Wazuh Server 4.9.0 < 4.10.4 / 4.11.0 < 4.14.6 Incorrect Authorization (CVE-2026-41424)

The version of Wazuh Server on the remote host is 4.9.0 prior to 4.10.4, or 4.11.0 prior to 4.14.6. It is, therefore, affected by an incorrect authorization vulnerability: - PUT /security/users/userid passes request.get'user' instead of request.context'tokeninfo''sub' as currentuser. An...

CVE-2026-41424: Incorrect Authorization

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.9.0 until 4.10.4 and 4.14.6, PUT /security/users/userid in api/api/controllers/securitycontroller.py passes request.get"user" instead of request.context'tokeninfo''sub' as currentuser...

slogan design Script SQL Injection Vulnerability

No description provided by source. Title: slogan design Script SQL Injection Vulnerability Version: 3.1 Author: Mr.P3rfekT Software Site: http://www.slogandesign.co.il Tested on Lunix CVE : N/A Founded By Mr.P3rfekT --- We Will Not Go Down Dork : inurl:index.php?mid= Helllo Allz. Exploit :...

slogan design Script v3.1 SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================================== slogan design Script v3.1 SQL Injection Vulnerability ===================================================== Version: 3.1 Author: Mr.P3rfekT Software Site: http://www.slogandesign.co.il Test...