41027 matches found
CVE-2026-32757
CVE-2026-32757 (Admidio) : Multiple sources detail an HTMLPurifier bypass in the eCard feature for Admidio
CVE-2026-32014
creationtimestamp| type| source ---|---|--- 2026-03-19 23:00:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhh47eqo2q2s 2026-03-24 00:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhrdmesoz42q 2026-08-15 11:00:03+00:00| published-proof-of-concept|...
CVE-2026-32818 Admidio is Missing Authorization on Forum Topic and Post Deletion
Admidio is an open-source user management solution. In versions 5.0.0 through 5.0.6, the forum module in Admidio does not verify whether the current user has permission to delete forum topics or posts. Both the topicdelete and postdelete actions in forum.php only validate the CSRF token but perfo...
CVE-2026-32818 Admidio is Missing Authorization on Forum Topic and Post Deletion
Admidio is an open-source user management solution. In versions 5.0.0 through 5.0.6, the forum module in Admidio does not verify whether the current user has permission to delete forum topics or posts. Both the topicdelete and postdelete actions in forum.php only validate the CSRF token but perfo...
CVE-2026-32818 Admidio is Missing Authorization on Forum Topic and Post Deletion
Admidio is an open-source user management solution. In versions 5.0.0 through 5.0.6, the forum module in Admidio does not verify whether the current user has permission to delete forum topics or posts. Both the topicdelete and postdelete actions in forum.php only validate the CSRF token but perfo...
CVE-2026-32818
Admidio is an open-source user management solution. In versions 5.0.0 through 5.0.6, the forum module in Admidio does not verify whether the current user has permission to delete forum topics or posts. Both the topicdelete and postdelete actions in forum.php only validate the CSRF token but perfo...
CVE-2026-32004
creationtimestamp| type| source ---|---|--- 2026-03-19 22:53:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhh3rfulvd27...
CVE-2016-20033
creationtimestamp| type| source ---|---|--- 2026-03-19 22:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhh3247u2e2l...
CVE-2026-3230
creationtimestamp| type| source ---|---|--- 2026-03-19 22:37:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhh2ur2l4s2d...
CVE-2026-33408 Discourse has Improper Authorization in "Post Edits" Report For Moderators
Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, moderators were able to see the first 40 characters of post edits in PMs and private categories. Versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 contain a patch. No known workarounds a...
EUVD-2026-13403
Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, moderators were able to see the first 40 characters of post edits in PMs and private categories. Versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 contain a patch. No known workarounds a...
CVE-2026-33408 Discourse has Improper Authorization in "Post Edits" Report For Moderators
Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, moderators were able to see the first 40 characters of post edits in PMs and private categories. Versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 contain a patch. No known workarounds a...
CVE-2026-33408
Discourse (open-source discussion platform) has a CVE-2026-33408 affecting versions prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2. The issue allows moderators to see the first 40 characters of post edits in private messages and private categories due to improper authorization. A patch exists...
CVE-2026-33408
Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, moderators were able to see the first 40 characters of post edits in PMs and private categories. Versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 contain a patch. No known workarounds a...
CVE-2026-33408 Discourse has Improper Authorization in "Post Edits" Report For Moderators
Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, moderators were able to see the first 40 characters of post edits in PMs and private categories. Versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 contain a patch. No known workarounds a...
CVE-2026-32754
creationtimestamp| type| source ---|---|--- 2026-03-19 22:18:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgztbq7hc2k 2026-03-23 20:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhqtxuiaaz24...
CVE-2026-32194
creationtimestamp| type| source ---|---|--- 2026-03-19 22:18:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgzt36d6o2d 2026-03-19 22:47:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhh3gnuv4c2e 2026-03-22 11:17:14+00:00| seen|...
CVE-2026-33355
Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, the /private-posts endpoint did not apply post-type visibility filtering, allowing regular PM participants to see whisper posts in PM topics they had access to. Versions 2026.3.0-latest.1...
CVE-2026-33394
Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, the Post Edits admin report /admin/reports/postedits leaked the first 40 characters of raw post content from private messages and secure categories to moderators who shouldn't have access...
CVE-2026-27936
Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, a restriction bypass allows restricted post action counts to be disclosed to non-privileged users through a carefully crafted request. Versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2...