CVE-2026-100276

In JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow action's visibility restriction and run the action...

CVE-2026-100258

In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read project settings...

EUVD-2026-90002

In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read project settings...

CVE-2026-94178

Subscriber Privilege Escalation in Import and export users and customers = 2.5.2 versions...

CVE-2026-62081

Contributor Insecure Direct Object References IDOR in Flexible PDF Coupons = 1.14.11 versions...

CVE-2026-94178

The WordPress Import and export users and customers plugin, versions

CVE-2026-94178 WordPress Import and export users and customers plugin <= 2.5.2 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in Import and export users and customers = 2.5.2 versions...

CVE-2026-94178 WordPress Import and export users and customers plugin <= 2.5.2 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in Import and export users and customers = 2.5.2 versions...

EUVD-2026-89820

Contributor Insecure Direct Object References IDOR in Flexible PDF Coupons = 1.14.11 versions...

CVE-2024-8465-PoC

CVE-2024-8465 – Prueba de Concepto de Inyección SQL Información del Equipo Nombre del Equipo: The Misfits Miembros del Equipo: Muhammad Tayyab Nisar Oluwasola SAMUEL Abubakar Mohamed Melek Balghouthi Resumen Este repositorio contiene una aplicación web vulnerable creada como una Prueba de Concept...

CVE-2026-102585

A flaw was found in Moodle. When enrolling a user into a course while assigning them to a group, the application does not verify whether the selected group actually belongs to that course. An authenticated user with teacher privileges could exploit this flaw to add users to groups within courses...

CVE-2026-100276: Incorrect Authorization

In JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow action's visibility restriction and run the action...

CVE-2026-102106: Improper Authentication

Improper authentication in a Kiteworks Email Protection Gateway administrative service. An administrative service in Kiteworks Email Protection Gateway did not consistently enforce administrator authentication, so the required password check could be bypassed. An attacker who referenced a valid...

CVE-2026-94178: Incorrect Privilege Assignment

Subscriber Privilege Escalation in Import and export users and customers = 2.5.2 versions...

PT-2026-103305

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2026.2.18991 Description Missing authorization allows users with read-only permissions to access and read project settings. Recommendations Update to version 2026.2.18991...

CVE-2026-90907

The Joomla! Core software versions 1.5.0-5.4.8 and 6.0.0-6.1.3 are vulnerable to unauthorized user account creation. The root cause is a failure in the profile.save controller , which does not verify the login state of a user. This allows unauthenticated attackers to create guest-level users on w...

EUVD-2026-89085

Joomla! Core - 20260902 - Core - Unauthorized user account creation via profile.save controller in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3 - The profile.save controller did not check the login state of a user, allowing the creation of guest-level users on sites without active user registration...

CVE-2026-100241 Private change tags exposed to anonymous users via revision-tags-change events

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - EventBus Extension allows Excavation. This issue affects Mediawiki - EventBus Extension: 1.47.0-alpha...

CVE-2026-100241

The Wikimedia Foundation Mediawiki - EventBus Extension (version 1.47.0-alpha ) is vulnerable to an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. Specifically, private change tags are exposed to anonymous users via revision-tags-change events . This flaw allows for the...

CVE-2026-102568 Pardus Parental Control before 0.7.0 Incorrect Authorization via PPCActivator.py

Pardus Parental Control before 0.7.0 contains an incorrect authorization vulnerability in the polkit policy that allows unprivileged local users to disable parental controls as root. Attackers can invoke PPCActivator.py with the --disable argument via pkexec to remove all restrictions including D...