2096 matches found
CVE-2026-84795 Craft CMS before 5.10.11 Authentication Bypass via Admin Flag Inheritance
Craft CMS before 5.10.11 fails to validate the admin flag during user registration, allowing it to persist from deactivated admin accounts. Attackers can register with a deactivated admin's email address to inherit administrator privileges when public registration and disabled email verification...
CVE-2026-84795
Craft CMS versions before 5.10.11 contain an authentication bypass via admin flag inheritance . The root cause is a failure to validate the admin flag during user registration, allowing the flag to persist from deactivated admin accounts. When public registration is enabled and email verification...
CVE-2026-84795 Craft CMS before 5.10.11 Authentication Bypass via Admin Flag Inheritance
Craft CMS before 5.10.11 fails to validate the admin flag during user registration, allowing it to persist from deactivated admin accounts. Attackers can register with a deactivated admin's email address to inherit administrator privileges when public registration and disabled email verification...
EUVD-2026-69907
Craft CMS before 5.10.11 fails to validate the admin flag during user registration, allowing it to persist from deactivated admin accounts. Attackers can register with a deactivated admin's email address to inherit administrator privileges when public registration and disabled email verification...
CVE-2021-34621-EXPLOIT
CVE-2021-34621 - ╪к╪╡╪╣┘К╪п ╪з┘Д╪з┘Е╪к┘К╪з╪▓╪з╪к ┘Б┘К ┘И┘И╪▒╪п╪и╪▒┘К╪│ ╪к┘Е ╪к╪н╪п┘К╪п ╪л╪║╪▒╪й ╪г┘Е┘Ж┘К╪й ╪н╪▒╪м╪й ┘Б┘К ┘Е┘Г┘И┘С┘Ж ╪к╪│╪м┘К┘Д ╪з┘Д┘Е╪│╪к╪о╪п┘Е┘К┘Ж ┘Б┘К ╪е╪╢╪з┘Б╪й ProfilePress ╪з┘Д╪о╪з╪╡╪й ╪и┘И┘И╪▒╪п╪и╪▒┘К╪│. ╪к╪│┘Е╪н ┘З╪░┘З ╪з┘Д╪л╪║╪▒╪й ╪з┘Д╪г┘Е┘Ж┘К╪й╪М ╪з┘Д┘Е╪│╪м┘Д╪й ╪и╪▒┘В┘Е CVE-2021-34621╪М ┘Д┘Д┘Е╪│╪к╪о╪п┘Е┘К┘Ж ╪║┘К╪▒ ╪з┘Д┘Е╪╡╪▒╪н ┘Д┘З┘Е ╪и╪з┘Д╪к╪│╪м┘К┘Д ┘Б┘К ╪з┘Д┘Е┘И╪з┘В╪╣ ╪и╪╡┘Д╪з╪н┘К╪з╪к ┘Е╪п┘К╪▒╪М ┘Е┘Е╪з ┘В╪п ┘К╪д╪п┘К ╪е┘Д┘Й ╪з╪о╪к╪▒╪з┘В ┘Г╪з┘Е┘Д ┘Д╪г┘Е┘Ж ╪з┘Д┘Е┘И┘В╪╣...
CVE-2026-36227
CVE-2026-36227: Easy Chat Server 3.1 UserName Path Traversal PoC Este repositorio contiene una prueba de concepto benigna para CVE-2026-36227, un problema de path traversal en el manejo del registro de usuarios de Easy Chat Server 3.1. Este repositorio es ├║nicamente para investigaci├│n de segurida...
CVE-2025-2563
CVE-2025-2563 User Registration & Membership = 4.1.1 - ╪к╪╡╪╣┘К╪п ╪з┘Д╪з┘Е╪к┘К╪з╪▓╪з╪к ╪и╪п┘И┘Ж ┘Е╪╡╪з╪п┘В╪й ╪е╪о┘Д╪з╪б ┘Е╪│╪д┘И┘Д┘К╪й! ╪з┘Д┘Е╪╣┘Д┘И┘Е╪з╪к ╪з┘Д┘Е┘В╪п┘Е╪й ┘Б┘К ┘З╪░┘З ╪з┘Д┘И╪л┘К┘В╪й ╪╣┘Ж ╪з┘Д╪л╪║╪▒╪й ╪з┘Д╪г┘Е┘Ж┘К╪й CVE ┘З┘К ┘Д╪г╪║╪▒╪з╪╢ ╪к╪╣┘Д┘К┘Е┘К╪й ┘И╪е╪╣┘Д╪з┘Е┘К╪й ┘Б┘В╪╖. ╪к╪│╪к┘Ж╪п ╪з┘Д╪к┘Б╪з╪╡┘К┘Д ╪з┘Д┘Е┘В╪п┘Е╪й ╪е┘Д┘Й ┘Е╪╡╪з╪п╪▒ ┘Е╪к╪з╪н╪й ┘Д┘Д╪м┘Е┘З┘И╪▒╪М ┘И╪и╪н╪л ┘И╪к╪н┘Д┘К┘Д ┘В╪з┘Е ╪и┘З ╪з┘Д┘Е╪д┘Д┘Б. ╪з┘Д┘Е╪н╪к┘И┘Й ┘Д┘К╪│ ┘Е╪о╪╡╪╡┘Л╪з ┘Д┘Д╪к╪▒┘И┘К╪м ╪г┘И ╪з┘Д╪к╪┤╪м┘К...
PT-2026-84668
Craft CMS before 5.10.11 fails to validate the admin flag during user registration, allowing it to persist from deactivated admin accounts. Attackers can register with a deactivated admin's email address to inherit administrator privileges when public registration and disabled email verification...
CVE-2026-51788
Security Advisory: CVE-2026-51788 Denial of Service DoS Vulnerability in cleverangeauth v0.1.10 CVE ID: CVE-2026-51788 Status: Assigned Date Discovered: 2026-04-27 Researcher: Aykhan Isgandarli Severity: High CVSS v3.1: 7.5 CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Produc...
drupal8-REST-RCE
drupal8-REST-RCE CVE-2019-6340 drupal8-REST-RCE /node/1 , CVE-2018-7600 drupal8 RCE /user/register Commande Unix/Linux - ex├йcution de code ├а distance commande "id" Utilisation root@kitploit: python drupal8-REST-RCE.py port d├йfini par l'utilisateur python drupal8-REST-RCE.py d├йfaut : 80/tcp mis ├а...
CVE-2024-49328
CVE-2024-49328 WP REST API FNS ; rel="https://api.w.org/" X-Content-Type-Options: nosniff Access-Control-Expose-Headers: X-WP-Total,...
CVE-2025-13342
CVE-2025-13342 PoC The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to unauthorized modification of arbitrary WordPress options in all versions up to, and including, 3.28.20. This allows attackers to register users and set the default role to administrator. Exploitation becomes...
WordPress Custom User Registration Fields for WooCommerce plugin <= 2.2.3 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Custom User Registration Fields for WooCommerce versions = 2.2.3...
CVE-2026-82625
A vulnerability has been found in code-projects Simple Inventory System 1.0. This affects an unknown part of the file /register.php of the component User Registration. Such manipulation of the argument lastname leads to cross site scripting. The attack may be launched remotely. The exploit has be...
CVE-2026-82625
code-projects Simple Inventory System 1.0 contains a stored cross-site scripting (XSS) vulnerability in the /register.php file, specifically in the User Registration component. An attacker can manipulate the last_name argument to inject malicious scripts, with the attack launchable remotely and r...
EUVD-2026-68375
A vulnerability has been found in code-projects Simple Inventory System 1.0. This affects an unknown part of the file /register.php of the component User Registration. Such manipulation of the argument lastname leads to cross site scripting. The attack may be launched remotely. The exploit has be...
CVE-2026-82625 code-projects Simple Inventory System User Registration register.php cross site scripting
A vulnerability has been found in code-projects Simple Inventory System 1.0. This affects an unknown part of the file /register.php of the component User Registration. Such manipulation of the argument lastname leads to cross site scripting. The attack may be launched remotely. The exploit has be...
CVE-2026-4882
CVE-2026-4882 User Registration Advanced Fields = 1.6.20 - рдЕрдирдзрд┐рдХреГрдд рдордирдорд╛рдиреА рдлрд╝рд╛рдЗрд▓ рдЕрдкрд▓реЛрдб рд╡рд┐рд╡рд░рдг : User Registration Advanced Fields = 1.6.20 - рдЕрдирдзрд┐рдХреГрдд рдордирдорд╛рдиреА рдлрд╝рд╛рдЗрд▓ рдЕрдкрд▓реЛрдб рд╡рд┐рд╡рд░рдг WordPress рдХреЗ рд▓рд┐рдП User Registration Advanced Fields рдкреНрд▓рдЧрдЗрди рд╕рдВрд╕реНрдХрд░рдг 1.6.20 рддрдХ urafprofilepictureuploadmethodupload AJAX рдХреНрд░рд┐рдпрд╛ ...
XWiki < 4.10.20 - Remote code execution
XWiki is vulnerable to a remote code execution RCE attack through its user registration feature. This issue allows an attacker to execute arbitrary code by crafting malicious payloads in the "first name" or "last name" fields during user registration. This impacts all installations that have user...
CVE-2026-15369
The Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.3. This is due to the plugin accepting an attacker-controlled afregselectuserrole value from the unauthenticated WooCommerce Store API...