17907 matches found
CVE-2026-10860 MISP CRUDComponent delete validation bypass via operator precedence error
A logic error in the MISP CRUD component delete handler allowed validation failures to be bypassed when requests used the HTTP DELETE method. Due to missing parentheses in the delete condition, the expression was evaluated as $validationError === null && POST || DELETE, meaning a DELETE request...
EUVD-2026-34264
A logic error in the MISP CRUD component delete handler allowed validation failures to be bypassed when requests used the HTTP DELETE method. Due to missing parentheses in the delete condition, the expression was evaluated as $validationError === null && POST || DELETE, meaning a DELETE request...
CVE-2026-10860 MISP CRUDComponent delete validation bypass via operator precedence error
A logic error in the MISP CRUD component delete handler allowed validation failures to be bypassed when requests used the HTTP DELETE method. Due to missing parentheses in the delete condition, the expression was evaluated as $validationError === null && POST || DELETE, meaning a DELETE request...
CVE-2026-10860 MISP CRUDComponent delete validation bypass via operator precedence error
A logic error in the MISP CRUD component delete handler allowed validation failures to be bypassed when requests used the HTTP DELETE method. Due to missing parentheses in the delete condition, the expression was evaluated as $validationError === null && POST || DELETE, meaning a DELETE request...
PT-2026-46382
Unauthenticated Privilege Escalation in Support Ticket Management System = 1.9 versions...
PT-2026-46333
Unauthenticated Local File Inclusion in Iona = 1.0.8 versions...
PT-2026-46352
Unauthenticated Local File Inclusion in Mission = 1.22 versions...
PT-2026-46357
Unauthenticated Local File Inclusion in Quirky = 1.23 versions...
PT-2026-46370
Unauthenticated Local File Inclusion in Gunslinger = 1.7 versions...
PT-2026-46344
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in EMV JobCareer allows Path Traversal. This issue affects JobCareer: from n/a through 7.3...
PT-2026-46361
Unauthenticated Local File Inclusion in Gamic = 1.15 versions...
PT-2026-46377
Unauthenticated Local File Inclusion in Etude = 1.6 versions...
PT-2026-46353
Unauthenticated Local File Inclusion in Preservation = 1.10 versions...
PT-2026-46360
Unauthenticated Cross Site Scripting XSS in Grand Car Rental = 3.7 versions...
PT-2026-46347
Subscriber Broken Access Control in Genemy = 1.6.6 versions...
PT-2026-46371
Unauthenticated Local File Inclusion in Eros = 1.3 versions...
PT-2026-46236
Name of the Vulnerable Software and Affected Versions MISP affected versions not specified Description A logic error in the CRUD component delete handler allows validation failures to be bypassed when using the HTTP DELETE method. This occurs because missing parentheses in the delete condition...
PT-2026-46336
Unauthenticated Local File Inclusion in Corbesier = 1.15.0 versions...