CVE-2026-105635 Plane: Unauthenticated Project Invitation Email Disclosure Enables Unauthorized Project Join Without Token

Plane is an open-source project management tool. Prior to 1.4.0, ProjectJoinEndpoint at GET /api/workspaces/slug/projects/projectid/join/pk/ uses permissionclasses = AllowAny and returns the full ProjectMemberInvite record, including its email, token, and role, to unauthenticated callers. The...

CVE-2026-105635

The open-source project management tool Plane is vulnerable to unauthorized project joining in versions prior to 1.4.0 . The ProjectJoinEndpoint at GET /api/workspaces/{slug}/projects/{project_id}/join/{pk}/ incorrectly uses permission_classes = [AllowAny], allowing unauthenticated callers to ret...

CVE-2026-105635 Plane: Unauthenticated Project Invitation Email Disclosure Enables Unauthorized Project Join Without Token

Plane is an open-source project management tool. Prior to 1.4.0, ProjectJoinEndpoint at GET /api/workspaces/slug/projects/projectid/join/pk/ uses permissionclasses = AllowAny and returns the full ProjectMemberInvite record, including its email, token, and role, to unauthenticated callers. The...

CVE-2026-105635 Plane: Unauthenticated Project Invitation Email Disclosure Enables Unauthorized Project Join Without Token

Plane is an open-source project management tool. Prior to 1.4.0, ProjectJoinEndpoint at GET /api/workspaces/slug/projects/projectid/join/pk/ uses permissionclasses = AllowAny and returns the full ProjectMemberInvite record, including its email, token, and role, to unauthenticated callers. The...

EUVD-2026-92700

Plane is an open-source project management tool. Prior to 1.4.0, ProjectJoinEndpoint at GET /api/workspaces/slug/projects/projectid/join/pk/ uses permissionclasses = AllowAny and returns the full ProjectMemberInvite record, including its email, token, and role, to unauthenticated callers. The...

CVE-2026-105628 Plane: OAuth Avatar Redirect SSRF Leads to Internal Data Exfiltration via Static Asset Endpoint

Plane is an open-source project management tool. Prior to 1.4.0, Plane's OAuth avatar synchronization flow fetches avatarurl from provider user data through a server-side HTTP request without internal IP validation and follows redirects by default. An attacker can provide an avatar URL that...

CVE-2026-105628

The open-source project management tool Plane is vulnerable to Server-Side Request Forgery (SSRF) in versions prior to 1.4.0 . The flaw exists in the OAuth avatar synchronization flow, where the application fetches an avatar_url from provider user data via a server-side HTTP request. Because the ...

CVE-2026-105628 Plane: OAuth Avatar Redirect SSRF Leads to Internal Data Exfiltration via Static Asset Endpoint

Plane is an open-source project management tool. Prior to 1.4.0, Plane's OAuth avatar synchronization flow fetches avatarurl from provider user data through a server-side HTTP request without internal IP validation and follows redirects by default. An attacker can provide an avatar URL that...

CVE-2026-104979 Plane: Cross-tenant stored XSS in intake enables account takeover

Plane is an open-source project management tool. Prior to 1.4.0, IntakeIssuePublicViewSet.create in Plane v1.3.1 writes descriptionhtml through Issue.objects.create... without calling validatehtmlcontent from nh3. Any authenticated user, including a new user with no workspace memberships, can pla...

EUVD-2026-92538

Plane is an open-source project management tool. Prior to 1.4.0, IntakeIssuePublicViewSet.create in Plane v1.3.1 writes descriptionhtml through Issue.objects.create... without calling validatehtmlcontent from nh3. Any authenticated user, including a new user with no workspace memberships, can pla...

CVE-2026-104979

The open-source project management tool Plane is vulnerable to a cross-tenant stored XSS in versions prior to 1.4.0 . The root cause is that IntakeIssuePublicViewSet.create in Plane v1.3.1 writes description_html via Issue.objects.create(...) without invoking validate_html_content from nh3 . This...

CVE-2026-104979 Plane: Cross-tenant stored XSS in intake enables account takeover

Plane is an open-source project management tool. Prior to 1.4.0, IntakeIssuePublicViewSet.create in Plane v1.3.1 writes descriptionhtml through Issue.objects.create... without calling validatehtmlcontent from nh3. Any authenticated user, including a new user with no workspace memberships, can pla...

CVE-2026-104979 Plane: Cross-tenant stored XSS in intake enables account takeover

Plane is an open-source project management tool. Prior to 1.4.0, IntakeIssuePublicViewSet.create in Plane v1.3.1 writes descriptionhtml through Issue.objects.create... without calling validatehtmlcontent from nh3. Any authenticated user, including a new user with no workspace memberships, can pla...

CVE-2026-63030

CVE-2026-63030 سلسلة استغلال كاملة PoC لـ ارتباك توجيه الدُفعات batch routing confusion + حقن SQL في REST API لووردبريس، تؤدي إلى إنشاء مسؤول غير مصرح به → تنفيذ تعليمات برمجية عن بُعد RCE. للاستخدام فقط في اختبار الأمان المصرح به، وإعادة إنتاج الثغرات والبحث. يُمنع الاستخدام ضد أهداف غير مصرح به...

CVE-2026-93319 A malicious frontend can cause a daemon panic

A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to panic...

wp2shell-rce

WP2Shell RCE أداة تقييم وفحص مصممة لاكتشاف التعرّض لسلسلة استغلال WP2Shell في تثبيتات WordPress Core عبر نقاط نهاية مفردة أو قوائم أهداف كبيرة. ⚠️ إخلاء مسؤولية قم بفحص الأنظمة التي تملكها أو المصرّح لك بتقييمها فقط. الفحص أو الاختبار غير المصرح به لأنظمة الطرف الثالث غير قانوني. لا يتحمل القائمون...

CVE-2026-104973 Plane: DNS Rebinding Bypass of CVE-2026-30242 SSRF Fix in Webhook Delivery

Plane is an open-source project management tool. Prior to 1.4.0, the fix for CVE-2026-30242 validates webhook IP addresses only when the webhook is created in apps/api/plane/app/serializers/webhook.py. The delivery task in apps/api/plane/bgtasks/webhooktask.py performs a separate DNS resolution...

CVE-2026-104973

The open-source project management tool Plane is vulnerable to a Server-Side Request Forgery (SSRF) via a DNS rebinding bypass. Prior to version 1.4.0 , the application only validated webhook IP addresses during creation in apps/api/plane/app/serializers/webhook.py. However, the delivery task in ...

CVE-2025-32044

CVE-2025-32044 — Moodle बिना प्रमाणीकरण के REST API उपयोगकर्ता डेटा एक्सपोज़र Stack Trace Args रिसाव → नाम, ईमेल, पासवर्ड हैश अवलोकन CVE-2025-32044 उच्च-गंभीरता CVSS 7.5 वाली एक बिना प्रमाणीकरण के सूचना प्रकटीकरण भेद्यता है जो Moodle LMS 4.5.0 से 4.5.2 में पाई जाती है। यह भेद्यता Moodle के REST A...

CVE-2024-42327_Zabbix_SQLI

CVE-2024-42327 - ثغرة حقن SQL في Zabbix SQLI ليست عمياء ولا قائمة على الوقت POC لـ CVE-2024-42327، وهي ثغرة حقن SQL تتطلب مصادقة في Zabbix عبر طريقة user.get في API. هذا الـ POC ليس قائمًا على الوقت مثل بعض الـ POCs الأخرى التي رأيتها. وصف الثغرة توجد الثغرة في نقطة نهاية user.get في API، ويمكن...