177412 matches found
CVE-2026-100626 capgo through 12.128.2 IDOR via PUT /app icon endpoint
capgo through 12.128.2 contains an insecure direct object reference vulnerability in the PUT /app/:appId endpoint that accepts attacker-controlled icon storage paths. Authenticated users can supply arbitrary paths in the private images bucket and obtain service-role-signed URLs valid for 7 days t...
EUVD-2026-87770
capgo through 12.128.2 contains an insecure direct object reference vulnerability in the PUT /app/:appId endpoint that accepts attacker-controlled icon storage paths. Authenticated users can supply arbitrary paths in the private images bucket and obtain service-role-signed URLs valid for 7 days t...
CVE-2026-100626 capgo through 12.128.2 IDOR via PUT /app icon endpoint
capgo through 12.128.2 contains an insecure direct object reference vulnerability in the PUT /app/:appId endpoint that accepts attacker-controlled icon storage paths. Authenticated users can supply arbitrary paths in the private images bucket and obtain service-role-signed URLs valid for 7 days t...
CVE-2019-7214
CVE-2019-7214 root@kitploit: Exploit Title: SmarterMail Build 6985 Remote Code Execution Exploit Author: 1F98D Original Author: Soroush Dalili Modified Author: Drew Alleman Date: 10 May 2020 Vendor Hompage: https://www.smartertools.com/ CVE: CVE-2019-7214 Tested on: Windows 10 x64 References:...
CVE-2026-100705
Kyverno versions before 1.19.1 are vulnerable to server-side request forgery (SSRF) due to a lack of egress filtering and URL validation in the legacy apiCall service executor (pkg/engine/apicall/executor.go) and the GlobalContextEntry external-API path. While new CEL libraries include a default ...
CVE-2026-100705 Kyverno before 1.19.1 SSRF via legacy apiCall service executor
Kyverno before 1.19.1 is vulnerable to server-side request forgery. The default egress blocklist 169.254.169.254, 169.254.169.253, metadata.google.internal, 127.0.0.0/8, ::1/128 and the scoped-token control were wired only into the new CEL http.Get/Post library and were never applied to the legac...
CVE-2026-100705 Kyverno before 1.19.1 SSRF via legacy apiCall service executor
Kyverno before 1.19.1 is vulnerable to server-side request forgery. The default egress blocklist 169.254.169.254, 169.254.169.253, metadata.google.internal, 127.0.0.0/8, ::1/128 and the scoped-token control were wired only into the new CEL http.Get/Post library and were never applied to the legac...
EUVD-2026-87678
Kyverno before 1.19.1 is vulnerable to server-side request forgery. The default egress blocklist 169.254.169.254, 169.254.169.253, metadata.google.internal, 127.0.0.0/8, ::1/128 and the scoped-token control were wired only into the new CEL http.Get/Post library and were never applied to the legac...
CVE-2026-100705 Kyverno before 1.19.1 SSRF via legacy apiCall service executor
Kyverno before 1.19.1 is vulnerable to server-side request forgery. The default egress blocklist 169.254.169.254, 169.254.169.253, metadata.google.internal, 127.0.0.0/8, ::1/128 and the scoped-token control were wired only into the new CEL http.Get/Post library and were never applied to the legac...
EUVD-2026-87661
Budibase server before 3.45.0 contains a cross-tenant information disclosure vulnerability in the GET /api/applications/:appId/appPackage endpoint that allows authenticated users to read another tenant's application metadata and source code. Attackers can supply a victim tenant's app id to retrie...
CVE-2026-100688 Budibase server before 3.45.0 Cross-Tenant Information Disclosure
Budibase server before 3.45.0 contains a cross-tenant information disclosure vulnerability in the GET /api/applications/:appId/appPackage endpoint that allows authenticated users to read another tenant's application metadata and source code. Attackers can supply a victim tenant's app id to retrie...
CVE-2026-100688 Budibase server before 3.45.0 Cross-Tenant Information Disclosure
Budibase server before 3.45.0 contains a cross-tenant information disclosure vulnerability in the GET /api/applications/:appId/appPackage endpoint that allows authenticated users to read another tenant's application metadata and source code. Attackers can supply a victim tenant's app id to retrie...
CVE-2026-100688
Budibase server versions prior to 3.45.0 are vulnerable to a cross-tenant information disclosure vulnerability within the GET /api/applications/:appId/appPackage endpoint. The root cause is a lack of authorization checks , allowing authenticated users to access metadata and source code belonging ...
CVE-2026-100688 Budibase server before 3.45.0 Cross-Tenant Information Disclosure
Budibase server before 3.45.0 contains a cross-tenant information disclosure vulnerability in the GET /api/applications/:appId/appPackage endpoint that allows authenticated users to read another tenant's application metadata and source code. Attackers can supply a victim tenant's app id to retrie...
CVE-2026-100686 Budibase before 3.45.0 Cross-Workspace Privilege Escalation via POST /api/global/groups/:groupId/apps
Budibase versions before 3.45.0 fail to validate per-app authorization in the POST /api/global/groups/:groupId/apps endpoint, allowing builders to assign application roles across workspace boundaries. A builder of a single workspace can exploit missing per-app authorization checks to grant...
CVE-2026-100686
Budibase versions before 3.45.0 are vulnerable to a cross-workspace privilege escalation due to a failure to validate per-app authorization in the POST /api/global/groups/:groupId/apps endpoint. An attacker with builder privileges in a single workspace can exploit these missing checks to modify u...
CVE-2026-100686 Budibase before 3.45.0 Cross-Workspace Privilege Escalation via POST /api/global/groups/:groupId/apps
Budibase versions before 3.45.0 fail to validate per-app authorization in the POST /api/global/groups/:groupId/apps endpoint, allowing builders to assign application roles across workspace boundaries. A builder of a single workspace can exploit missing per-app authorization checks to grant...
EUVD-2026-87659
Budibase versions before 3.45.0 fail to validate per-app authorization in the POST /api/global/groups/:groupId/apps endpoint, allowing builders to assign application roles across workspace boundaries. A builder of a single workspace can exploit missing per-app authorization checks to grant...
CVE-2026-100685
Budibase versions before 3.45.0 are vulnerable to an information disclosure flaw because the GET /api/chat-links endpoint fails to properly scope results by workspace. This oversight allows users with builder access to a single workspace to enumerate sensitive chat identity linking records—includ...
CVE-2026-100685 Budibase before 3.45.0 Information Disclosure via Chat Links
Budibase before 3.45.0 fails to properly scope the GET /api/chat-links endpoint by workspace, allowing builders to enumerate chat identity link records across all workspaces in a tenant. Attackers with builder access to a single workspace can retrieve sensitive chat identity linking data includin...