CVE-2024-52317

🚨🚨CVE-2024-52317🚨🚨 CVE-2024-52317 - Vulnérabilité de fuite de données HTTP/2 d'Apache Tomcat Vue d'ensemble CVE-2024-52317 est une vulnérabilité affectant l'implémentation HTTP/2 d'Apache Tomcat. Le problème vient d'un recyclage inapproprié des ressources de requêtes et réponses HTTP/2, pouvant...

CVE-2026-33555

Обход проверки тела запроса в HAProxy H3/QUIC Standalone FIN при HTTP Request Smuggling Полная статья здесь: https://r3verii.github.io/cve/2026/04/14/haproxy-h3-standalone-fin-smuggling.html Краткое описание Уязвимость в реализации HTTP/3 в HAProxy позволяет злоумышленнику отправить HTTP-запрос с...

CVE-2025-46818

CVE-2025-46818 – Обход песочницы Lua в Redis между пользователями Обход песочницы через устаревшие Lua API и изменяемые метатаблицы в Redis 8.2.1. Обзор Redis 8.2.1 оставляет устаревшие встроенные функции Lua getfenv, setfenv, newproxy доступными для скриптов и не блокирует метатаблицы для базовы...

CVE-2026-54519

CVE-2026-54519 ai-agent-automation des vérifications de propriété manquantes dans les API mémoire ont permis la lecture et la suppression de mémoire entre utilisateurs. Avis principal : GHSA-qv97-83w4-ff86 Crédit du chercheur : @chaitanyagarware En un coup d'œil Champ| Valeur ---|--- CVE|...

CVE-2026-96283 Flatpak: flatpak: flatpak-system-helper cross-user cancelpull orphans another user's ongoing pull

By calling org.freedesktop.Flatpak.SystemHelper.CancelPull on another user's pull, the pull is not actually cancelled but removed from internal tracking, making it impossible for the owning user to stop it. Ongoing pulls cannot be stopped...

CVE-2026-96283 Flatpak: flatpak: flatpak-system-helper cross-user cancelpull orphans another user's ongoing pull

By calling org.freedesktop.Flatpak.SystemHelper.CancelPull on another user's pull, the pull is not actually cancelled but removed from internal tracking, making it impossible for the owning user to stop it. Ongoing pulls cannot be stopped...

CVE-2026-96283

By calling org.freedesktop.Flatpak.SystemHelper.CancelPull on another user's pull, the pull is not actually cancelled but removed from internal tracking, making it impossible for the owning user to stop it. Ongoing pulls cannot be stopped...

CVE-2026-96283

The Flatpak software suite is affected by a cross-user vulnerability where calling org.freedesktop.Flatpak.SystemHelper.CancelPull on another user's pull operation removes it from internal tracking without actually cancelling the action. This results in orphaned pulls that the owning user cannot ...

CVE-2026-77293 TREK: Cross-user note-file deletion (IDOR / Broken Access Control)

TREK is a collaborative travel planner. Prior to 3.3.0, the DELETE /api/trips/:tripId/collab/notes/:noteId/files/:fileId endpoint authorizes an authenticated user against the attacker-controlled tripId but deleteNoteFile in server/src/services/collabService.ts resolves the target only by note and...

WordPress WP OAuth Server ( Login with WordPress ) plugin < 6.4.0 - Subscriber+ Cross-User Account Takeover vulnerability

Subscriber+ Cross-User Account Takeover vulnerability discovered by vuxvinh in WordPress Plugin WP OAuth Server versions 6.4.0...

GHSA-GVF2-2RH5-MPGF OpenC3 COSMOS: Stored, cross-user XSS via Telemetry screen BUTTON widget

Summary A user who can save a telemetry screen permission systemset can embed JavaScript in a screen BUTTON widget. The BUTTON widget evals the stored button text in the browser when the button is activated, and screens are shared content rendered to other users in the scope. As a result, an...

OpenC3 COSMOS: Stored, cross-user XSS via Telemetry screen BUTTON widget

Summary A user who can save a telemetry screen permission systemset can embed JavaScript in a screen BUTTON widget. The BUTTON widget evals the stored button text in the browser when the button is activated, and screens are shared content rendered to other users in the scope. As a result, an...

CVE-2026-84150 Directorist < 8.9.5 - Subscriber+ Cross-User Favorites Read and Write via REST Favorites Endpoint

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not verify that the target user of a REST route matches the authenticated caller before reading and modifying that user's saved favorites, allowing any authenticated user with...

CVE-2026-84150

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin is vulnerable in versions before 8.9.5 . The application fails to verify if the target user of a REST route matches the authenticated caller when accessing or modifying saved favorites. This allows any auth...

WordPress Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin < 8.9.5 - Subscriber+ Cross-User Favorites Read and Write vulnerability

Subscriber+ Cross-User Favorites Read and Write vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin Directorist versions 8.9.5...

CVE-2026-84150 Directorist < 8.9.5 - Subscriber+ Cross-User Favorites Read and Write via REST Favorites Endpoint

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not verify that the target user of a REST route matches the authenticated caller before reading and modifying that user's saved favorites, allowing any authenticated user with...

CVE-2026-79314

A horizontal privilege escalation vulnerability exists in x-ui 0.3.2 . An authenticated user can perform unauthorized cross-user modification of data by submitting a request referencing a target resource identifier. The root cause is that the update path fails to verify if the target resource bel...

PT-2026-97018

Name of the Vulnerable Software and Affected Versions GNU wget Windows builds from eternallybored.org affected versions not specified Description A local cross-user code execution issue exists due to a hardcoded configuration file path at C:msys64 that can be written to by unprivileged users. Thi...

CVE-2026-77520 MaxKB: Homepage ranking leaks application IDs that workflow application-nodes can use to invoke another user's application

MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, a normal user in the same workspace can obtain another user's applicationid from the homepage application question-ranking endpoint when the published victim application has ranking activity in the selected date range...

CVE-2026-77520 MaxKB: Homepage ranking leaks application IDs that workflow application-nodes can use to invoke another user's application

MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, a normal user in the same workspace can obtain another user's applicationid from the homepage application question-ranking endpoint when the published victim application has ranking activity in the selected date range...