CVE-2026-76236 stigmem before 0.9.0a12 Cross-Tenant BOLA via Tombstones

stigmem-node before 0.9.0a12 contains a cross-tenant broken object level authorization BOLA flaw in the RTBF right-to-be-forgotten tombstone mechanism. issuetombstone defaulted the tenant to "default" instead of the caller's tenant, allowing deletion records to be written to the wrong tenant, and...

CVE-2026-76236: Authorization Bypass Through User-Controlled Key

stigmem-node before 0.9.0a12 contains a cross-tenant broken object level authorization BOLA flaw in the RTBF right-to-be-forgotten tombstone mechanism. issuetombstone defaulted the tenant to "default" instead of the caller's tenant, allowing deletion records to be written to the wrong tenant, and...

rtbf.be Cross Site Scripting vulnerability OBB-3938503

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

rtbf.be XSS vulnerability

Vulnerable URL: https://www.rtbf.be/webcreation/webseries/pls/articlepls-la-story-snapchat-suivie-par-20-000-jeunes?id=9734305"onmouseover="alert/OPENBUGBOUNTY/"&= Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 12:01 GMT Vulnerability type:| X...

rtbf.be XSS vulnerability

Vulnerable URL: http://www.rtbf.be/tv/recherche?searchPattern=" onfocus=alertString.fromCharCode111,112,101,110,98,117,103,98,111,117,110,116,121 autofocus Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

rtbf.be XSS vulnerability

Vulnerable URL: http://www.rtbf.be/services/bourse/www/recherche.html?sv=%22%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C%2Fscript%3E=ALL Details: Description| Value ---|--- Patched:| Yes, at 18.01.2016 Latest check for patch:| 18.01.2016 10:23 GMT Vulnerability type:| XSS Vulnerability status:|...