CVE-2026-77142 Broken Access Control in extension "Industry Directory" (yellowpages2)

The frontend company self-service editing feature relies on a template-level visibility flag to hide the edit form for company records a visitor does not own, but the corresponding write operation does not repeat this ownership check on the server side. As a result, a visitor who knows the...

CVE-2026-77141 Broken Access Control in extension "Club Directory" (clubdirectory)

The extension resolves the targeted club record from a user-supplied request argument in its frontend edit, update, and activate actions, but performs no ownership check in any of them. An unauthenticated visitor who knows the UID of a club record can send a direct request to the update or activa...

CVE-2026-77142

CVE-2026-77142 is a Broken Access Control vulnerability in the TYPO3 extension Industry Directory (yellowpages2) . The frontend self-service editing feature hides the edit form using a template-level visibility flag for company records a visitor does not own, but the corresponding server-side wri...

CVE-2026-77141 Broken Access Control in extension "Club Directory" (clubdirectory)

The extension resolves the targeted club record from a user-supplied request argument in its frontend edit, update, and activate actions, but performs no ownership check in any of them. An unauthenticated visitor who knows the UID of a club record can send a direct request to the update or activa...

CVE-2026-77142 Broken Access Control in extension "Industry Directory" (yellowpages2)

The frontend company self-service editing feature relies on a template-level visibility flag to hide the edit form for company records a visitor does not own, but the corresponding write operation does not repeat this ownership check on the server side. As a result, a visitor who knows the...

CVE-2026-77141

CVE-2026-77141 is a Broken Access Control vulnerability in the TYPO3 extension Club Directory (clubdirectory). The extension resolves the targeted club record from a user-supplied request argument in its frontend edit, update, and activate actions but performs no ownership check in any of them. A...

TYPO3-EXT-SA-2026-019: Broken Access Control in extension "Club Directory" (clubdirectory)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-019...

TYPO3-EXT-SA-2026-018: Broken Access Control in extension "Telephone Directory" (telephonedirectory)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-018...

TYPO3-EXT-SA-2026-020: Broken Access Control in extension "Industry Directory" (yellowpages2)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-020...

Apache-GOExploiter

🛠 ApacheGoExploiter – Toolkit di Exploit per il Metodo PUT CVE-2025-24813 ApacheGoExploiter è uno strumento proof-of-concept basato su Go per scansionare e sfruttare server Apache Tomcat vulnerabili a CVE-2025-24813. Verifica il supporto HTTP PUT esposto sulla porta 8080 e tenta di caricare file ...

RLSA-2026:58971 Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Directory Traversal

Overview vrana/adminer is a Database management in a single file. Affected versions of this package are vulnerable to Directory Traversal via the db parameter in SQLite mode when the database-list drop action does not validate file extensions before deletion. An attacker can delete arbitrary file...

Directory Traversal

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Directory Traversal via the deleteFile function in the MediaUploadTrait process. An attacker can delete arbitrary files outside the intended...

Directory Traversal

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Directory Traversal via the mediadirectory function. An attacker can enumerate and access files outside the intended scope by supplying...

Directory Traversal

Overview GitPython is a python library used to interact with Git repositories Affected versions of this package are vulnerable to Directory Traversal through Repo.clone and Repo.clonefrom in git/repo/base.py. An attacker can create a Git repository metadata directory outside the intended clone...

GHSA-7R39-6Q8M-QW68 Duplicate Advisory: clone_from()/clone() omit --separate-git-dir from unsafe_git_clone_options, enabling arbitrary git-directory creation outside the destination

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8mcc-hrx5-hvxc. This link is maintained to preserve external references. Original Description GitPython before 3.1.59 omits --separate-git-dir from unsafegitcloneoptions, allowing attackers to create arbitrary g...

Duplicate Advisory: clone_from()/clone() omit --separate-git-dir from unsafe_git_clone_options, enabling arbitrary git-directory creation outside the destination

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8mcc-hrx5-hvxc. This link is maintained to preserve external references. Original Description GitPython before 3.1.59 omits --separate-git-dir from unsafegitcloneoptions, allowing attackers to create arbitrary g...

PYSEC-2026-3787

GitPython before 3.1.59 omits --separate-git-dir from unsafegitcloneoptions, allowing attackers to create arbitrary git directories outside the intended clone destination. Attackers can pass a separategitdir parameter to Repo.clonefrom or Repo.clone to redirect repository metadata to an...

DEBIAN-CVE-2026-78677

GitPython before 3.1.59 omits --separate-git-dir from unsafegitcloneoptions, allowing attackers to create arbitrary git directories outside the intended clone destination. Attackers can pass a separategitdir parameter to Repo.clonefrom or Repo.clone to redirect repository metadata to an...

CVE-2026-78677

GitPython before 3.1.59 omits --separate-git-dir from unsafegitcloneoptions, allowing attackers to create arbitrary git directories outside the intended clone destination. Attackers can pass a separategitdir parameter to Repo.clonefrom or Repo.clone to redirect repository metadata to an...