CVE-2026-100392

In InvoicePlane version 1.7.2 , a missing object-level authorization check in the Users::form() function allows for a Primary Administrator Privilege Downgrade . A Secondary Administrator (user_type = 1, user_id != 1) can modify the Primary Administrator's (user_id = 1) user_type to 2, effectivel...

EUVD-2021-25143

Malware in sbrugna...

CVE-2021-38705

ClinicCases 7.3.3 is affected by Cross-Site Request Forgery CSRF. A successful attack would consist of an authenticated user following a malicious link, resulting in arbitrary actions being carried out with the privilege level of the targeted user. This can be exploited to create a secondary...

CVE-2021-38705

ClinicCases 7.3.3 is affected by Cross-Site Request Forgery CSRF. A successful attack would consist of an authenticated user following a malicious link, resulting in arbitrary actions being carried out with the privilege level of the targeted user. This can be exploited to create a secondary...

CVE-2021-38705: Cross-Site Request Forgery (CSRF)

ClinicCases 7.3.3 is affected by Cross-Site Request Forgery CSRF. A successful attack would consist of an authenticated user following a malicious link, resulting in arbitrary actions being carried out with the privilege level of the targeted user. This can be exploited to create a secondary...