214 matches found
CVE-2026-105605
Joomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access in DJ-Classifieds 3.11.3 - A “duplicate my ad” convenience feature on the new-ad form site/models/additem.php loaded an existing advert by its raw numeric ID with no check that the ad belonged to the...
CVE-2026-105605
The DJ-Classifieds Joomla extension by dj-extensions.com (versions
EUVD-2026-115360
Joomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access in DJ-Classifieds 3.11.3 - A “duplicate my ad” convenience feature on the new-ad form site/models/additem.php loaded an existing advert by its raw numeric ID with no check that the ad belonged to the...
CVE-2026-105605 Joomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access in DJ-Classifieds < 3.11.3
Joomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access in DJ-Classifieds 3.11.3 - A “duplicate my ad” convenience feature on the new-ad form site/models/additem.php loaded an existing advert by its raw numeric ID with no check that the ad belonged to the...
CVE-2026-105605 Joomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access in DJ-Classifieds < 3.11.3
Joomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access in DJ-Classifieds 3.11.3 - A “duplicate my ad” convenience feature on the new-ad form site/models/additem.php loaded an existing advert by its raw numeric ID with no check that the ad belonged to the...
CVE-2026-105605: dj-extensions.com DJ-Classifieds extension for Joomla: Joomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access in DJ-Classifieds < 3.11.3 -…
Joomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access in DJ-Classifieds 3.11.3 - A “duplicate my ad” convenience feature on the new-ad form site/models/additem.php loaded an existing advert by its raw numeric ID with no check that the ad belonged to the...
PT-2026-135636
Joomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access in DJ-Classifieds 3.11.3 - A “duplicate my ad” convenience feature on the new-ad form site/models/additem.php loaded an existing advert by its raw numeric ID with no check that the ad belonged to the...
GHSA-4F8H-VR72-P32C virtualenv: Temporary app-data can leave dangling seed package links
Summary The app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when creation finishes. The environment-variable and configuration-file forms of symlinkappdata can enable this state even though the command-line flag is disabled for temporary app-data...
CVE-2026-93634
A cross-account authorization vulnerability in Zimbra Collaboration Suite ZCS allows an authenticated user to insert forged shared-file records into another user's mailbox through FileSharedWithMeRequest. The request bypasses delegated-account authorization and accepts attacker-selected file...
CVE-2026-93634 Zimbra Collaboration Suite Cross-Account Authorization Bypass via Forged Shared-File Records
A cross-account authorization vulnerability in Zimbra Collaboration Suite ZCS allows an authenticated user to insert forged shared-file records into another user's mailbox through FileSharedWithMeRequest. The request bypasses delegated-account authorization and accepts attacker-selected file...
EUVD-2026-108974
A cross-account authorization vulnerability in Zimbra Collaboration Suite ZCS allows an authenticated user to insert forged shared-file records into another user's mailbox through FileSharedWithMeRequest. The request bypasses delegated-account authorization and accepts attacker-selected file...
PT-2026-122115
A cross-account authorization vulnerability in Zimbra Collaboration Suite ZCS allows an authenticated user to insert forged shared-file records into another user's mailbox through FileSharedWithMeRequest. The request bypasses delegated-account authorization and accepts attacker-selected file...
GO-2026-6753 Vikunja: Link-share principal ID collision allows cross-account API token issuance and management in code.vikunja.io/api
Vikunja: Link-share principal ID collision allows cross-account API token issuance and management in code.vikunja.io/api. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive...
PT-2026-118057
Vikunja: Link-share principal ID collision allows cross-account API token issuance and management in code.vikunja.io/api. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive...
PT-2026-118030
Vikunja: Link-share principal-type confusion enables cross-account team removal, bot takeover, and roster disclosure in code.vikunja.io/api...
GHSA-VVCV-VPPH-H844 Vikunja: Link-share principal ID collision allows cross-account API token issuance and management
Executive Summary Vikunja accepts both regular-user JSON Web Tokens JWTs and link-share JWTs through its generic authenticated API route group. A link-share JWT resolves to a models.LinkSharing principal whose GetID method returns the numeric linkshares.id. The API-token management model then...
Vikunja: Link-share principal ID collision allows cross-account API token issuance and management
Executive Summary Vikunja accepts both regular-user JSON Web Tokens JWTs and link-share JWTs through its generic authenticated API route group. A link-share JWT resolves to a models.LinkSharing principal whose GetID method returns the numeric linkshares.id. The API-token management model then...
CVE-2026-100679 stoatchat before 0.15.5 MFA Bypass via Cross-Account Ticket
stoatchat before 0.15.5 fails to validate that MFA tickets belong to the authenticated user, allowing attackers to bypass MFA by using their own valid ticket with another user's session token. Attackers can obtain a ticket from their own account and use it with a victim's session token to disable...
CVE-2026-100679 stoatchat before 0.15.5 MFA Bypass via Cross-Account Ticket
stoatchat before 0.15.5 fails to validate that MFA tickets belong to the authenticated user, allowing attackers to bypass MFA by using their own valid ticket with another user's session token. Attackers can obtain a ticket from their own account and use it with a victim's session token to disable...
CVE-2026-100679 stoatchat before 0.15.5 MFA Bypass via Cross-Account Ticket
stoatchat before 0.15.5 fails to validate that MFA tickets belong to the authenticated user, allowing attackers to bypass MFA by using their own valid ticket with another user's session token. Attackers can obtain a ticket from their own account and use it with a victim's session token to disable...