169794 matches found
CVE-2026-111607 Jeepay through 3.2.9 IDOR via POST /api/mch/payConfigs
Jeepay through 3.2.9 contains an insecure direct object reference vulnerability that allows authenticated merchant users to overwrite another merchant application's payment channel configuration by supplying a victim infoId to MchPayInterfaceConfigController.saveOrUpdate. Attackers holding the...
CVE-2026-111607 Jeepay through 3.2.9 IDOR via POST /api/mch/payConfigs
Jeepay through 3.2.9 contains an insecure direct object reference vulnerability that allows authenticated merchant users to overwrite another merchant application's payment channel configuration by supplying a victim infoId to MchPayInterfaceConfigController.saveOrUpdate. Attackers holding the...
CVE-2026-111607
The Jeepay payment system (versions through 3.2.9 ) contains an Insecure Direct Object Reference (IDOR) vulnerability in the MchPayInterfaceConfigController.saveOrUpdate function. This flaw allows authenticated merchant users with the ENT_MCH_PAY_CONFIG_ADD permission to overwrite another merchan...
CVE-2026-111603
PlayEdu versions through 2.3 are affected by a missing authorization vulnerability within the CourseController . The root cause is the omission of a department visibility check , which allows authenticated students to access department-restricted courses. Attackers can perform ID enumeration on s...
EUVD-2026-103025
PlayEdu through 2.3 contains a missing authorization vulnerability in the CourseController that allows authenticated students to access department-restricted courses by omitting the department visibility check. Attackers can enumerate sequential course and attachment IDs via the course details an...
CVE-2026-111603 PlayEdu through 2.3 Missing Authorization via Student CourseController Endpoints
PlayEdu through 2.3 contains a missing authorization vulnerability in the CourseController that allows authenticated students to access department-restricted courses by omitting the department visibility check. Attackers can enumerate sequential course and attachment IDs via the course details an...
CVE-2026-109839 IBM Db2 Genius Hub Missing Cryptographic Step
IBM Db2 Genius Hub 1.0 could allow a remote authenticated attacker to bypass security restrictions due to a missing initialization vector in the cryptographic algorithm...
CVE-2026-109839
IBM Db2 Genius Hub 1.0 is vulnerable to a security restriction bypass because of a missing initialization vector in its cryptographic algorithm (CWE-325). This flaw could be exploited by a remote authenticated attacker to impact the integrity of the system. To remediate this vulnerability, users ...
CVE-2026-92263
SparkyFitness is a self-hosted, AI-powered health and fitness tracker for families. Prior to 1.6.0, the api/admin/backup/restore endpoint interpolates an uploaded filename into a shell command. An authenticated global administrator uploads a restore archive with a crafted filename. The...
CVE-2026-107777
Thermo Fisher Torrent Suite Software is vulnerable to a path traversal, which could allow an authenticated attacker to read arbitrary files on the Torrent Server that are accessible to the web service account...
WordPress xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN plugin <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN versions = 1.4.2...
CVE-2026-107777
The Thermo Fisher Torrent Suite Software is vulnerable to a path traversal vulnerability. This flaw could allow an authenticated attacker to read arbitrary files on the Torrent Server that are accessible to the web service account. While no known public exploitation has been reported, CISA recomm...
CVE-2026-107777 Thermo Fisher Torrent Suite Software Path Traversal
Thermo Fisher Torrent Suite Software is vulnerable to a path traversal, which could allow an authenticated attacker to read arbitrary files on the Torrent Server that are accessible to the web service account...
EUVD-2026-102896
Thermo Fisher Torrent Suite Software is vulnerable to a path traversal, which could allow an authenticated attacker to read arbitrary files on the Torrent Server that are accessible to the web service account...
WordPress Welcart e-Commerce plugin <= 2.12.4 - Authenticated (Editor+) SQL Injection vulnerability
Authenticated Editor+ SQL Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin Welcart e-Commerce versions = 2.12.4...
CVE-2026-110805
Server-side request forgery in PingOne groups endpoint in Devolutions Server 2026.3.8.0 and earlier allows an authenticated low-privileged user to exfiltrate the stored PingOne application secret via an attacker-controlled PingOne configuration in the request parameter...
CVE-2026-110805
Server-side request forgery in PingOne groups endpoint in Devolutions Server 2026.3.8.0 and earlier allows an authenticated low-privileged user to exfiltrate the stored PingOne application secret via an attacker-controlled PingOne configuration in the request parameter...
CVE-2026-110806
Incorrect authorization in add-on properties in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with only View permission to obtain add-on passwords via the unredacted add-on properties returned in connection data...
EUVD-2026-102875
Incorrect authorization in add-on properties in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with only View permission to obtain add-on passwords via the unredacted add-on properties returned in connection data...