85 matches found
CVE-2026-110772
A flaw was found in sure. A missing authorization check in the bulk update functionality allows authenticated users with restricted or read-only permissions to bypass account sharing restrictions. By submitting arbitrary transaction identifiers during a bulk update request, an attacker can modify...
CVE-2026-110772
Sure 0.7.0 through 0.7.6-alpha.6 contains a missing authorization vulnerability in Transactions::BulkUpdatesControllercreate that allows family members to bypass account sharing permissions. Authenticated members with readonly or no share can submit arbitrary entryids to modify other members'...
CVE-2026-110772 Sure 0.7.0 through 0.7.6-alpha.6 Missing Authorization via Transaction Bulk Update
Sure 0.7.0 through 0.7.6-alpha.6 contains a missing authorization vulnerability in Transactions::BulkUpdatesControllercreate that allows family members to bypass account sharing permissions. Authenticated members with readonly or no share can submit arbitrary entryids to modify other members'...
CVE-2026-110772
Versions 0.7.0 through 0.7.6-alpha.6 of Sure are vulnerable to a missing authorization flaw in the Transactions::BulkUpdatesController#create function. This vulnerability allows authenticated family members with read_only or no share privileges to bypass account sharing permissions by submitting ...
CVE-2026-110772 Sure 0.7.0 through 0.7.6-alpha.6 Missing Authorization via Transaction Bulk Update
Sure 0.7.0 through 0.7.6-alpha.6 contains a missing authorization vulnerability in Transactions::BulkUpdatesControllercreate that allows family members to bypass account sharing permissions. Authenticated members with readonly or no share can submit arbitrary entryids to modify other members'...
EUVD-2026-101572
Sure 0.7.0 through 0.7.6-alpha.6 contains a missing authorization vulnerability in Transactions::BulkUpdatesControllercreate that allows family members to bypass account sharing permissions. Authenticated members with readonly or no share can submit arbitrary entryids to modify other members'...
CVE-2026-106177
A kernel buffer overflow vulnerability in HP Sure Click versions prior to 4.4.33 may allow local privilege escalation or arbitrary code execution. HP has released version 4.4.33 to address this vulnerability...
CVE-2026-106177
A kernel buffer overflow vulnerability exists in HP Sure Click versions prior to 4.4.33 . This flaw could potentially allow an attacker to achieve local privilege escalation or perform arbitrary code execution . HP has released version 4.4.33 to remediate this issue. No specific exploit details o...
CVE-2026-106177 HP Sure Click Kernel Buffer Overflow
A kernel buffer overflow vulnerability in HP Sure Click versions prior to 4.4.33 may allow local privilege escalation or arbitrary code execution. HP has released version 4.4.33 to address this vulnerability...
EUVD-2026-95084
A kernel buffer overflow vulnerability in HP Sure Click versions prior to 4.4.33 may allow local privilege escalation or arbitrary code execution. HP has released version 4.4.33 to address this vulnerability...
HP Sure Click Kernel Buffer Overflow
A potential security vulnerability has been identified in HP Sure Click versions prior to 4.4.33, which might allow local escalation of privileges. HP is releasing software updates to mitigate this potential vulnerability. HP has released a fix to mitigate the potential vulnerability in software...
SURE: Framework for Safety to Construct Trustworthy AI
Warning: This paper contains harmful and offensive text. Recently, large language models such as GPT-4, and Claude have revolutionized tasks in various domains. As the use of these large language models increases, people are increasingly concerned about AI safety and demand that large language...
EUVD-2026-43473
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Brainstorm Force SureDash suredash allows Path Traversal.This issue affects SureDash: from n/a through = 1.8.0...
EUVD-2020-30971
Deep Instinct Windows Agent 1.2.29.0 contains an unquoted service path vulnerability in the DeepMgmtService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files\HP Sure Sense\DeepMgmtService.exe to inject malicio...
CVE-2020-36934
Deep Instinct Windows Agent 1.2.24.0 contains an unquoted service path vulnerability in the DeepNetworkService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files\HP Sure Sense\DeepNetworkService.exe to inject...
CVE-2020-36934
The CVE-2020-36934 entry concerns Deep Instinct Windows Agent 1.2.24.0, exposing an unquoted service path in the DeepNetworkService. The vulnerability allows a local user to inject code that could run with LocalSystem privileges during service startup via the path C:\Program Files\HP Sure Sense\D...
WordPress AuthorSure plugin <= 2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability
Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by Muhammad Nur Ibnu Hubab Ibnu - Pondok Teknologi in WordPress Plugin AuthorSure versions = 2.3...
MAL-2025-139056 Malicious code in sure-sapphire-aardvark (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25f9cfb7c80950d2d8180a19016915d7d3a61f79c4b5e2f7508f69cb51fda23e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...