Gin-Vue-admin-poc-CVE-2022-21660

Gin-Vue-admin Vertical Privilege Escalation Vulnerability and Code Analysis - CVE-2022-21660 1. Foreword Welcome everyone to give this project a star.http https://github.com/flipped-aurora/gin-vue-admin/ After finishing the article, applying for a CVE was somewhat troublesome, but fortunately it...

Apache-couchdb-CVE-2017-12635

CouchDB Vertical Privilege Escalation Vulnerability CVE-2017-12635 Apache CouchDB is an open-source database that focuses on ease of use and being a "fully web-embracing database." It is a NoSQL database that uses JSON as the storage format, JavaScript as the query language, and MapReduce and HTT...

CVE-2021-44103

CVE-2021-44103 A proof of concept for KONGA 0.14.9 - Privilege Escalation. Intro On November 16, 2021, Fabrício Salomão and I found a vulnerability in Konga API Gateways, allowing any authenticated user to become an administrator. Report Vulnerability Product: KONGA Model: 0.14.9 Vulnerability:...

AlmaLinux 9.2 [TuxCare] Security Update: grafana Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1757427057)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1757427057 advisory. - Grafana is an open-source platform for monitoring and observability. Starting with the 8.1 branch and prior to versions 8.5.16,...

AlmaLinux 9.2 [TuxCare] Security Update: grafana (ALMALINUX9.2:CLSA-2026:1781274708)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1781274708 advisory. - Grafana is an open-source platform for monitoring and observability. Starting with the 8.1 branch, Grafana had a stored XSS vulnerability...

CVE-2026-100612 Capgo SSO Provider ID Authentication Bypass via Incomplete Migration

Capgo capgo.app through version 12.261.0 contains an incomplete access-control fix for the public.ssoproviders table. Migration 20260826100000ssoprovidersblockdirectactiveinsert.sql installs a BEFORE UPDATE guard enforcessoproviderclientupdateguard that freezes only the dnsverifiedat, domain,...

CVE-2026-100612 Capgo SSO Provider ID Authentication Bypass via Incomplete Migration

Capgo capgo.app through version 12.261.0 contains an incomplete access-control fix for the public.ssoproviders table. Migration 20260826100000ssoprovidersblockdirectactiveinsert.sql installs a BEFORE UPDATE guard enforcessoproviderclientupdateguard that freezes only the dnsverifiedat, domain,...

EUVD-2026-87707

Capgo capgo.app through version 12.261.0 contains an incomplete access-control fix for the public.ssoproviders table. Migration 20260826100000ssoprovidersblockdirectactiveinsert.sql installs a BEFORE UPDATE guard enforcessoproviderclientupdateguard that freezes only the dnsverifiedat, domain,...

CVE-2026-100612

Capgo (capgo.app) versions through 12.261.0 are vulnerable to a vertical privilege escalation and account takeover due to an incomplete access-control fix in the public.sso_providers table. The migration 20260826100000_sso_providers_block_direct_active_insert.sql fails to freeze the provider_id c...

CVE-2026-100612 Capgo SSO Provider ID Authentication Bypass via Incomplete Migration

Capgo capgo.app through version 12.261.0 contains an incomplete access-control fix for the public.ssoproviders table. Migration 20260826100000ssoprovidersblockdirectactiveinsert.sql installs a BEFORE UPDATE guard enforcessoproviderclientupdateguard that freezes only the dnsverifiedat, domain,...

PT-2026-99283

Name of the Vulnerable Software and Affected Versions Capgo capgo.app versions prior to 12.261.0 Description An incomplete access-control fix in the public.sso providers table allows a user with org admin permissions and the org.update settings permission to perform vertical privilege escalation...

CVE-2026-100612: Authorization Bypass Through User-Controlled Key

Capgo capgo.app through version 12.261.0 contains an incomplete access-control fix for the public.ssoproviders table. Migration 20260826100000ssoprovidersblockdirectactiveinsert.sql installs a BEFORE UPDATE guard enforcessoproviderclientupdateguard that freezes only the dnsverifiedat, domain,...

CLEANSTART-2026-FS80399 Security fixes in vertical-pod-autoscaler 1.7.1-r1

Package vertical-pod-autoscaler version 1.7.1-r1 fixes 1 vulnerabilities: CVE-2026-41178...

CLEANSTART-2026-FH07251 Security fixes in vertical-pod-autoscaler 1.7.1-r2

Package vertical-pod-autoscaler version 1.7.1-r2 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-CT32025 Security fixes in vertical-pod-autoscaler 1.5.1-r4

Package vertical-pod-autoscaler version 1.5.1-r4 fixes 1 vulnerabilities: CVE-2026-29181...

CLEANSTART-2026-YJ84497 Security fixes in vertical-pod-autoscaler 1.6.0-r1

Package vertical-pod-autoscaler version 1.6.0-r1 fixes 1 vulnerabilities: CVE-2026-29181...

CLEANSTART-2026-OZ55229 Security fixes in vertical-pod-autoscaler 1.6.0-r2

Package vertical-pod-autoscaler version 1.6.0-r2 fixes 1 vulnerabilities: CVE-2026-41178...

CVE-2026-83596

CVE-2026-83596 is a memory corruption vulnerability in WebKitGTK caused by improper handling of the featurelist array in the OpenTypeVerticalData::findFeature function. Processing malicious web content can trigger the flaw, leading to memory corruption with high impact on confidentiality, integri...

CVE-2026-83596 Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling...

PT-2026-83980

The teacher-end interface POST /api/teacher/user/delete/id in XueZhiSi Open Source Exam System = 3.9.0 contains a vertical privilege escalatio vulnerability. This interface accepts a user ID and then executes getUserByIdid, setDeletedtrue, updateByIdFilter in sequence, without any validation of...