CVE-2026-100688 Budibase server before 3.45.0 Cross-Tenant Information Disclosure

Budibase server before 3.45.0 contains a cross-tenant information disclosure vulnerability in the GET /api/applications/:appId/appPackage endpoint that allows authenticated users to read another tenant's application metadata and source code. Attackers can supply a victim tenant's app id to retrie...

CVE-2026-100688

Budibase server versions prior to 3.45.0 are vulnerable to a cross-tenant information disclosure vulnerability within the GET /api/applications/:appId/appPackage endpoint. The root cause is a lack of authorization checks , allowing authenticated users to access metadata and source code belonging ...

Exploit for Unrestricted Upload of File with Dangerous Type in Adobe Commerce

abraxaslabs.tech · github.com/abraxas ·&...

Exploit for Improper Neutralization of Special Elements Used in a Template Engine in Adobe Commerce

abraxaslabs.tech · github.com/abraxas ·&...

CVE-2026-100536

Versions of OpenClaw prior to 2026.8.1 are vulnerable to a path traversal flaw within structured message attachments . The root cause is a failure to validate all source fields, which allows attackers to provide multiple source fields to bypass sandbox path validation . This enables the delivery ...

CVE-2026-100527

Versions of OpenClaw prior to 2026.8.2 are vulnerable to a denial of service (DoS) flaw within the Browser extension relay . This issue allows unauthenticated network sources to exhaust pending-authentication capacity by maintaining silent WebSocket upgrades . By occupying every available pending...

CLEANSTART-2026-OJ26404 Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation wou...

Security vulnerability affects the loki package. Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped...

PT-2026-99348

Name of the Vulnerable Software and Affected Versions stoatchat versions prior to 0.15.5 Description An account enumeration issue exists in the login endpoint. Unauthenticated attackers can identify whether an email address is registered by analyzing the error location fields returned in the...

CVE-2026-100677: Generation of Error Message Containing Sensitive Information

stoatchat before 0.15.5 contains an account enumeration vulnerability in the login endpoint that exposes source file locations in error responses. Unauthenticated attackers can distinguish between registered and unregistered email addresses by comparing error location fields returned from POST...

Karma Pro 0.11

Karma Pro is an open source code review tool written in Swift that can assist code reviewers with a multitude of useful tools. Karma Pro is a macOS source-code security scanner AST base and Heuristics that statically analyses projects in multiple languages. It's backed by an ML classifier trained...

PT-2026-99359

Name of the Vulnerable Software and Affected Versions Budibase server versions prior to 3.45.0 Description An information disclosure issue exists where authenticated users can access application metadata and source code belonging to another tenant. By providing a victim tenant's appId to the 'GET...

CVE-2026-96795

Horilla , an HR and CRM software, is vulnerable to Remote Code Execution (RCE) in versions prior to 2.0.0 . The flaw exists in HorillaListView.export_data (located in horilla_views/generic/cbv/views.py), where the application accepts an authenticated user's columns POST parameter and takes field_...

Incorrect Authorization

Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Incorrect Authorization via a tenant isolation bypass vulnerability in the semantic cache layer that allows authenticated users to read other tenants' cached responses by...

CVE-2026-84464

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, zammad's External Data Source feature, used to look up records from an external system, did not properly verify whether a user was allowed to see a specific ticket, user, group, or organization before including it...

CVE-2026-84464 Zammad: IDOR in External Data Source rendering exposes ticket, user, group, and organization data

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, zammad's External Data Source feature, used to look up records from an external system, did not properly verify whether a user was allowed to see a specific ticket, user, group, or organization before including it...

EUVD-2026-87263

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, zammad's External Data Source feature, used to look up records from an external system, did not properly verify whether a user was allowed to see a specific ticket, user, group, or organization before including it...

CVE-2026-84464

The Zammad open source helpdesk system is vulnerable to an Insecure Direct Object Reference (IDOR) in its External Data Source feature. Prior to version 7.1.2 , the system failed to properly verify user permissions when looking up records from external systems. An authenticated user , even one wi...

CVE-2026-84464 Zammad: IDOR in External Data Source rendering exposes ticket, user, group, and organization data

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, zammad's External Data Source feature, used to look up records from an external system, did not properly verify whether a user was allowed to see a specific ticket, user, group, or organization before including it...

CVE-2026-84464 Zammad: IDOR in External Data Source rendering exposes ticket, user, group, and organization data

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, zammad's External Data Source feature, used to look up records from an external system, did not properly verify whether a user was allowed to see a specific ticket, user, group, or organization before including it...

AZL-105296 CVE-2026-67411 affecting package rabbitmq-server 3.13.7-9

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18, 4.0.23, 4.1.14, 4.2.9, and 4.3.3, native MQTT and MQTT over WebSocket behind a trusted PROXY Protocol frontend could lose the proxy-derived client address before the MQTT authentication path checked loopbackusers, causing th...