CVE-2026-55986 Email Management API Bypasses ManageCredentials Feature Restrictions

Email Management API Bypasses ManageCredentials Feature Restrictions...

CVE-2026-55986

The Gitea Git repository management platform is vulnerable to an access control deficiency in its Email Management API . This flaw allows an attacker to bypass restrictions within the ManageCredentials feature, potentially leading to privilege escalation remotely. While specific affected versions...

PT-2026-71700

Name of the Vulnerable Software and Affected Versions Email Management API affected versions not specified Description The Email Management API contains a flaw that allows the bypass of restrictions within the ManageCredentials feature. Recommendations At the moment, there is no information about...

EUVD-2018-13442

Malware in sbrugna...

CVE-2018-20906

cPanel before 71.9980.37 allows attackers to make API calls that bypass the images feature restriction SEC-430...

CVE-2018-20904

cPanel before 71.9980.37 allows attackers to make API calls that bypass the cron feature restriction SEC-427...

PT-2023-28198 · Unknown · Dolibarr Erp/Crm

Name of the Vulnerable Software and Affected Versions: Dolibarr ERP CRM versions = 18.0.1 Description: The issue is related to improper input validation, which fails to strip certain PHP code from user-supplied input when creating a Website. This allows an attacker to inject and evaluate arbitrar...

MGASA-2019-0397 Updated samba packages fix security vulnerabilities

Updated samba packages fix security vulnerabilities: Malicious servers can cause Samba client code to return filenames containing path separators to calling code CVE-2019-10218. When the password contains multi-byte non-ASCII characters, the check password script does not receive the full passwor...

samba -- multiple vulnerabilities

The Samba Team reports: CVE-2019-14861: An authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name. CVE-2019-14870: The DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests...

CVE-2018-20907

cPanel before 71.9980.37 does not enforce the Mime::listhotlinks API feature restriction SEC-432...

Security feature bypass

cPanel before 71.9980.37 allows attackers to make API calls that bypass the cron feature restriction SEC-427...

CVE-2018-20906

CVE-2018-20906 affects cPanel before 71.9980.37. The issue allows attackers to make API calls that bypass the images feature restriction (SEC-430). The connected documents confirm the product (cPanel), affected version range (before 71.9980.37), and the described impact (bypassing images feature ...

CVE-2018-20905

cPanel before 71.9980.37 allows attackers to make API calls that bypass the backup feature restriction SEC-429...

PT-2019-10336

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 71.9980.37 Description: The issue allows attackers to make API calls that bypass the backup feature restriction. Recommendations: For versions prior to 71.9980.37, update to version 71.9980.37 or later to resolve the...

CVE-2018-20905: Incorrect Permission Assignment for Critical Resource

cPanel before 71.9980.37 allows attackers to make API calls that bypass the backup feature restriction SEC-429...

CVE-2018-20906: Incorrect Permission Assignment for Critical Resource

cPanel before 71.9980.37 allows attackers to make API calls that bypass the images feature restriction SEC-430...

PT-2019-10335

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 71.9980.37 Description: The issue allows attackers to make API calls that bypass the cron feature restriction. Recommendations: For versions prior to 71.9980.37, update to version 71.9980.37 or later to resolve the...

Define the security for which plugins can be used by which users on which pages

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-34095. panel This is a request for a new feature which could restrict/define the usage of specific plugins/macros to only allow...