tangalanga

Tangalanga Zoom Conference scanner. This scanner will check for a random meeting id and return information if available. Install First try to see if there's any prebaked version for the date: https://github.com/elcuervo/tangalanga/releases. This versions already have a token ready to use. Either...

Video Conferencing with Zoom API < 4.6.6 - Unauthenticated SDK Signature Generation

Zoom WordPress plugin 4.6.6 contains a broken authentication caused by disabled nonce verification in an AJAX handler, letting unauthenticated attackers generate valid Zoom SDK signatures and retrieve the Zoom SDK key. id: CVE-2026-1368 info: name: Video Conferencing with Zoom API 4.6.6 -...

Zoom-dll-hijacking

Zoom-dll-hijacking A dll hijacking vulnerability in zoom meeting 5.1.3 Affected Windows version Windows 7 or less Windows Server 2008 Any other windows system that doesn't have SHCore.dll present. Usage Copy the dbghelper.dll and SHCore.dll to following location...

Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote Privilege Escalation

Zoom has released software updates to address two security flaws impacting Zoom Workplace for Windows, including a critical bug that could result in privilege escalation on affected systems. The vulnerabilities are listed below - CVE-2026-108186 CVSS score: 9.6 - An improper input validation...

CVE-2026-121472

The AutomatorWP WordPress plugin before 6.0.8 does not bind the requests that complete its Zoom and AWeber integration connections to the administrator who started them, allowing attackers to make a logged-in administrator replace the stored integration credentials with the attacker's own via a...

EUVD-2026-123184

The AutomatorWP WordPress plugin before 6.0.8 does not bind the requests that complete its Zoom and AWeber integration connections to the administrator who started them, allowing attackers to make a logged-in administrator replace the stored integration credentials with the attacker's own via a...

CVE-2026-121472 AutomatorWP < 6.0.8 - Zoom/AWeber Integration Connection Hijack via CSRF

The AutomatorWP WordPress plugin before 6.0.8 does not bind the requests that complete its Zoom and AWeber integration connections to the administrator who started them, allowing attackers to make a logged-in administrator replace the stored integration credentials with the attacker's own via a...

WordPress AutomatorWP plugin < 6.0.8 - Zoom/AWeber Integration Connection Hijack vulnerability

Zoom/AWeber Integration Connection Hijack vulnerability discovered by kta1kri in WordPress Plugin AutomatorWP versions 6.0.8...

CVE-2026-121472

The AutomatorWP WordPress plugin, in versions prior to 6.0.8 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a failure to bind requests completing Zoom and AWeber integration connections to the specific administrator who initiated them. An attacker can exploit thi...

CVE-2026-121472: Unknown AutomatorWP: The AutomatorWP WordPress plugin before 6.0.8 does not bind the requests that complete its Zoom and AWeber integration…

The AutomatorWP WordPress plugin before 6.0.8 does not bind the requests that complete its Zoom and AWeber integration connections to the administrator who started them, allowing attackers to make a logged-in administrator replace the stored integration credentials with the attacker's own via a...

PT-2026-145020

The AutomatorWP WordPress plugin before 6.0.8 does not bind the requests that complete its Zoom and AWeber integration connections to the administrator who started them, allowing attackers to make a logged-in administrator replace the stored integration credentials with the attacker's own via a...

CVE-2026-108186

Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access...

CVE-2026-108187

Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access...

CVE-2026-108187

An Origin Validation Error in Zoom Workplace for Windows could allow an unauthenticated user to conduct an escalation of privilege via network access. The vulnerability is associated with CWE-346 and has a High base severity score of 8.1. No specific affected versions, root causes, or remediation...

CVE-2026-108187

Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access...

EUVD-2026-121159

Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access...

CVE-2026-108186

Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access...

EUVD-2026-121259

Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access...

CVE-2026-108186

A critical Improper Input Validation vulnerability (CWE-20) exists in Zoom Workplace for Windows . This flaw may allow an unauthenticated user to achieve an escalation of privilege via network access . The vulnerability carries a CVSS 3.1 base score of 9.6 (CRITICAL) , with high impacts on confid...

CVE-2026-108186: Zoom Communications Zoom Workplace: Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of…

Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access...