Lucene search
+L

9 matches found

Vulnrichment
Vulnrichment
•added 2026/10/14 6:47 p.m.•15 views

CVE-2026-110772 Sure 0.7.0 through 0.7.6-alpha.6 Missing Authorization via Transaction Bulk Update

Sure 0.7.0 through 0.7.6-alpha.6 contains a missing authorization vulnerability in Transactions::BulkUpdatesControllercreate that allows family members to bypass account sharing permissions. Authenticated members with readonly or no share can submit arbitrary entryids to modify other members'...

5.3CVSS6AI score0.00266EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/14 6:47 p.m.•14 views

EUVD-2026-101572

Sure 0.7.0 through 0.7.6-alpha.6 contains a missing authorization vulnerability in Transactions::BulkUpdatesControllercreate that allows family members to bypass account sharing permissions. Authenticated members with readonly or no share can submit arbitrary entryids to modify other members'...

5.3CVSS6AI score0.00266EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2026/10/14 6:47 p.m.•12 views

CVE-2026-110772 Sure 0.7.0 through 0.7.6-alpha.6 Missing Authorization via Transaction Bulk Update

Sure 0.7.0 through 0.7.6-alpha.6 contains a missing authorization vulnerability in Transactions::BulkUpdatesControllercreate that allows family members to bypass account sharing permissions. Authenticated members with readonly or no share can submit arbitrary entryids to modify other members'...

5.3CVSS6.1AI score
SaveExploits0References7
Cvelist
Cvelist
•added 2026/10/14 6:47 p.m.•38 views

CVE-2026-110772 Sure 0.7.0 through 0.7.6-alpha.6 Missing Authorization via Transaction Bulk Update

Sure 0.7.0 through 0.7.6-alpha.6 contains a missing authorization vulnerability in Transactions::BulkUpdatesControllercreate that allows family members to bypass account sharing permissions. Authenticated members with readonly or no share can submit arbitrary entryids to modify other members'...

5.3CVSS0.00266EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/14 12:00 a.m.•7 views

CVE-2026-110772: Missing Authorization

Sure 0.7.0 through 0.7.6-alpha.6 contains a missing authorization vulnerability in Transactions::BulkUpdatesControllercreate that allows family members to bypass account sharing permissions. Authenticated members with readonly or no share can submit arbitrary entryids to modify other members'...

5.3CVSS6AI score0.00266EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/14 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2026-110772

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sure 0.7.0 through 0.7.6-alpha.6 contains a missing authorization vulnerability in Transactions::BulkUpdatesControllercreate that allows family members to bypas...

5.3CVSS6.1AI score0.00266EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
•added 2026/08/10 12:00 a.m.•29 views

You Are Not My Teammate: Behavioral Fingerprint-Based Detection of Suspicious Account Misuse

Online games have been continuously affected by cyber threats such as game bots and gold farming. Game bots, which are automated programs that play on behalf of human users, significantly accelerate character progression and reduce the engagement of legitimate players, potentially leading to user...

5.5AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/27 12:00 a.m.•7 views

CVE-2023-34099: Improper Check for Unusual or Exceptional Conditions

Shopware is an open source e-commerce software. The mail validation in the registration process had some flaws, so it was possible to construct different mail addresses, that in the end result in the same address, which is shared by multiple accounts. This issue has been addressed in version 5.7....

5.3CVSS5.8AI score0.00649EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/08/25 12:00 a.m.•37 views

CVE-2022-2031

A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account and set of keys, allowing them to decrypt each other's tickets. A user who has been requested to change their password, can exploit this flaw to obtain and use tickets to other...

8.6AI score0.01262EPSS
SaveExploits0References2
Rows per page
Query Builder