82635 matches found
CVE-2026-76504-Proof-of-concept
Cisco Catalyst SD-WAN Manager — CVE-2026-76504 Неаутентифицированный обход аутентификации, вызванный некорректной обработкой URL-кодирования CWE-177 в слое управления сессиями API. Специально сформированный запрос достигает привилегированной конечной точки и обрабатывается как аутентифицированная...
The vulnerability of the client API library for the IMAP protocol, written in Ruby, arises from the lack of data cleansing measures at the management level. This allows attackers to execute arbitrary commands.
The vulnerability of the client API library for the IMAP protocol, written in Ruby, is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...
The vulnerability of the client API library for the IMAP protocol, written in Ruby, arises from incorrect filtering of input data. This allows attackers to trigger a service failure.
The vulnerability of the client API library for the IMAP protocol, written in Ruby, is related to incorrect filtering of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the client API library for the IMAP protocol, written in Ruby, arises from the lack of data cleansing measures at the management level. This allows attackers to execute arbitrary commands.
The vulnerability of the client API library for the IMAP protocol, written in Ruby, is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...
Vulnerability of endpoints/api/restore and/api/users/admin/init of the Kubernetes management platform, allowing attackers to escalate their privileges
The vulnerability of the endpoints /api/restore and /api/users/admin/init of the Kubernetes management platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain increased privileges remotely...
CVE-2026-105636: Server-Side Request Forgery (SSRF)
Plane is an open-source project management tool. Prior to 1.4.0, the webhook delivery task in apps/api/plane/bgtasks/webhooktask.py calls requests.post without allowredirects=False and does not validate redirect targets. validateurl blocks private, loopback, link-local, and reserved addresses in...
PT-2026-106273
Name of the Vulnerable Software and Affected Versions Dify versions prior to 1.16.0 Description An authenticated workspace member can modify the status and parameters of another application's MCP server, which could lead to service disruption or data redirection. This occurs because the...
PT-2026-106034
Plane is an open-source project management tool. Prior to 1.4.0, two endpoint families fail to verify that nested resource identifiers belong to the workspace and project named in the URL. An authenticated user can read or modify estimates from another workspace through PATCH...
PT-2026-104810
A vulnerability was detected in Casdoor up to 3.161.1. Affected is the function ApiFilter of the file routers/authz filter.go of the component API Endpoint. Performing a manipulation results in missing authentication. The attack can be initiated remotely. The exploit is now public and may be used...
PT-2026-104756
Insertion of Sensitive Information Into Sent Data vulnerability in Deepen Bajracharya Video Conferencing with Zoom video-conferencing-with-zoom-api allows Retrieve Embedded Sensitive Data.This issue affects Video Conferencing with Zoom: from n/a through 4.6.10...
PT-2026-104735
Name of the Vulnerable Software and Affected Versions ChatGPTNextWeb NextChat versions prior to 2.16.2 Description A flaw in the Proxy Fallback Handler component allows for server-side request forgery, which occurs when an attacker can induce the server to make requests to an unintended location...
PT-2026-104748
Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a /api/documents/upload call. A Python .pth file can be written to site-packages, and its code is executed upon the next start of the Python interpreter...
CVE-2026-88394
WookTeam v1.6.6 and before is vulnerable to a Directory Traversal. The project task export endpoint /api/project/task/export downloads an arbitrary file from the server when the data parameter is supplied with a crafted JSON payload. The file value inside the JSON is concatenated directly into...
EUVD-2026-92442
WookTeam v1.6.6 and before is vulnerable to a Directory Traversal. The project task export endpoint /api/project/task/export downloads an arbitrary file from the server when the data parameter is supplied with a crafted JSON payload. The file value inside the JSON is concatenated directly into...
EUVD-2026-92470
WookTeam v1.6.6 and before is vulnerable to RCE in the project task export interface /api/project/task/export. The data parameter is base64-decoded and passed directly into the string2array function in app/Module/Base.php, which executes eval"$array = $data;" whenever the decoded string starts...
PT-2026-106003
WookTeam v1.6.6 and before is vulnerable to RCE in the project task export interface /api/project/task/export. The data parameter is base64-decoded and passed directly into the string2array function in app/Module/Base.php, which executes eval"$array = $data;" whenever the decoded string starts wi...
PT-2026-106019
Plane is an open-source project management tool. Prior to 1.4.0, GET /api/users/api-tokens/ allows an authenticated user to retrieve API-token records, while PATCH /api/users/api-tokens/token id/ allows the user to modify the token's allowed rate limit field without server-side validation or a...
PT-2026-106058
Plane is an open-source project management tool. Prior to 1.4.0, IntakeIssuePublicViewSet.create in Plane v1.3.1 writes description html through Issue.objects.create... without calling validate html content from nh3. Any authenticated user, including a new user with no workspace memberships, can...
PT-2026-106083
Name of the Vulnerable Software and Affected Versions Plane versions prior to 1.4.0 Description The webhook delivery task in apps/api/plane/bgtasks/webhook task.py uses the requests.post function without setting allow redirects=False and fails to validate redirect targets. While the validate url...
PT-2026-106086
Plane is an open-source project management tool. Prior to 1.4.0, Plane's signup flow creates a logged-in User row for any submitted email without an out-of-band ownership check, while User.email is unique=True. The authenticated user can call GET /api/users/me/workspaces/invitations/, which retur...