVE-2026-0920-
CVE-2026-0920- LA-Studio Element Kit fΓΌr Elementor π‘ Der Exploit erscheint hier zuerst. Folge @KNxploited auf Telegram β dein Elite-Feed fΓΌr frisch verΓΆffentlichte CVEs, funktionierende PoCs und prΓ€zise Sicherheitsforschung. UnermΓΌdlich aktualisiert. Entwickelt fΓΌr alle, die immer einen Schritt...
EUVD-2026-67810
HyperDX through 1.10.1 fails to enforce role-based access controls in team management endpoints, allowing any team member to perform administrative actions. Attackers can delete team members including owners, rotate API keys, and rename teams by sending requests to PATCH /team/apiKey, PATCH...
CVE-2026-82279
HyperDX through version 1.10.1 fails to enforce role-based access control on team management endpoints, allowing any authenticated team member (low privileges) to perform administrative actions. Specifically, requests to PATCH /team/apiKey , PATCH /team/name , and DELETE /team/member can be used ...
