CVE-2026-2165

A weakness has been identified in detronetdip E-commerce 1.0.0. Impacted is an unknown function of the file /Admin/assets/backend/seller/addseller.php of the component Account Creation Endpoint. Executing a manipulation of the argument email can lead to missing authentication. The attack can be...

CVE-2026-2165 detronetdip E-commerce Account Creation Endpoint add_seller.php missing authentication

A weakness has been identified in detronetdip E-commerce 1.0.0. Impacted is an unknown function of the file /Admin/assets/backend/seller/addseller.php of the component Account Creation Endpoint. Executing a manipulation of the argument email can lead to missing authentication. The attack can be...

CVE-2026-2165

A weakness has been identified in detronetdip E-commerce 1.0.0. Impacted is an unknown function of the file /Admin/assets/backend/seller/addseller.php of the component Account Creation Endpoint. Executing a manipulation of the argument email can lead to missing authentication. The attack can be...

EUVD-2026-5784

A weakness has been identified in detronetdip E-commerce 1.0.0. Impacted is an unknown function of the file /Admin/assets/backend/seller/addseller.php of the component Account Creation Endpoint. Executing a manipulation of the argument email can lead to missing authentication. The attack can be...

CVE-2026-23903

creationtimestamp| type| source ---|---|--- 2026-02-08 15:47:26+00:00| seen| https://seclists.org/oss-sec/2026/q1/148 2026-02-08 17:14:48+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3meegoheeuv2w...

CVE-2026-25881

creationtimestamp| type| source ---|---|--- 2026-02-08 10:32:31+00:00| published-proof-of-concept| https://github.com/nyariv/SandboxJS/security/advisories/GHSA-ww7g-4gwx-m7wj 2026-02-09 22:18:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mehi5amyms2a 2026-02-10...

CVE-2026-2187

creationtimestamp| type| source ---|---|--- 2026-02-08 09:22:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116034275302342033...

CVE-2026-2140

creationtimestamp| type| source ---|---|--- 2026-02-08 07:30:34+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3medfzphaux2u 2026-02-08 07:30:38+00:00| seen| https://infosec.exchange/users/offseq/statuses/116033836206401561...

CVE-2026-25723

creationtimestamp| type| source ---|---|--- 2026-02-08 04:40:05+00:00| seen| https://gist.github.com/alon710/7bbde07266f0ce6a4608d33da3c417d3...

CVE-2026-25857

creationtimestamp| type| source ---|---|--- 2026-02-08 04:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116033128377019948 2026-02-08 04:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3med3xtckhe2f...

GHSA-F5X2-VJ4H-VG4C

creationtimestamp| type| source ---|---|--- 2026-02-08 03:10:06+00:00| seen| https://gist.github.com/alon710/8313d7afe645c9d035fed8ea6e3f58d8...

CVE-2026-25754

creationtimestamp| type| source ---|---|--- 2026-02-08 03:10:06+00:00| seen| https://gist.github.com/alon710/8313d7afe645c9d035fed8ea6e3f58d8 2026-07-15 23:00:14+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mqpt6omwjh2x 2026-07-16 00:27:26+00:00| seen|...

CVE-2026-2120

creationtimestamp| type| source ---|---|--- 2026-02-08 01:30:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mecrvzwvft2f 2026-02-08 01:30:40+00:00| seen| https://infosec.exchange/users/offseq/statuses/116032420763986584...

GHSA-26GQ-GRMH-6XM6

creationtimestamp| type| source ---|---|--- 2026-02-08 01:10:05+00:00| seen| https://gist.github.com/alon710/9d16288fb5403944d09be7f88afc1b71...

GHSA-XX9G-FH25-4Q64

creationtimestamp| type| source ---|---|--- 2026-02-08 00:40:06+00:00| seen| https://gist.github.com/alon710/e2cbb4e3c7fdeb40d051c3d7c45483a1...

EUVD-2026-5704

WeKan versions prior to 8.19 contain an authorization logic vulnerability where the instance configuration setting allowPrivateOnly is not sufficiently enforced at board creation time. When allowPrivateOnly is enabled, users can still create public boards due to incomplete server-side enforcement...

EUVD-2026-5709

WeKan versions prior to 8.19 contain an insecure direct object reference IDOR in checklist creation and related checklist routes. The implementation does not verify that the supplied cardId belongs to the supplied boardId, allowing cross-board ID tampering by manipulating identifiers...

EUVD-2026-5708

WeKan versions prior to 8.19 contain an insecure direct object reference IDOR in checklist creation and related checklist routes. The implementation does not verify that the supplied cardId belongs to the supplied boardId, allowing cross-board ID tampering by manipulating identifiers...

CVE-2026-25793

creationtimestamp| type| source ---|---|--- 2026-02-08 00:10:06+00:00| seen| https://gist.github.com/alon710/5e14acf3178fd2de685f82c8375fcf6e...

PT-2026-6996

Name of the Vulnerable Software and Affected Versions detronetdip E-commerce version 1.0.0 Description A weakness exists in detronetdip E-commerce 1.0.0 related to account creation. A manipulation of the email argument within an unknown function of the file /Admin/assets/backend/seller/add...