CVE-2026-114249 dhikshitha29 Insurance-Management-System Policy Holder Update Form UpdatePolicyHolder-inc.php improper authorization

A vulnerability was detected in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. This vulnerability affects unknown code of the file /Agent/includes/UpdatePolicyHolder-inc.php of the component Policy Holder Update Form. Th...

CLSA-2026-1792588191 TuxCare security update for org.springframework.security (9 CVEs)

TuxCare rebuilt 13 org.springframework.security packages to address 9 CVEs. Fixed in 3.2.8.RELEASE-tuxcare.1...

CVE-2026-114387 Shopper 2.0.0 before 2.6.0 Privilege Escalation via Unguarded Livewire Components

Shopper from 2.0.0 before 2.6.0 contains a missing authorization vulnerability that allows admin-panel users holding only accessdashboard to create administrators and grant permissions. Attackers can call CreateTeamMember::store or Permissions::togglePermission directly over /livewire/update to...

CVE-2026-114387

Shopper versions 2.0.0 before 2.6.0 are vulnerable to a privilege escalation flaw due to missing authorization in Livewire components. Users with only access_dashboard privileges can bypass intended restrictions by directly calling CreateTeamMember::store() or Permissions::togglePermission() via ...

EUVD-2026-107234

Shopper from 2.0.0 before 2.6.0 contains a missing authorization vulnerability that allows admin-panel users holding only accessdashboard to create administrators and grant permissions. Attackers can call CreateTeamMember::store or Permissions::togglePermission directly over /livewire/update to...

CVE-2026-114387 Shopper 2.0.0 before 2.6.0 Privilege Escalation via Unguarded Livewire Components

Shopper from 2.0.0 before 2.6.0 contains a missing authorization vulnerability that allows admin-panel users holding only accessdashboard to create administrators and grant permissions. Attackers can call CreateTeamMember::store or Permissions::togglePermission directly over /livewire/update to...

CLSA-2026-1792585696 TuxCare security update for org.springframework (8 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 8 CVEs. Fixed in 6.0.11-tuxcare.6...

CLSA-2026-1792585518 TuxCare security update for org.springframework (8 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 8 CVEs. Fixed in 6.0.12-tuxcare.6...

Watchguard_WebUI_Unpacker

Watchguard Fireware Web UI update unpacker unpackwatchguard is a tool that unpacks this file format sysa-dl. watchguardsysadl.ksy contains Kaitai description of Watchguard Fireware web update file format. Info This update format is used by WatchGuard Firebox firewalls. The unpacker has been teste...

opnsense-firmware-mirror-sed

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · opnsense-firmware-mirror-sed opnsense-firmware-mirror-sed Class: Signature skip Reach: Remote OPNsense core 26.7.6 a842fe48 - opnsense.org System: Firmware set POSTs a custom mirror / flavour. Core FILTERSANITIZEURL...

Microsoft-2024-December-Update-Control

Windows December 2024 Security Patches Audit Script This PowerShell script checks whether the required KB updates for specific security vulnerabilities CVE-2024-49124, CVE-2024-49117, CVE-2024-49118, and CVE-2024-49122 announced in the December 2024 Microsoft security bulletins are installed on...

CLSA-2026-1792577892 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 26 org.springframework packages to address 2 CVEs. Fixed in 6.2.13-tuxcare.4...

CLSA-2026-1792576955 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 26 org.springframework packages to address 2 CVEs. Fixed in 6.2.5-tuxcare.3...

CLSA-2026-1792575333 TuxCare security update for org.springframework (34 CVEs)

TuxCare rebuilt 22 org.springframework packages to address 34 CVEs. Fixed in 5.1.7.RELEASE-tuxcare.1...

CLSA-2026-1792575257 TuxCare security update for 36 packages (32 CVEs)

TuxCare rebuilt 36 packages to address 32 CVEs. Fixed in 9.0.24-tuxcare.1...

CLSA-2026-1792574765 TuxCare security update for @modelcontextprotocol/sdk (2 CVEs)

TuxCare rebuilt @modelcontextprotocol/sdk to address 2 CVEs. Fixed in 1.30.1-tuxcare.2...

CVE-2017-1000117

Server Launcher for CVE-2017-1000117 Run the following command, then open your web browser and go to http://localhost:8088! $ git clone --recursive https://github.com/0gawa/CVE-2017-1000117 If "Hello World" is displayed, update git! It's vulnerable...

Important: Red Hat Security Advisory: dogtag-pki security update

An update for dogtag-pki is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

WordPress Download Manager plugin 4.0.0-7.5.8 - Privacy Settings Update vulnerability

Privacy Settings Update vulnerability discovered by Kartik Sharma in WordPress Plugin Download Manager versions 4.0.0-7.5.8...

WordPress Download Manager plugin < 3.3.71 - Privacy Settings Update vulnerability

Privacy Settings Update vulnerability discovered by Kartik Sharma in WordPress Plugin Download Manager versions 3.3.71...