CVE-2026-112182

OpenKM Community Edition contains an authorization vulnerability within its workflow definition management. The REST endpoints registerProcessDefinition and runProcessDefinition authenticate users but fail to verify roles in the WorkflowService or underlying layers. Consequently, an attacker with...

WordPress Userpro Remote File Upload Exploit

This Metasploit module exploits an arbitrary PHP code upload in thewordpress Ifileupload plugin, The vulnerability allows for unauthorization file upload and remote code execution. Exploit Title : Wordpress Userpro Remote File Upload Exploit Author : Ashiyane Digital Security Team Vendor Homepage...