72377 matches found
Paymenter has broken object level authorization via service reference manipulation on ticket creation
Summary The ticket creation endpoint accepts a user-supplied service identifier without enforcing ownership validation, allowing authenticated users to create support tickets referencing services belonging to other accounts by modifying the service ID in the request. Technical Details The ticket...
GHSA-HM92-R4W5-C3MJ vulnerabilities
Vulnerabilities for packages: renovate, vitess, code-server...
MINI-QP7C-95P4-G9VV
Bulletin has no description...
MINI-33MG-RPJC-RRW8
Bulletin has no description...
MINI-JM5R-8G3G-3675
Bulletin has no description...
MINI-9RCX-J92J-Q2F2
Bulletin has no description...
MINI-WG5W-5Q26-62JG
Bulletin has no description...
MINI-WGJV-4QC8-3M6F
Bulletin has no description...
MINI-MF87-5Q5V-Q6C5
Bulletin has no description...
MINI-WP58-4QW7-HV9M
Bulletin has no description...
MINI-85RC-XJJR-M28X
Bulletin has no description...
MINI-F6W2-457G-FCCC
Bulletin has no description...
MINI-M87X-2P9M-QXQ4
Bulletin has no description...
MINI-78F9-JQMV-3V5G
Bulletin has no description...
MINI-V753-8R6Q-QV43
Bulletin has no description...
MINI-55Q8-PFJ9-VX7W
Bulletin has no description...
MINI-7QG5-64MX-WG65
Bulletin has no description...
MINI-HWW7-C6RX-8CGJ
Bulletin has no description...