40328 matches found
FacturaScripts has Insecure Parameter Handling: Unauthorized Modification of Immutable 'nick' Field
Summary The application fails to validate the nick parameter during a POST request to the EditUser controller. Although the UI prevents editing this field, a user can bypass this restriction using a proxy to rename any account including the Administrator. This leads to Broken Access Control and...
Access Control Bypass
Overview Affected versions of this package are vulnerable to Access Control Bypass through improper validation of the nick parameter in the user update process. An attacker can modify immutable account identifiers by intercepting and altering POST requests, potentially sabotaging audit trails,...
CVE-2026-6725
creationtimestamp| type| source ---|---|--- 2026-04-28 22:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mklnccr3il2s...
CVE-2026-6809
creationtimestamp| type| source ---|---|--- 2026-04-28 21:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkljx26xtb2a 2026-04-29 12:00:56+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mkn2gu2p6b2u...
CVE-2026-7290
creationtimestamp| type| source ---|---|--- 2026-04-28 21:20:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklja2whsq2k...
CVE-2026-7295
creationtimestamp| type| source ---|---|--- 2026-04-28 21:05:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklif7mghe2r...
CVE-2026-42423
creationtimestamp| type| source ---|---|--- 2026-04-28 20:43:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklh6xa6y52k...
CVE-2026-42427
creationtimestamp| type| source ---|---|--- 2026-04-28 20:33:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklgm32tgw2i...
CVE-2026-7292
creationtimestamp| type| source ---|---|--- 2026-04-28 20:29:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklgendiy32c...
CVE-2026-7355
creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 00:47:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklusetkht2e 2026-05-03 18:00:00+00:00| seen|...
CVE-2026-7353
creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 00:25:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkltlkzkqo2o 2026-05-03 18:00:00+00:00| seen|...
CVE-2026-42486
creationtimestamp| type| source ---|---|--- 2026-04-28 18:38:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkla62aalt24 2026-04-29 12:50:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkn56ry53l2c 2026-04-29 17:13:58+00:00| seen|...
offensive-security-labs
Offensive Security Labs — Penetration Testing on a Fictional T...
CVE-2026-39463
creationtimestamp| type| source ---|---|--- 2026-04-28 17:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkl4juzge52s...
CVE-2026-7282
creationtimestamp| type| source ---|---|--- 2026-04-28 17:14:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkl3j2nq5g2r...
CVE-2026-7288
creationtimestamp| type| source ---|---|--- 2026-04-28 16:47:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkkzyjfb672r 2026-04-28 16:56:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkl2irbp352e 2026-05-28 10:07:15+00:00| seen|...
CVE-2026-7322
creationtimestamp| type| source ---|---|--- 2026-04-28 16:45:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkkztxjzyk2i 2026-04-29 05:55:52+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-mozilla-4 2026-04-29 12:50:21+00:00| seen|...
CVE-2026-40980
creationtimestamp| type| source ---|---|--- 2026-04-28 12:18:03+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkkkritijh27...