GHSA-W39F-H553-H2MX Vikunja: Cross-tenant task-position rows can be injected into arbitrary project views via the unvalidated project_view_id in the task position endpoint (v1 and v2)

Summary The task-position endpoint authorizes only the task side of the write: TaskPosition.CanUpdate delegates to Task.CanUpdate write access to the task's own project and the request body's projectviewid is never validated to belong to the task's project, nor is any access to that view required...

CVE-2025-6758

Real Spaces - WordPress Properties Directory Theme ≤ 3.6 Unauthenticated Privilege Escalation to Administrator via imicagentregister 📝 Description CVE-2025-6758 CVSS Score: 9.8 Critical The Real Spaces - WordPress Properties Directory Theme for WordPress is vulnerable to privilege escalation via...

CVE-2025-2304-Camaleon-CMS-Mass-Assignment-Privilege-Escalation-PoC

CVE-2025-2304 — Camaleon CMS Mass Assignment Privilege Escalation PoC Privilege escalation vulnerability in Camaleon CMS /updatedajax with passwordrole=admin injected into the password parameters. 4. Verifies the role has been updated to admin. Requirements Python 3 Install dependencies: python3 ...

BIT-GHOST-2026-104412 Ghost 0.5.0 before 6.64.0 Privilege Escalation via Staff Role Assignment

Ghost 0.5.0 before 6.64.0 does not correctly restrict staff role assignment, allowing users with the Editor or Super Editor role to assign their own role to other staff despite lacking permission to do so. An authenticated Editor or Super Editor can promote Author and Contributor users to Editor ...

CVE-2026-78339

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Protection...

CVE-2026-96539 WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through 2.13.1...

CVE-2026-96539

The Ultimate Member WordPress plugin (versions

EUVD-2026-95585

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Protection...

CVE-2026-78339

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Protection...

CVE-2026-78339

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to an Incorrect Permission Assignment for Critical Resource (CWE-732). A low-privileged attacker with local access could exploit this flaw to achieve information disclosure , bypass protection mechanisms ...

PT-2026-108807

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description An incorrect permission assignment for critical resources allows a low privileged attacker with local access to potentially cause information disclosure,...

PT-2026-109155

Ghost 0.5.0 before 6.64.0 does not correctly restrict staff role assignment, allowing users with the Editor or Super Editor role to assign their own role to other staff despite lacking permission to do so. An authenticated Editor or Super Editor can promote Author and Contributor users to Editor ...

Linux driver net ethernet intel idpf idpf.h DoS

The vulnerability in the drivers/net/ethernet/intel/idpf/idpf.h component of the Linux operating system is related to the assignment of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

HAProxy hpack_dht_insert Heap Buffer Overflow DoS

The vulnerability of the hpackdhtinsert function in the source file src/hpack-tbl.c of the HAProxy server software is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions...

driver/net/ethernet/intel/idpf/idpf_lib.c component of the DoS

The vulnerability in the drivers/net/ethernet/intel/idpf/idpflib.c component of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Windows biometric service Privilege Escalation

The vulnerability of the biometric service in Windows operating systems is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to gain increased privileges...

GHSA-P96C-XWX8-3CQJ Payload has a tenant authorization bypass in Multi-Tenant Plugin

Impact When using the default tenant array field access, an authenticated user could assign themselves to other tenants. You are affected if: - You are using @payloadcms/plugin-multi-tenant If you configure the tenants arrayFieldAccess.create/update functions, a secured replacement membership...

EUVD-2026-93506

Payload has a tenant authorization bypass in Multi-Tenant Plugin...

EUVD-2026-92769

Ghost: Editors Could Promote Staff Users to Their Own Role...

Ghost: Editors Could Promote Staff Users to Their Own Role

Impact Staff users with the Editor or Super Editor role were able to assign their own role to Author and Contributor users, despite not having permission to assign that role. Vulnerable versions This vulnerability is present in Ghost from v0.5.0 up to v6.64.0. Patches v6.64.0 contains a fix for...