19044 matches found
PT-2026-54508
Name of the Vulnerable Software and Affected Versions SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery versions prior to 3.9.6 Description An issue exists that allows unauthenticated attackers to perform privilege escalation via account takeover. The plugin fai...
CVE-2026-10648
creationtimestamp| type| source ---|---|--- 2026-06-29 23:58:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphoxnxguj2q 2026-06-30 01:55:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphvjll4t22o...
CVE-2026-53426
creationtimestamp| type| source ---|---|--- 2026-06-29 22:01:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphiguy5rn2x 2026-06-29 22:36:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphkestmkb2d 2026-06-29 23:20:45+00:00| seen|...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the alert rule store process. An attacker can read, modify, or delete alert rules belonging to other organizations by supplying a target rule UUID and bypassing multi-tenant access...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the alert rule store process. An attacker can read, modify, or delete alert rules belonging to other organizations by supplying a target rule UUID and bypassing multi-tenant access...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the alert rule store process. An attacker can read, modify, or delete alert rules belonging to other organizations by supplying a target rule UUID and bypassing multi-tenant access...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the alert rule store process. An attacker can read, modify, or delete alert rules belonging to other organizations by supplying a target rule UUID and bypassing multi-tenant access...
SQL Injection
Overview Affected versions of this package are vulnerable to SQL Injection in the rule ID path parameter of the alert-history endpoints. An attacker can execute arbitrary database queries and access sensitive data by injecting specially crafted input. This may also allow the attacker to perform...
CVE-2026-57956
creationtimestamp| type| source ---|---|--- 2026-06-29 19:13:18+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mph725ba3a2w 2026-06-29 19:13:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph725cpjm2n 2026-06-29 21:54:04+00:00| seen|...
CVE-2026-56781
creationtimestamp| type| source ---|---|--- 2026-06-29 18:48:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph5o2dlqv2o...
CVE-2026-57956
SigNoz before 0.133.0 contains a broken access control vulnerability that allows authenticated users to access other organizations' alert rules by supplying a target rule UUID, as the alert rule store predicates fail to filter by organization ID. Attackers can read, edit, and delete alert rules...
CVE-2026-57955
SigNoz through 0.130.1 contains a SQL injection vulnerability that allows authenticated attackers to execute arbitrary ClickHouse queries by injecting URL-encoded quotes into the rule ID path parameter of the alert-history endpoints. Attackers can manipulate the unsanitized rule ID interpolated...
CVE-2026-48294
creationtimestamp| type| source ---|---|--- 2026-06-29 17:27:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgz4tnidx2d 2026-07-22 15:00:24+00:00| seen| https://bsky.app/profile/hendryadrian.bsky.social/post/3mraln3lnbe2p 2026-07-22 17:08:03+00:00| seen|...
CVE-2026-57956
SigNoz before 0.133.0 contains a broken access control vulnerability that allows authenticated users to access other organizations' alert rules by supplying a target rule UUID, as the alert rule store predicates fail to filter by organization ID. Attackers can read, edit, and delete alert rules...
CVE-2026-57956 SigNoz < 0.133.0 - Cross-Organization Insecure Direct Object Reference in Alert Rules
SigNoz before 0.133.0 contains a broken access control vulnerability that allows authenticated users to access other organizations' alert rules by supplying a target rule UUID, as the alert rule store predicates fail to filter by organization ID. Attackers can read, edit, and delete alert rules...
CVE-2026-57956 SigNoz 0.130.1 - Cross-Organization Insecure Direct Object Reference in Alert Rules
SigNoz through 0.130.1 contains a broken access control vulnerability that allows authenticated users to access other organizations' alert rules by supplying a target rule UUID, as the alert rule store predicates fail to filter by organization ID. Attackers can read, edit, and delete alert rules...
EUVD-2026-40141
SigNoz through 0.130.1 contains a broken access control vulnerability that allows authenticated users to access other organizations' alert rules by supplying a target rule UUID, as the alert rule store predicates fail to filter by organization ID. Attackers can read, edit, and delete alert rules...
CVE-2026-57956 SigNoz < 0.133.0 - Cross-Organization Insecure Direct Object Reference in Alert Rules
SigNoz before 0.133.0 contains a broken access control vulnerability that allows authenticated users to access other organizations' alert rules by supplying a target rule UUID, as the alert rule store predicates fail to filter by organization ID. Attackers can read, edit, and delete alert rules...
CVE-2026-57956
SigNoz
EUVD-2026-40140
SigNoz through 0.130.1 contains a SQL injection vulnerability that allows authenticated attackers to execute arbitrary ClickHouse queries by injecting URL-encoded quotes into the rule ID path parameter of the alert-history endpoints. Attackers can manipulate the unsanitized rule ID interpolated...