2456 matches found
HAMASTAR MeetingHub Access Control Vulnerability
HAMASTAR MeetingHub is a paperless conference system developed by HAMASTAR, a company from Taiwan, China. HAMASTAR MeetingHub has a security vulnerability related to access control, which stems from the lack of authentication. This vulnerability could allow unverified remote attackers to access...
CVE-2026-22844
A Command Injection vulnerability in Zoom Node Multimedia Routers MMRs before version 5.2.1716.0 may allow a meeting participant to conduct remote code execution of the MMR via network access...
Malicious Google Calendar invites could expose private data
Researchers found a way to weaponize calendar invites. They uncovered a vulnerability that allowed them to bypass Google Calendar’s privacy controls using a dormant payload hidden inside an otherwise standard calendar invite. Image courtesy of Miggo An attacker creates a Google Calendar event and...
CVE-2025-55130
A flaw in Node.js’s Permissions model allows attackers to bypass --allow-fs-read and --allow-fs-write restrictions using crafted relative symlink paths. By chaining directories and symlinks, a script granted access only to the current directory can escape the allowed path and read sensitive files...
PT-2026-4340
CVE-2026-24021 - Cisco Webex Meeting Server Authentication Bypass CVE ID : CVE-2026-24021 Published : Jan. 21, 2026, 5:16 a.m. | 1 hour, 41 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, an...
CVE-2026-22844
A Command Injection vulnerability in Zoom Node Multimedia Routers MMRs before version 5.2.1716.0 may allow a meeting participant to conduct remote code execution of the MMR via network access...
PT-2026-3570
Name of the Vulnerable Software and Affected Versions Zoom Node Multimedia Routers MMRs versions prior to 5.2.1716.0 Description A critical command injection flaw exists in Zoom Node Multimedia Routers MMRs. This flaw allows a meeting participant to conduct remote code execution RCE on the MMR vi...
PT-2026-4331
CVE-2026-23910 - Cisco WebEx Meeting Center Information Disclosure CVE ID : CVE-2026-23910 Published : Jan. 20, 2026, 5:16 a.m. | 1 hour, 29 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, a...
Zoom Node Meetings Hybrid and Zoom Node Meeting Connector security vulnerabilities
Zoom Node Meetings Hybrid and Zoom Node Meeting Connector are both products of the American company Zoom. Zoom Node Meetings Hybrid is a hybrid cloud deployment solution. Zoom Node Meeting Connector is a meeting service module. Both Zoom Node Meetings Hybrid and Zoom Node Meeting Connector have...
Google Gemini AI Tricked Into Leaking Calendar Data via Meeting Invites
Cybersecurity researchers at Miggo Security found a flaw in Google Gemini that uses calendar invites to steal private data. Learn how this silent attack bypasses security...
CVE-2026-22605 OpenProject is Vulnerable to Insecure Direct Object Reference in Meetings
OpenProject is an open-source, web-based project management software. OpenProject versions prior to version 16.6.3, allowed users with the View Meetings permission on any project, to access meeting details of meetings that belonged to projects, the user does not have access to. This issue has bee...
CVE-2026-22605 OpenProject is Vulnerable to Insecure Direct Object Reference in Meetings
OpenProject is an open-source, web-based project management software. OpenProject versions prior to version 16.6.3, allowed users with the View Meetings permission on any project, to access meeting details of meetings that belonged to projects, the user does not have access to. This issue has bee...
CVE-2026-22605 OpenProject is Vulnerable to Insecure Direct Object Reference in Meetings
OpenProject is an open-source, web-based project management software. OpenProject versions prior to version 16.6.3, allowed users with the View Meetings permission on any project, to access meeting details of meetings that belonged to projects, the user does not have access to. This issue has bee...
EUVD-2026-1882
OpenProject is an open-source, web-based project management software. OpenProject versions prior to version 16.6.3, allowed users with the View Meetings permission on any project, to access meeting details of meetings that belonged to projects, the user does not have access to. This issue has bee...
OpenProject 访问控制错误漏洞
OpenProject is a Web-based project management software from OpenProject Open Source. An Access Control Error vulnerability exists in versions prior to OpenProject 16.6.3, which stems from improper access control and could lead to unauthorized access to meeting details...
CVE-2026-0817 CampaignEvents API missing authorization exposes meeting and chat URLs
Missing Authorization vulnerability in Wikimedia Foundation MediaWiki - CampaignEvents extension allows Privilege Abuse.This issue affects MediaWiki - CampaignEvents extension: 1.45, 1.44, 1.43, 1.39...
CVE-2026-0817 CampaignEvents API missing authorization exposes meeting and chat URLs
Missing Authorization vulnerability in Wikimedia Foundation MediaWiki - CampaignEvents extension allows Privilege Abuse.This issue affects MediaWiki - CampaignEvents extension: 1.45, 1.44, 1.43, 1.39...
CVE-2026-0817
CVE-2026-0817 concerns the Wikimedia Foundation MediaWiki - CampaignEvents extension. The vulnerability is described as a missing authorization issue that could allow privilege abuse in CampaignEvents API. Affected versions are 1.39, 1.43, 1.44, and 1.45. The connected Red Hat/NVD entries corrobo...