1021 matches found
PT-2026-77030
Dolibarr contains an authorization bypass vulnerability in the clonetasks mass action that allows authenticated users with project creation permissions to clone tasks into private projects they are not authorized to access. An inverted boolean condition in the private-project membership check...
CVE-2026-19930
A security flaw has been discovered in Dolibarr up to 23.0.3. Affected is an unknown function of the file htdocs/user/card.php of the component User Cloning. The manipulation of the argument ID results in ldap injection. It is possible to launch the attack remotely. The exploit has been released ...
EUVD-2026-59846
A security flaw has been discovered in Dolibarr up to 23.0.3. Affected is an unknown function of the file htdocs/user/card.php of the component User Cloning. The manipulation of the argument ID results in ldap injection. It is possible to launch the attack remotely. The exploit has been released ...
CVE-2026-19930
Dolibarr (up to 23.0.3) is affected by a LDAP injection in the User Cloning workflow. The vulnerability resides in htdocs/user/card.php and is triggered by manipulating the ID argument, allowing remote execution of the attack. Public exploit exists. The patch is identified as 798e65356ede03c2812a...
CVE-2026-19930
A security flaw has been discovered in Dolibarr up to 23.0.3. Affected is an unknown function of the file htdocs/user/card.php of the component User Cloning. The manipulation of the argument ID results in ldap injection. It is possible to launch the attack remotely. The exploit has been released ...
CVE-2026-19930 Dolibarr User Cloning card.php ldap injection
A security flaw has been discovered in Dolibarr up to 23.0.3. Affected is an unknown function of the file htdocs/user/card.php of the component User Cloning. The manipulation of the argument ID results in ldap injection. It is possible to launch the attack remotely. The exploit has been released ...
CVE-2026-19930 Dolibarr User Cloning card.php ldap injection
A security flaw has been discovered in Dolibarr up to 23.0.3. Affected is an unknown function of the file htdocs/user/card.php of the component User Cloning. The manipulation of the argument ID results in ldap injection. It is possible to launch the attack remotely. The exploit has been released ...
PT-2026-73076
A security flaw has been discovered in Dolibarr up to 23.0.3. Affected is an unknown function of the file htdocs/user/card.php of the component User Cloning. The manipulation of the argument ID results in ldap injection. It is possible to launch the attack remotely. The exploit has been released ...
CVE-2026-17349
A flaw was found in pgAdmin 4. An authenticated, low-privilege user could exploit a vulnerability in the adhoc server cloning feature to gain unauthorized access to another user's stored database credentials. By initiating an adhoc connection to a shared server owned by another user, the cloning...
CVE-2026-64639
Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user customer, reseller to execute arbitrary code on behalf of the database server administrator...
CVE-2026-64639
CVE-2026-64639 describes an incorrect database cloning process in Plesk versions 18.0.52 before 18.0.79.6 and 18.0.80.2, which allows a low-privileged user (customer, reseller) to execute arbitrary code on behalf of the database server administrator. The documentation does not provide additional ...
CVE-2026-64639
Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user customer, reseller to execute arbitrary code on behalf of the database server administrator...
EUVD-2026-57273
Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user customer, reseller to execute arbitrary code on behalf of the database server administrator...
CVE-2026-64639
Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user customer, reseller to execute arbitrary code on behalf of the database server administrator...
PT-2026-71115
Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user customer, reseller to execute arbitrary code on behalf of the database server administrator...
CVE-2026-68399
A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component, specifically within the socket cloning mechanism. When a new socket is created and its cloning process fails prematurely, the new socket's BPF local storage may incorrectly reference the parent socket's storage. This can...
CVE-2026-71556
CVE-2026-71556 affects the Go library go-git (Go) and involves worktree operations (checkout, status, add) not confining symlink resolution to the worktree boundary. A malicious repository containing a symlink can cause access to files outside the intended working directory when cloning and using...
EUVD-2026-53344
ESPHome through 2026.7.0-dev contains an operator-precedence bug in the cv.url validator in esphome/configvalidation.py: if parsed.scheme and parsed.netloc or parsed.scheme == "file": return parsed.geturl. Because and binds tighter than or, any file: URI passes validation regardless of netloc. Th...