CVE-2026-91770 IceHRM before 36.0.0 Broken Access Control via Employee ID

IceHRM before 36.0.0 fails to validate employee ownership on seven REST sub-resource endpoints, allowing authenticated employees to read any colleague's HR records. Attackers can substitute arbitrary employee IDs in skill, education, certification, language, leave, attendance, and status endpoint...

CVE-2026-91751

Flextype CMS through 1.0.0-alpha.3 fails to properly validate id and newid parameters in the Entries REST API, allowing API token holders to read, create, or overwrite files outside the entries directory. Attackers can use traversal sequences in API requests to escape the project entries director...

CVE-2026-39039

BharatMLStack (by Meesho ), in versions up to and including v1.3.0 , stores the JWT authentication token , full user object, and session ID in the browser's localStorage via the Trufflebox UI . Since localStorage is fully accessible to any JavaScript executing on the page, an attacker with the ab...

PT-2026-91846

A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includes/checklogin.php. This manipulation of the argument ID causes improper access controls. Remote exploitation of the attack is possible. The exploit has been published and may be...

Fedora 43 : perl-Dancer2 (2026-d0bededb87)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d0bededb87 advisory. Dancer2 gnrates sessions id from low-entropy sources if Crypt::URandom and Math::Random::ISAAC::XS are not present. With this update, they are always there...

PT-2026-91877

A flaw has been found in GPAC up to f1219cde. This vulnerability affects the function gf mo get od id of the file compositor/media object.c of the component Compositor. Executing a manipulation can lead to use after free. The attack may be performed from remote. The exploit has been published and...

CVE-2026-91181 Data Retention Teams Endpoint Leaks Private Team Invite ID

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 Fail to sanitize Team objects returned by the data retention teams endpoint which allows an authenticated user holding only the read-only Data Retention Policy permission to obtain a private team's secret...

CVE-2021-42670

CVE-2021-42670 CVE-2021-42670 - SQL-инъекция в системе онлайн-портала инженеров. Техническое описание: Уязвимость SQL-инъекции существует в Engineers Online Portal. Злоумышленник может использовать уязвимый параметр "id" на веб-странице "announcementsstudent.php" для манипуляции выполняемым...

CVE-2026-90796

A vulnerability was identified in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/company/index.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used...

gitlab-cve-2020-10977

GitLab CVE2020-10977 소개 이 스크립트는 GitLab Community EditionCE 및 Enterprise EditionEE에 대해 원격 코드 실행을 제공합니다. 이 CVE는 임의 파일 읽기로, GitLab secrets.yaml 파일을 다운로드하여 Rails secretkeybase를 추출할 수 있게 합니다. 이를 통해 GitLab이 내부적으로 A/B 테스트에 사용하는 experimentationsubjectid 쿠키를 직접 서명하여 코드 실행을 얻을 수 있습니다. 쿠키에 포함된 페이로드에는 GitLab...

CVE-2026-90796 itsourcecode Leave Management System index.php sql injection

A vulnerability was identified in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/company/index.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used...

EUVD-2026-77616

A vulnerability was identified in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/company/index.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used...

CVE-2023-2986

Оригинальное доказательство концепции для CVE-2023-2986 Доказательство концепции уязвимости CVE-2023-2986 в плагине 'Abandoned Cart Lite для WooCommerce' на WordPress. Связанные детали Ссылка NVD : https://nvd.nist.gov/vuln/detail/CVE-2023-2986 Исходный код плагина :...

CVE-2023-0264

CVE-2023-0264에 대한 PoC 권한 부여 코드 흐름 중 세션 하이재킹을 허용하는 Keycloak 취약점 https://github.com/advisories/GHSA-9g98-5mj6-f9mv 참조 전제 조건 Docker curl jq python3 또는 HTTP로 정적 파일을 제공하는 다른 도구 재현 단계 1. ./run-keycloak-container.sh로 Keycloak 컨테이너를 시작합니다. 2. ./create-users.sh로 사용자 alice와 mallory 두 명을 생성합니다. 3. 이 저장소의 정적...

CVE-2020-17530

Что это Это простой тестовый проект для S2-061, который можно использовать для анализа деталей этой уязвимости. Как использовать Шаг 1:Используйте IDEA для импорта этого проекта Шаг 2:Настройте сервер Tomcat Шаг 3:Используйте браузер для доступа к...

CVE-2026-21391

An improper validation vulnerability exists within PingAM where a well-crafted request allows arbitrary or protected ID Token claims to be set or overridden. In certain configurations this could allow an attacker to bypass authentication controls via spoofing leading to privilege escalation or...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: nfsd: never defer requests during idmap lookup During the decoding of v4 request compound arguments, certain operations e.g., SETATTR can trigger idmap lookup upcalls. When the responses to these upcalls are delayed beyond the...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: IB/core: Fixed the issue with the cleanup of the ibcachesetupone function. When ibcacheupdate returns an error, the ibcachesetupone function is exited immediately without proper cleanup. This occurs even though we have already...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: iouring: fixed the memory leak related to the uid during file registration. When there are no files for iosqefilesscm to process within a certain range, it will free all resources and return. However, it forgot to set the uid...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: sched: Fixed out-of-bound access in uclamp. Util-clamp places tasks into different buckets based on their clamp values for performance reasons. However, the size of the buckets is currently computed using a rounding division, whi...