Search Vulnerabilities

User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration

LatePoint <= 5.2.7 - Authenticated (Agent+) Privilege Escalation

theshit's Improper Privilege Dropping Allows Local Privilege Escalation via Command Re-execution

Listee <= 1.1.6 - Unauthenticated Privilege Escalation

WireGuard Portal Vulnerable to Privilege Escalation to Admin via User Self-Update

VMware Aria Operations privilege escalation vulnerability

api-gateway-deploy Affected by Exploitable Command Injection via Unprivileged Root Execution

SolarWinds Serv-U Broken Access Control Remote Code Execution Vulnerability

Formwork Improperly Manages Privileges During User Creation

Local Privilege Escalation in NesterSoft WorkTime

s2Member <= 260127 - Unauthenticated Privilege Escalation via Account Takeover

Buyent Theme (with Buyent Classified Plugin) <= 1.0.7 - Unauthenticated Privilege Escalation via User Registration

Lizza LMS Pro <= 1.0.3 - Unauthenticated Privilege Escalation

Toret Manager <= 1.2.7 - Authenticated (Subscriber+) Arbitrary Options Update via AJAX actions

Clasifico Listing <= 2.0 - Unauthenticated Privilege Escalation

JingDong JD Cloud Box AX6600 jdcapp_rpc controlDevice get_status privileges management

JingDong JD Cloud Box AX6600 jdcweb_rpc jdcapi cast_streen privileges management

JingDong JD Cloud Box AX6600 jdcweb_rpc jdcapi web_get_ddns_uptime privileges management

JUNG eNet SMART HOME server 2.2.1/2.3.1 Privilege Escalation via setUserGroup

Ecwid by Lightspeed Ecommerce Shopping Cart <= 7.0.7 - Authenticated (Subscriber+) Privilege Escalation via ec_store_admin_access