CVE-2026-58001

WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in objects/videoEditLight.php that lacks request authenticity checks and accepts GET requests. Attackers can store an img tag in a video description that transfers video ownership to an attacker-controlled...

CVE-2026-58003 WWBN AVideo Cross-Site Request Forgery via releaseVideoNow.json.php

WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in the releaseVideoNow.json.php endpoint that lacks authenticity checks and accepts GET requests. Attackers can craft a malicious cross-site GET request carrying an administrator's session cookie to permanentl...

CVE-2026-58003

WWBN AVideo through commit 9c39d8c8 is affected by a cross-site request forgery (CSRF) vulnerability in the releaseVideoNow.json.php endpoint. The endpoint lacks authenticity checks and accepts GET requests , allowing an attacker to craft a malicious cross-site GET request carrying an administrat...

PT-2026-79539

Name of the Vulnerable Software and Affected Versions WWBN AVideo versions prior to commit 9c39d8c8 Description Cross-site request forgery occurs in the 'releaseVideoNow.json.php' endpoint because it lacks authenticity checks and accepts GET requests. An attacker can craft a malicious cross-site...

CVE-2026-62204: Insufficient Verification of Data Authenticity

SiYuan versions before v3.7.4 fail to validate that packageName matches the downloaded package content in bazaar install endpoints. Attackers with same-origin access can overwrite existing trusted plugins by supplying mismatched packageName and repoURL parameters, achieving persistence across...

CVE-2026-68554: Insufficient Verification of Data Authenticity

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an on-path attacker can append attributes after MESSAGE-INTEGRITY to an authenticated STUN request on plain UDP or TCP, adjust the STUN header length, and recompute the unkeyed FINGERPRINT while the original HMA...

Insufficient Verification of Data Authenticity

Overview openssl-encrypt is an A package for secure file encryption and decryption based on modern ciphers using heavy-compute-load chaining of hashing and KDF to generate strong encryption password based on users provided password to ensure secure encryption of files Affected versions of this...

Insufficient Verification of Data Authenticity

Overview openssl-encrypt is an A package for secure file encryption and decryption based on modern ciphers using heavy-compute-load chaining of hashing and KDF to generate strong encryption password based on users provided password to ensure secure encryption of files Affected versions of this...

CVE-2026-12949: Weak Password Recovery Mechanism for Forgotten Password

The Wishlist Member plugin for WordPress is vulnerable to Account Takeover via Insufficient Verification of Data Authenticity in versions up to and including 3.34.1. This is due to the wpmregister function validating the registration cookie only against the GET reg parameter while accepting the...

CVE-2025-31356

Insufficient verification of data authenticity for some IntelR Trust Domain Extensions IntelR TDX within Ring 0: Hypervisor may allow an information disclosure. A system software adversary with a privileged user access combined with a high complexity attack may enable data exposure. This result m...

EUVD-2026-56779

Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network...

CVE-2025-31356

Insufficient verification of data authenticity for some IntelR Trust Domain Extensions IntelR TDX within Ring 0: Hypervisor may allow an information disclosure. A system software adversary with a privileged user access combined with a high complexity attack may enable data exposure. This result m...

EUVD-2025-210689

Insufficient verification of data authenticity for some IntelR Trust Domain Extensions IntelR TDX within Ring 0: Hypervisor may allow an information disclosure. A system software adversary with a privileged user access combined with a high complexity attack may enable data exposure. This result m...

CVE-2025-31356

CVE-2025-31356 affects Intel(R) Trust Domain Extensions (Intel(R) TDX) within Ring 0: Hypervisor. The issue is insufficient verification of data authenticity, potentially enabling information disclosure by a system software adversary with privileged access and high attack complexity, via local ac...

CVE-2026-72544

OpenSignLabs OpenSign ≤ 2.37.0 has an integrity verification flaw in the triggerevent Parse cloud function. It accepts viewer identity and IP address as caller-supplied parameters without authentication, allowing unauthenticated remote attackers to forge document audit-trail entries. This enables...

CVE-2026-72544 OpenSignLabs OpenSign - Insufficient Verification of Data Authenticity

An integrity verification vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to forge document audit-trail entries via the triggerevent Parse cloud function. The function accepts viewer identity and IP address as caller-supplied parameters without...

CVE-2026-72544 OpenSignLabs OpenSign - Insufficient Verification of Data Authenticity

An integrity verification vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to forge document audit-trail entries via the triggerevent Parse cloud function. The function accepts viewer identity and IP address as caller-supplied parameters without...

WordPress Simple CAPTCHA with Cloudflare Turnstile: Insufficient data authenticity verification vulnerabilities

WordPress is a free and open-source content management system CMS and blog platform built on PHP/MySQL. WordPress Simple CAPTCHA with Cloudflare Turnstile has a vulnerability related to insufficient data authenticity verification. This vulnerability stems from the Turnstile validation cache in th...

WordPress WP Events Manager has a vulnerability related to insufficient validation of data authenticity.

WordPress WP Events Manager is a WordPress plugin used for creating, managing, and displaying events such as meetings, courses, and performances. It supports calendar views, registration, ticket sales, and integration with location maps. There is a vulnerability in WordPress WP Events Manager...

CVE-2026-62869: Insufficient Verification of Data Authenticity

Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network...