Subscriber Broken Access Control in OwnerRez API <= 1.2.6 versions.
CVE-2026-81758
Subscriber Broken Access Control in OwnerRez API <= 1.2.6 versions.
#advisory
共收录 23717 条相关情报。
← 返回所有主题Subscriber Cross Site Scripting (XSS) in Kalles Addons <= 1.0.6 versions.
CVE-2026-81778
Subscriber Cross Site Scripting (XSS) in Kalles Addons <= 1.0.6 versions.
Subscriber Privilege Escalation in Fluent Forms Pro Add On Pack <= 6.2.12 versions.
CVE-2026-81297
Subscriber Privilege Escalation in Fluent Forms Pro Add On Pack <= 6.2.12 versions.
Unauthenticated Cross Site Scripting (XSS) in Super Store Finder <= 7.10 versions.
CVE-2026-81768
Unauthenticated Cross Site Scripting (XSS) in Super Store Finder <= 7.10 versions.
Unauthenticated Cross Site Scripting (XSS) in LeadConnector <= 4.0.5 versions.
CVE-2026-81298
Unauthenticated Cross Site Scripting (XSS) in LeadConnector <= 4.0.5 versions.
Unauthenticated Cross Site Scripting (XSS) in Email Subscribers & Newsletters <= 5.9.33 versions.
CVE-2026-81290
Unauthenticated Cross Site Scripting (XSS) in Email Subscribers & Newsletters <= 5.9.33 versions.
An OS command injection vulnerability in MetaGPT 0.8.1 allows an attacker to execute arbitrary...
CVE-2026-79408
An OS command injection vulnerability in MetaGPT 0.8.1 allows an attacker to execute arbitrary commands via the path arg
XueZhiSi Open Source Exam System <= 3.9.0 has a privilege escalation vulnerability in the teacher...
CVE-2026-75460
XueZhiSi Open Source Exam System <= 3.9.0 has a privilege escalation vulnerability in the teacher-end interface POST /ap
Missing Authorization vulnerability in WPExperts Post SMTP allows Exploiting Incorrectly...
CVE-2026-81278
Missing Authorization vulnerability in WPExperts Post SMTP allows Exploiting Incorrectly Configured Access Control Secur
The teacher-end interface POST /api/teacher/user/delete/{id} in XueZhiSi Open Source Exam System ...
CVE-2026-75458
The teacher-end interface POST /api/teacher/user/delete/{id} in XueZhiSi Open Source Exam System <= 3.9.0 contains a ver
FastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST ...
CVE-2026-79483
FastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST /api/core/chat/getHistor
A path traversal vulnerability in the SPO extension of MetaGPT 0.8.1 allows an attacker to read...
CVE-2026-79407
A path traversal vulnerability in the SPO extension of MetaGPT 0.8.1 allows an attacker to read arbitrary files via the
A malicious webpage could stall a popup's cross-origin navigation after commit, causing the...
CVE-2026-81267
A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the d
TechStore 1.0 is vulnerable to Cross Site Scripting (XSS). In contact_display, the application...
CVE-2025-63607
TechStore 1.0 is vulnerable to Cross Site Scripting (XSS). In contact_display, the application echoes the id parameter v
Incorrect access control in the CloudSrvVersionCheck function of TOTOLINK T6 4.1.5cu...
CVE-2026-51739
Incorrect access control in the CloudSrvVersionCheck function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticate
Incorrect access control in the killProcess function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...
CVE-2026-51740
Incorrect access control in the killProcess function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attacke
Incorrect access control in the clearSyslog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...
CVE-2026-51736
Incorrect access control in the clearSyslog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attacke
Incorrect access control in the showSyslog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...
CVE-2026-51735
Incorrect access control in the showSyslog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attacker
A vulnerability was identified in Doccano Open Source Annotation Tools for Machine Learning...
CVE-2026-82833
A vulnerability was identified in Doccano Open Source Annotation Tools for Machine Learning Practitioners and Auto Label
Incorrect access control in the clearTracerouteLog function of TOTOLINK T6 4.1.5cu.748_B20211015...
CVE-2026-51737
Incorrect access control in the clearTracerouteLog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated