CVE-2026-77923: Incorrect Authorization

Dolibarr 21.0.0 before 24.0.0 contains an authorization bypass vulnerability caused by an inverted boolean condition in the private-project membership check within the clonetasks mass action handler in htdocs/core/actionsmassactions.inc.php. Authenticated users with project creation permission bu...

Exploit for SQL Injection in Ghost

CVE-2026-26980 ★ CVE-2026-26980 TryGhost Ghost CMS Content AP...

CVE-2026-61518

ISPConfig contains an authenticated SQL injection vulnerability in the Remote API. The primaryid parameter passed to delete and update API methods is concatenated directly into SQL WHERE clauses without integer casting or parameterized query binding. The built-in SQL injection scanner does not...

CVE-2026-61518

ISPConfig contains an authenticated SQL injection vulnerability in its Remote API . The primary_id parameter passed to delete and update API methods is concatenated directly into SQL WHERE clauses without integer casting or parameterized query binding. The built-in SQL injection scanner does not ...

CVE-2026-61518: Improper Neutralization of Special Elements used in an SQL Command

ISPConfig contains an authenticated SQL injection vulnerability in the Remote API. The primaryid parameter passed to delete and update API methods is concatenated directly into SQL WHERE clauses without integer casting or parameterized query binding. The built-in SQL injection scanner does not...

MagicMirror newsfeed Socket.IO notification allows blind server-side request forgery

Vulnerability — Blind SSRF via CHECKARTICLEURL MagicMirror² newsfeed Analysis of the PoC exploit-ssrf-newsfeed.js. Target: newsfeed/nodehelper.js of MagicMirror², socket.io namespace /newsfeed. --- Identification | Field | Value | |-------|-------| | PoC file | exploit-ssrf-newsfeed.js | | Endpoi...

CVE-2026-73692

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

ANT-2026-XJKJSANG · supabase/auth · other

other low Severity Claude low · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-XJKJSANG: Azure issuer check uses always-true boolean expression In the Azure external auth provider azure.go:72, t...

CVE-2026-73692

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

EUVD-2026-60764

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-73692

...

CVE-2026-73692

This CVE ID has been rejected by its CVE Numbering Authority. The underlying vulnerability, tracked as PT-2026-77030 , affects Dolibarr and involves an authorization bypass in the clonetasks mass action . The root cause is an inverted boolean condition in the private-project membership check with...

PT-2026-77030

Dolibarr contains an authorization bypass vulnerability in the clonetasks mass action that allows authenticated users with project creation permissions to clone tasks into private projects they are not authorized to access. An inverted boolean condition in the private-project membership check...

CVE-2026-72231

CVE-2026-72231 affects the Linux kernel’s batman-adv TT (traffic test) logic. The vulnerability arises in batadv_send_tt_request(), which previously allocated a tt_req_node for a destination originator, potentially allowing multiple TT requests to be sent concurrently. The issue is that a send-bu...

SQL Injection

Spring Data Relational is vulnerable to SQL Injection. The vulnerability is due to insufficient escaping of wildcard characters in user-controlled input, which allows an attacker to inject wildcard patterns and perform boolean-based blind data inference...

CVE-2026-69117: Authorization Bypass Through User-Controlled Key

NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only API tokens, to inject arbitrary Django ORM lookup expressions into nested object references by supplying crafted JSON dictionary keys in POST, PUT, or PATCH requests to any RES...

CVE-2026-18737 Shlink Blind SQL Injection via tags/stats orderBy Parameter

Shlink contains a blind SQL injection vulnerability that allows any authenticated API key holder to inject arbitrary SQL fragments by supplying an unvalidated direction value in the orderBy query parameter of the tag statistics endpoint. Attackers can craft a malicious direction string containing...

NPM: AWS CDK CodeBuild S3 Log Encryption Boolean Inversion

NPM: AWS CDK CodeBuild S3 Log Encryption Boolean Inversion vulnerability discovered by ? in WordPress Npm aws-cdk-lib versions 2.253.0...

The Red Agent POV: The One Boolean That Broke a B2B Platform’s Credit System

Part 3: How the Red Agent bypassed a credit and paywall system by changing a single client-side value from false to true...

CVE-2026-56287

A boolean-based SQL Injection vulnerability exists in Apache Fineract's Client Search API GET /api/v1/clients in versions up to and including 1.14.0. The orderBy and sortOrder request parameters are concatenated into a SQL query without sufficient validation, allowing an authenticated user with...