309 matches found
CVE-2026-50886
Incorrect access control in the webhook management component of Project Firefly III v6.5.9 allows attackers to scan internal resources via a crafted POST request...
PT-2026-49327
Name of the Vulnerable Software and Affected Versions Project Firefly III version 6.5.9 Description Incorrect access control in the webhook management component allows attackers to scan internal resources by sending a crafted POST request. Recommendations At the moment, there is no information...
CVE-2026-50886
Summary: CVE-2026-50886 describes an access-control flaw in the webhook management component of Project Firefly III (version 6.5.9). The root cause is an incorrect access-control implementation, enabling an attacker to scan internal resources by sending a crafted POST request. Affected software: ...
CVE-2026-50886
Incorrect access control in the webhook management component of Project Firefly III v6.5.9 allows attackers to scan internal resources via a crafted POST request...
Incorrect Authorization
Overview grumpydictator/firefly-iii is a personal finances manager. Affected versions of this package are vulnerable to Incorrect Authorization via the index and show functions in the user management API endpoints, which lack proper role verification. An attacker can access sensitive information...
EUVD-2021-1958
Malware in sbrugna...
EUVD-2021-2531
Malware in sbrugna...
EUVD-2019-5826
Malware in sbrugna...
EUVD-2021-2376
Malware in sbrugna...
EUVD-2021-2518
Malware in sbrugna...
EUVD-2019-5825
Malware in sbrugna...
EUVD-2019-5827
Malware in sbrugna...
EUVD-2021-1572
Malware in sbrugna...
EUVD-2021-1937
Malware in sbrugna...
EUVD-2021-1725
Malware in sbrugna...
EUVD-2021-2160
Malware in sbrugna...
EUVD-2019-5824
Malware in sbrugna...
EUVD-2021-1674
Malware in sbrugna...