CVE-2026-103235

MISP contains a mass assignment vulnerability in the event delegation feature. When a user with delegation permission submits a delegation request, the application authorized the user against the event identified in the URL but then persisted the entire submitted record, including caller-supplied...

CVE-2026-103235 MISP Event Delegation Mass Assignment Allows Retargeting Delegation to Arbitrary Events

MISP contains a mass assignment vulnerability in the event delegation feature. When a user with delegation permission submits a delegation request, the application authorized the user against the event identified in the URL but then persisted the entire submitted record, including caller-supplied...

CVE-2026-103235 MISP Event Delegation Mass Assignment Allows Retargeting Delegation to Arbitrary Events

MISP contains a mass assignment vulnerability in the event delegation feature. When a user with delegation permission submits a delegation request, the application authorized the user against the event identified in the URL but then persisted the entire submitted record, including caller-supplied...

CVE-2026-103235

MISP versions

CVE-2026-103235 MISP Event Delegation Mass Assignment Allows Retargeting Delegation to Arbitrary Events

MISP contains a mass assignment vulnerability in the event delegation feature. When a user with delegation permission submits a delegation request, the application authorized the user against the event identified in the URL but then persisted the entire submitted record, including caller-supplied...

EUVD-2026-89728

MISP contains a mass assignment vulnerability in the event delegation feature. When a user with delegation permission submits a delegation request, the application authorized the user against the event identified in the URL but then persisted the entire submitted record, including caller-supplied...

EUVD-2026-89724

A flaw was found in Moodle. When enrolling a user into a course while assigning them to a group, the application does not verify whether the selected group actually belongs to that course. An authenticated user with teacher privileges could exploit this flaw to add users to groups within courses...

ROS-20260930-73-0011

The vulnerability of the monhandleauthdone function in the net/ceph/monclient.c module, which is part of the Linux kernel’s networking functions, relates to the assignment of pointers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

PT-2026-103531

Name of the Vulnerable Software and Affected Versions Kiteworks Core versions prior to 9.5.0 Description Improper Privilege Management occurs because the software does not correctly enforce restrictions on role assignment. This allows an authenticated administrative user with limited, non-Sysadmi...

CVE-2026-84414 IBM i is Affected By An Incorrect Permission Assignment Vulnerability in Network Authentication Service []

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due to improper validation of an attacker-controlled file path...

CVE-2026-73598

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-73598

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are affected by an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this flaw to achieve Elevation of privileges . No specific ex...

CVE-2026-73598

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

EUVD-2026-88749

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2025-2304

CVE-2025-2304 - Camaleon CMS 2.9.0 - Privilege Escalation Exploit Overview This Python script exploits a critical mass assignment vulnerability in Camaleon CMS version 2.9.0, allowing any registered user to escalate their privileges to administrator. Vulnerability Details CVE : CVE-2025-2304 - Ma...

CVE-2026-25057

CVE-2026-25057 MarkUs is a web application for grading student assignments. Summary MarkUs assignment configuration ZIP uploads are vulnerable to path traversal Zip Slip, allowing arbitrary file write and enabling remote code execution. Details Archive entry names are used to construct filesystem...

CVE-2025-2304

Camaleon CMS 2.9.0 – Authenticated Privilege Escalation Role Change + Optional S3 Config Leak Target: Camaleon CMS v2.9.0 Type: Authenticated privilege escalation via mass-assignment in updatedajax role field Extras: Optional extraction of S3 configuration from the admin settings page if the...

ROS-20260929-73-0195

The vulnerability of the sysperfeventopen function in the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-102525

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description An incorrect permission assignment for critical resources allows a low privileged attacker with local access to elevate their privileges. Recommendations...

CVE-2025-2304-POC

CVE-2025-2304 Privilege Escalation in Camaleon CMS Example python3 exploit.py http://target.com attacker attacker After successful exploitation, logout and login again to gain admin privileges. References https://nvd.nist.gov/vuln/detail/CVE-2025-2304...