CVE-2026-94258

The SMS Alert WordPress plugin versions 3.6.4 through 4.0.0 contains a vulnerability where it fails to verify if an acting administrator has permission to manage specific users before returning their stored billing phone numbers. This flaw allows an administrator of one site on a multisite networ...

sudowp-crowdsignal-forms

SudoWP Crowdsignal Forms هذا فرع أمني من SudoWP للمكوّن الإضافي الأصلي Crowdsignal Forms. !WARNING ملاحظة أمنية : يحتوي المكوّن الإضافي الأصلي "Crowdsignal Forms" الإصدارات = 1.7.2 على ثغرة حرجة في فقدان التفويض CVE-2025-69015 تسمح للمستخدمين المُوثّقين بتعديل استطلاعات الرأي التي لا يملكونها. هذ...

CVE-2024-1086

CVE-2024-1086 إثبات مفهوم عالمي لتصعيد الامتيازات المحلية لـ CVE-2024-1086، يعمل على معظم نوى لينكس بين الإصدارين v5.14 و v6.6، بما في ذلك دبيان وأوبونتو وKernelCTF. نسبة النجاح هي 99.4% في صور KernelCTF...

CVE-2026-87673

An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. The binary fails to sanitize user-supplied input options when invoking underlying system commands through a shell interpreter. A...

CVE-2026-44595

CVE-2026-44595 — تعداد المستخدمين غير المصرح به عبر واجهة برمجة تطبيقات IAM في YAMCS ملخص لا تفرض نقاط نهاية واجهة برمجة تطبيقات IAM listUsers، getUser، listGroups، getGroup في yamcs-core التحقق المطلوب من SystemPrivilege.ControlAccess. يمكن لأي مستخدم مصادق — حتى من ليس لديه صلاحيات — تعداد جميع...

EUVD-2026-94697

An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged hardware tests, force system error conditions, reset...

CVE-2026-87660

An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged hardware tests, force system error conditions, reset...

CVE-2023-2859

CVE-2023-2859: حقن HTML مخزّن في folderName يؤثر على المسؤول في TeamPass 3.0.9 - محمد نديم قاضي مرحباً، لقد اكتشفت ثغرة أمنية كبيرة في تطبيق nilsteampassnet/teampass تتعلق بحقن HTML مخزّن في حقل FolderName. من خلال إدراج كود HTML ضار في حقل FolderName، يستطيع المهاجم تغيير أسماء المجلدات. تفاصيل...

CVE-2017-8759_-SOAP_WSDL

ما هو CVE-2017-8759 هي ثغرة تنفيذ تعليمات برمجية عن بُعد في SOAP WDSL توجد ثغرة أمنية في تنفيذ التعليمات البرمجية عن بُعد عندما يقوم Microsoft .NET Framework بمعالجة إدخال غير موثوق. يمكن للمهاجم الذي نجح في استغلال هذه الثغرة في برنامج يستخدم .NET Framework السيطرة على النظام المتأثر. يمكن للمها...

CVE-2026-94575

A logic vulnerability exists in the Brocade Fabric OS web management framework in versions before 10.0.1 . This flaw allows an authenticated, low-privileged user to bypass inner Role-Based Access Control (RBAC) checks under specific environmental conditions. Successful exploitation can lower the ...

Citrix SD-WAN Center - Local File Inclusion

Citrix SD-WAN Center is susceptible to local file inclusion via the applianceSettingsFileTransfer function in ApplianceSettingsController. The function does not sufficiently validate or sanitize HTTP request parameter values used to construct a file system path. An attacker can trigger this...

Klog Server <=2.41 - Unauthenticated Command Injection

Klog Server 2.4.1 and prior is susceptible to an unauthenticated command injection vulnerability. The authenticate.php file uses the user HTTP POST parameter in a call to the shellexec PHP function without appropriate input validation, allowing arbitrary command execution as the apache user. The...

SimpleHelp <= 5.5.7 - Arbitrary File Upload

SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file i.e. zip slip. This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user. This template is a...

Grafana Post-Auth DuckDB - SQL Injection To File Read

The SQL Expressions experimental feature of Grafana allows for the evaluation of duckdb queries containing user input. These queries are insufficiently sanitized before being passed to duckdb, leading to a command injection and local file inclusion vulnerability. Any user with the VIEWER or highe...

WordPress User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation

User Registration & Membership WordPress plugin = 5.1.2 contains an improper privilege management vulnerability caused by accepting user-supplied roles without server-side allowlist enforcement, letting unauthenticated attackers create administrator accounts id: CVE-2026-1492 info: name: WordPres...

Adobe ColdFusion - Cross-Site Scripting

Adobe Coldfusion versions 2016 update 16 and earlier, 2018 update 10 and earlier and 2021.0.0.323925 are affected by an Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability. An attacker could abuse this vulnerability to execute arbitrary JavaScript code...

OneDev < 4.0.3 - User Access Token Leak

OneDev before version 4.0.3 contains an insecure endpoint that allows retrieval of arbitrary user details, including access tokens, due to missing security checks on /users/id, letting attackers leak sensitive data and impersonate users, exploit requires no special conditions. id: CVE-2021-21246...

Ray < 2.52.0 - Remote Code Execution

Ray versions prior to 2.52.0 allow unauthenticated remote code execution via the job submission API at /api/jobs/. A weak User-Agent heuristic rejecting Mozilla-prefixed headers can be bypassed by non-browser clients, enabling arbitrary command execution when the dashboard is network-reachable. i...

Sneeit WP Social WordPress Plugin - Unauthenticated RCE via call_user_func

The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeitarticlespaginationcallback function. This is due to the function accepting user input and then passing that through calluserfunc. This makes it possible for...

CLEANSTART-2026-KL61134 application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store

Security vulnerability affects the apache-nifi-registry package. An application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store...