Azure-APIM-Cross-Tenant-Signup-Bypass

Azure APIM 跨租户注册绕过 状态（2025年12月1日）： 该漏洞仍然存在且可被利用。Microsoft 尚未修复此问题，并认为其“设计使然”。 安全公告 GHSA-vcwf-73jp-r7mv CVE-2025-66390 摘要 Azure API 管理（APIM）开发者门户中的一个安全漏洞允许攻击者在任何启用了基本身份验证的 APIM 实例上注册账户，即使管理员已在门户界面中禁用了用户注册。 该绕过可实现跨租户账户创建，从而可能允许未经授权访问 API 文档、订阅密钥以及通过开发者门户公开的其他资源。 披露时间线 日期| 操作 ---|--- 2025-09-30| 发现漏...

Viral Signup <= 2.1 - SQL Injection

The Viral Signup limited opt-in with viral referral sharing plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 2.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possibl...

CVE-2024-50475

CVE-2024-50475 Signup Page = 1.0 - 未认证的任意选项更新 描述： WordPress的Signup Page插件在所有版本（包括1.0）中因缺少权限检查而存在数据未授权修改漏洞，可导致权限提升。这使得未认证攻击者能够更新WordPress站点的任意选项。此漏洞可被利用将默认注册角色更新为管理员，并启用用户注册，从而使攻击者获得受影响站点的管理员用户访问权限。 Published: 2024-10-25 00:00:00 CVE: CVE-2024-50475 CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A...

Azure-APIM-Dev-Portal-Signup-Bypass

一个用于绕过 Azure API Management APIM 中已禁用开发者门户注册的概念验证脚本，通过直接调用后端注册 API 实现。 功能说明 Azure APIM 开发者门户可以配置为通过门户 UI 禁用自助注册。在某些部署中，即使 UI 按钮被隐藏或移除，底层 API 端点（/signup）仍然保持活动并可达。该脚本利用了这一差距，通过以下方式： 1. 从 /v2/captcha-challenge 获取工作量证明（PoW）验证码挑战 2. 在客户端暴力破解 SHA-256 PoW 解决方案 3. 使用已解决的挑战和账户详情直接向 /signup 提交注册请求 所有输入（目标...

CVE-2024-55963

CVE‑2024‑55963 Appsmith RCE PoC 针对 CVE‑2024‑55963 的 PoC 漏洞利用，可在受影响的 Appsmith 实例上执行任意命令或生成反弹 shell。 它自动兼容现代服务器（具备 environmentId 功能）以及早于该功能的“旧版”构建，因此一个脚本即可覆盖从 v1.20 到最后一个受影响版本 v1.51 的所有版本。 快速开始 Run an arbitrary command default is id python3 appsmith-rce.py https://target.example.com...

AlmaLinux 9.2 [TuxCare] Security Update: grafana Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1751889956)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1751889956 advisory. - Grafana is an open source observability and data visualization platform. Versions prior to 9.1.8 and 8.5.14 are vulnerable to a...

CVE-2026-12416-CVE-2026-12417

CVE-2026-12416-CVE-2026-12417 通过 'resetuserid' 参数弱密码重置验证实现的未认证账户接管 | 通过 'resetactivationcode' 弱密码重置验证导致的未认证权限提升，进而实现账户接管 CVE-2026-12417 与 CVE-2026-12416 — 批量扫描器 作者：Khaled Alenazi Nxploited 漏洞 CVE-2026-12417 — SignUp & SignIn ≤ 1.0.0 通过弱密码重置验证实现的未认证权限提升 字段| 值 ---|--- CVSS| 9.8 严重 向量|...

CVE-2025-49029

🚨 WordPress Custom Login And Signup Widget 插件 🔥 基础分数： 9.1（严重） CWE ID： CWE-94 – 生成代码的控制不当（'代码注入'） 🧠 描述 该插件允许管理员通过设置页面中的发件人名称 字段修改 sn.php 的内容。 用户提供的输入被直接写入 PHP 文件 ，未经清理或验证。 因此，在 text 参数中提供的任何PHP代码都将被存储到PHP文件中，并在直接请求时执行，导致远程代码执行（RCE） 。 📍 漏洞端点...

CVE-2024-5324

CVE-2024-5324 Login/Signup Popup Inline Form + Woocommerce 2.7.1 - 2.7.2 - Autorización faltante para actualización arbitraria de opciones Descripción: El plugin Login/Signup Popup Inline Form + Woocommerce para WordPress es vulnerable a la modificación no autorizada de datos debido a una falta d...

CVE-2026-19804

The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 260814 via the 'firstname' parameter parameter. This is due to insufficient...

Exploit for CVE-2026-14281

CVE-2026-14281 — WAWP Automation Web Platform Unauthenticate...

CVE-2026-19804 s2Member <= 260814 - Unauthenticated Remote Code Execution via 'first_name' Parameter in PayPal Proxy Return

The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 260814 via the 'firstname' parameter parameter. This is due to insufficient...

CVE-2026-19804

The s2Member plugin for WordPress (versions up to and including 260814 ) is vulnerable to Remote Code Execution (RCE) . The root cause is insufficient sanitization of the first_name parameter using esc_refs(), which fails to strip PHP tags before they are substituted into an eval'd Signup Trackin...

CVE-2026-14281 Automation Web Platform <= 4.8.6 - Unauthenticated Privilege Escalation via 'wawp_custom_fields' Parameter

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.6. This is due to missing permission enforcement on the publicly accessible REST route POST...

PT-2026-98362

Name of the Vulnerable Software and Affected Versions Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress versions prior to 4.8.7 Description An issue exists due to missing permission enforcement on the publicly accessible REST route POST...

PT-2026-98385

Name of the Vulnerable Software and Affected Versions s2Member versions prior to 260829 Description Unauthenticated attackers can achieve Remote Code Execution on the server due to insufficient sanitization of the first name parameter. The plugin uses the esc refs function, which only removes reg...

CVE-2026-14281: Improper Privilege Management

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.6. This is due to missing permission enforcement on the publicly accessible REST route POST...

CVE-2026-3253

The MailerLite – Signup forms official plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the forms method of the AdminController class in all versions up to, and including, 1.7.21. This makes it possible for authenticated attackers, with...

EUVD-2026-85854

The MailerLite – Signup forms official plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the forms method of the AdminController class in all versions up to, and including, 1.7.21. This makes it possible for authenticated attackers, with...

CVE-2026-3253

The MailerLite – Signup forms (official) plugin for WordPress is vulnerable to unauthorized modification of data in versions up to and including 1.7.21 . The root cause is a missing capability check on the forms() method of the AdminController class. This vulnerability allows authenticated attack...