CVE-2026-7165 Multiple vulnerabilities in the Assassin game by Gaudire

The vulnerability is present in the ‘/addJugador’ endpoint: The 'keyJugador' and 'keyJugadorObjectiu' parameters allow the modification of other users’ information without requiring prior authorization validation. This could enable an authenticated attacker to alter any user’s ID and change their...

PT-2023-30516 · Unknown · Audiobookshelf

Name of the Vulnerable Software and Affected Versions: Audiobookshelf versions 2.4.3 and prior Description: Audiobookshelf is a self-hosted audiobook and podcast server. Users with the update permission can read arbitrary files, delete arbitrary files, and send a GET request to arbitrary URLs and...