27 matches found
Exploit for CVE-2016-4977
Spring Security OAuth2 Whitelabel SpEL RCE CVE-2016-4977 V...
CVE-2026-15946
The Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.23. This is due to the plugin not properly verifying that a user is authorized to perform an...
CVE-2026-15946 Search Atlas SEO <= 2.6.23 - Missing Authorization to Authenticated (Subscriber+) Whitelabel Password Modification via handle_whitelabel_password_early Function
The Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.23. This is due to the plugin not properly verifying that a user is authorized to perform an...
EUVD-2026-83545
The Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.23. This is due to the plugin not properly verifying that a user is authorized to perform an...
PT-2026-95781
Name of the Vulnerable Software and Affected Versions Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization versions prior to 2.6.24 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform...
WordPress Search Atlas SEO – OTTO AI SEO Automation for WordPress plugin <= 2.6.23 - Missing Authorization to Authenticated (Subscriber+) Whitelabel Password Modification vulnerability
Missing Authorization to Authenticated Subscriber+ Whitelabel Password Modification vulnerability discovered by Wordfence PRISM in WordPress Plugin Search Atlas SEO versions = 2.6.23...
Spring Security OAuth2 Remote Command Execution Detection
Spring Security OAuth versions 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5 contain a remote command execution vulnerability. When processing authorization requests using the whitelabel views, the responsetype parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote comma...
SpringBoot WhiteLabel Error Page - Detect
Detects SpringBoot WhiteLabel Error Page - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects SpringBoot WhiteLabel Error Page - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SpringBoot WhiteLabel...
EUVD-2026-46142
An issue in SJCAM AllWinner Tech products SJ4000-Air V1.4C and before and Whitelabel based v.1.4C and before allows an attacker to execute arbitrary code via a crafted FEX file...
MAL-2025-8076 Malicious code in @ice-desktop/uikit-whitelabel (npm)
The package @ice-desktop/uikit-whitelabel was found to contain malicious code...
Malicious code in @ice-desktop/uikit-whitelabel (npm)
The package @ice-desktop/uikit-whitelabel was found to contain malicious code...
VulnCheck KEV: CVE-2016-4977
When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the responsetype parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote code execution via the crafting of the value for responsetype...
MAL-2024-1323 Malicious code in @socialdeal/uikit-whitelabel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d53c0749d21786a6b7eeea319c37d26573f1ded671dc9cbed9e4508d9b65a2c0 The OpenSSF Package Analysis project identified '@socialdeal/uikit-whitelabel' @ 999.100.1 npm as malicious. It is considered malicious because:...
Malicious code in agency-web-whitelabel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f7130e18253c6f61e2fded27099f5042425401a0afb2eefc8858aab790e069c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-890 Malicious code in agency-web-whitelabel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f7130e18253c6f61e2fded27099f5042425401a0afb2eefc8858aab790e069c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in agency-web-whitelabel
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Spring Boot < 1.2.8 / 1.3.0 Whitelabel Error Page Remote Code Execution
Pivotal Spring Boot is a Java framework designed to help developers create minimal Spring based applications. Spring applications provide the Spring Expression Language SpEL which is a powerful expression language for querying and manipulating an object graph at runtime. Spring Boot versions belo...
Spring Security OAuth vulnerable to remote code execution (RCE) via specially crafted request using whitelabel views
When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the responsetype parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote code execution via the crafting of the value for responsetype...
GHSA-7Q9C-H23X-65FQ Spring Security OAuth vulnerable to remote code execution (RCE) via specially crafted request using whitelabel views
When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the responsetype parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote code execution via the crafting of the value for responsetype...
