Lucene search
+L

168899 matches found

CVE
CVE
added 2026/08/11 11:13 a.m.36 views

CVE-2026-72596

CVE-2026-72596 affects Ghost Foundation Ghost 5.x. A broken access control flaw allows authenticated users with the Author role to delete posts owned by others. The root cause is in the post model permissible() cascade: it lacks the branch that handles the combined isAuthor and isDestroy conditio...

8.1CVSS5.4AI score0.0021EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/11 11:13 a.m.15 views

EUVD-2026-56035

A broken access control vulnerability in Ghost Foundation Ghost 5.x allows authenticated Author-role users to delete posts owned by other users. The post model permissible cascade is missing the branch that handles the combined isAuthor and isDestroy condition, causing the authorization check to...

8.1CVSS5.4AI score0.0021EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/11 11:13 a.m.40 views

CVE-2026-72596 Ghost Foundation Ghost - Broken Access Control

A broken access control vulnerability in Ghost Foundation Ghost 5.x allows authenticated Author-role users to delete posts owned by other users. The post model permissible cascade is missing the branch that handles the combined isAuthor and isDestroy condition, causing the authorization check to...

8.1CVSS0.0021EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/11 11:13 a.m.11 views

EUVD-2026-56034

A broken access control vulnerability in BadChoice Handesk as of 2026-07-10 allows any authenticated agent to update ticket records belonging to other teams via the TicketsController@update endpoint. The endpoint calls no authorize method and performs no team-scoped ownership check. An attacker...

8.1CVSS5.3AI score0.00201EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/11 11:13 a.m.10 views

CVE-2026-72595

A broken access control vulnerability in BadChoice Handesk as of 2026-07-10 allows any authenticated agent to update ticket records belonging to other teams via the TicketsController@update endpoint. The endpoint calls no authorize method and performs no team-scoped ownership check. An attacker...

8.1CVSS5.3AI score0.00201EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/11 11:13 a.m.31 views

CVE-2026-72595

CVE-2026-72595 : In BadChoice Handesk, the vulnerability affects the TicketsController@update endpoint where no authorization check is performed and no team-scoped ownership is enforced. This allows any authenticated agent to update ticket records belonging to other teams, enabling modification, ...

8.1CVSS5.3AI score0.00201EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/11 11:13 a.m.34 views

CVE-2026-72595 BadChoice Handesk - Broken Access Control

A broken access control vulnerability in BadChoice Handesk as of 2026-07-10 allows any authenticated agent to update ticket records belonging to other teams via the TicketsController@update endpoint. The endpoint calls no authorize method and performs no team-scoped ownership check. An attacker...

8.1CVSS0.00201EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/11 11:13 a.m.21 views

EUVD-2026-56033

A broken access control vulnerability in BadChoice Handesk as of 2026-07-10 allows any authenticated agent to overwrite lead records belonging to other teams via the LeadsController@update endpoint. The endpoint performs no authorization check, and the Lead model has guarded set to an empty array...

8.1CVSS5.3AI score0.00201EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/11 11:13 a.m.35 views

CVE-2026-72563

CVE-2026-72563 affects BadChoice Handesk. A broken access control flaw on LeadsController@update allows any authenticated agent to overwrite lead records across team boundaries. Root cause: Lead model guarded is an empty array, making all columns mass-assignable, and no authorization check is per...

8.1CVSS5.3AI score0.00201EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/11 11:13 a.m.13 views

CVE-2026-72563

A broken access control vulnerability in BadChoice Handesk as of 2026-07-10 allows any authenticated agent to overwrite lead records belonging to other teams via the LeadsController@update endpoint. The endpoint performs no authorization check, and the Lead model has guarded set to an empty array...

8.1CVSS5.3AI score0.00201EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/11 11:13 a.m.40 views

CVE-2026-72563 BadChoice Handesk - Broken Access Control

A broken access control vulnerability in BadChoice Handesk as of 2026-07-10 allows any authenticated agent to overwrite lead records belonging to other teams via the LeadsController@update endpoint. The endpoint performs no authorization check, and the Lead model has guarded set to an empty array...

8.1CVSS0.00201EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/11 11:12 a.m.11 views

CVE-2026-72561

A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 allows any authenticated non-administrative user to reconfigure the platform global OIDC/SSO settings via an unprotected configuration endpoint. The endpoint performs no administrative role check before...

8.8CVSS5.3AI score0.00232EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/11 11:12 a.m.11 views

EUVD-2026-56031

A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 allows any authenticated non-administrative user to reconfigure the platform global OIDC/SSO settings via an unprotected configuration endpoint. The endpoint performs no administrative role check before...

8.8CVSS5.3AI score0.00232EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/11 11:12 a.m.40 views

CVE-2026-72561

CVE-2026-72561 describes a broken access control in Peppermint Lab Peppermint. Through commit ba6e217, any authenticated non-administrative user can reconfigure the platform’s global OIDC/SSO settings via an unprotected configuration endpoint that performs no administrative role check before appl...

8.8CVSS5.3AI score0.00232EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/11 11:12 a.m.39 views

CVE-2026-72561 Peppermint Lab Peppermint - Broken Access Control

A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 allows any authenticated non-administrative user to reconfigure the platform global OIDC/SSO settings via an unprotected configuration endpoint. The endpoint performs no administrative role check before...

8.8CVSS0.00232EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/11 11:11 a.m.41 views

CVE-2026-72556 ZoneMinder ZoneMinder - Remote Code Execution

A remote code execution vulnerability in ZoneMinder 1.39.17 allows any authenticated user to execute OS commands by exploiting a broken permission check in the Filter class. The canEdit and canDelete methods invoke nonexistent methods on the ZM\User class, causing PHP call to return a truthy valu...

8.8CVSS0.00669EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/11 11:11 a.m.10 views

EUVD-2026-56026

A remote code execution vulnerability in ZoneMinder 1.39.17 allows any authenticated user to execute OS commands by exploiting a broken permission check in the Filter class. The canEdit and canDelete methods invoke nonexistent methods on the ZM\User class, causing PHP call to return a truthy valu...

8.8CVSS6.4AI score0.00669EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/11 11:11 a.m.39 views

CVE-2026-72555 Peppermint Lab Peppermint - Broken Access Control

A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 exists because the Config.rolesactive flag defaults to false, causing all permission checks on ticket, client, and user handlers to behave as no-ops on default installations. All authenticated users bypass...

8.1CVSS0.00263EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/11 11:11 a.m.35 views

CVE-2026-72555

Peppermint Lab Peppermint is affected by a broken access control vulnerability (CVE-2026-72555) caused by the Config.roles_active flag defaulting to false, making all permission checks on ticket, client, and user handlers no-ops on default installations. As a result, all authenticated users can r...

8.1CVSS5.4AI score0.00263EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/11 11:11 a.m.11 views

CVE-2026-72555

A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 exists because the Config.rolesactive flag defaults to false, causing all permission checks on ticket, client, and user handlers to behave as no-ops on default installations. All authenticated users bypass...

8.1CVSS5.4AI score0.00263EPSS
SaveExploits0References2
Rows per page
Query Builder