Tandoor Recipes: Permissions, licensing, and access control issues

Versions of Tandoor Recipes prior to 2.6.12 have security vulnerabilities. This vulnerability arises from the fact that the StepViewSet and IngredientViewSet only filter by activity space, and they use role-level CustomIsUser checks instead of private recipe owners or shared predicates. When...

WHEELS.DEV: Vulnerabilities related to wheel permissions and access control

WHEELS.DEV: Versions of Wheels 4.0.0 to 4.2.0 have vulnerabilities related to permission licensing and access control. These vulnerabilities arise from using primary key conditions in methods like findByKey and existskey=, which replace the provided scope conditions. As a result, keys that are...

Theme-One The Grid Code Injection Vulnerability

Theme-One The Grid 2.8.1 and earlier versions have a code injection vulnerability. This vulnerability stems from improper code generation control, which may lead to command injection...

WordPress Customer Email Verification for WooCommerce: Permissions and Access Control Vulnerabilities

WordPress Customer Email Verification for WooCommerce 3.3.0 and earlier versions has a permission and access control vulnerability. This vulnerability stems from improper handling of the algwcevverifyemail parameter. The activation code is generated only through wprand100 and is reversible...

ONTRAPORT PilotPress permission licensing and access control vulnerabilities

ONTRAPORT PilotPress versions 2.0.43 and earlier have vulnerabilities related to permission licensing and access control. These vulnerabilities arise from the AJAX handler of updateccdetails, which forwards the username parameter provided by the attacker to ONTRAPORT before performing a conflict...

WordPress InstaWP Connect: Permissions, licensing, and access control issues

WordPress InstaWP Connect versions 0.1.4.1 and earlier have vulnerabilities related to permission permissions and access control. These vulnerabilities arise when the plugin registers a management page using the role name as the required capability, and the main API key from instawpapioptions is...

Cassio Santos Whaticket Open Source: Permissions, licensing, and access control issues

Cassio Santos Whaticket Open Source versions from cf04795 onwards have vulnerabilities related to permission and access control. These vulnerabilities stem from authentication bypasses. Unauthenticated attackers can register as administrators by omitting the profile field or setting it to ‘admin’...

WordPress WP Compress: Permissions, licensing, and access control issues

WordPress versions prior to 7.25.00 have vulnerabilities related to permission checks and access control. These vulnerabilities arise from the startcomms scheduler, which performs access control by comparing the apikey parameter provided by the caller with the stored plugin API key. It lacks...

WordPress Passster authorization issue vulnerability

WordPress Passster versions 4.3.18 and earlier have a vulnerability related to authorization. This vulnerability arises from the lack of proper authorization, which may allow attackers to exploit improperly configured access control levels...

Gemini Labs Site Reviews: Authorization Issues and Vulnerabilities

Gemini Labs sites versions 8.3.4 and earlier have an authorization issue vulnerability. This vulnerability stems from a lack of authorization, which may allow attackers to exploit improperly configured access control levels...

WordPress User Profile Builder has vulnerabilities related to permissions and access control.

WordPress User Profile Builder 4.0.3 and earlier versions have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from the activation function wppbaddmetatouseronactivation, which lacks validation for the role parameter before it is directly passed to...

WordPress WP Event Solution Authorization Issue Vulnerability

WordPress WP Event Solution versions 4.1.26 and earlier have a vulnerability related to authorization. This vulnerability stems from the lack of proper authorization settings, which may allow attackers to exploit incorrect access control levels...

DeepSeek Harness: Permissions and access control issues

The DeepSeek Harness c291e796 version has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from an untrusted search path, which may allow attackers to execute arbitrary code by providing and executing a specially crafted executable file instead of...

J4Care dcm4chee-arc-light authorization issue vulnerability

The J4Care dcm4chee-arc-light version 5.35.1 has an authorization issue vulnerability. This vulnerability stems from improper access control in the storage status-change REST service. It allows changing location records that are still associated with DICOM instances to states like TODELETE,...

Astra Linux – vulnerability in Chromium

Improper implementation in the Cast API in Google Chrome prior to version 149.0.7827.53 allowed an attacker on the local network segment to bypass discretionary access control via malicious network traffic. Chromium security severity: Low...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: fix bitmap leaks The RX/TX flow-control bitmaps rxfcpfvfbmap and txfcpfvfbmap are allocated by cgxlmacinit but never freed in cgxlmacexit. Unbinding and rebinding the driver therefore triggers kmemleak:...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: fbdev: sis: Error out if pixclock equals zero The userspace program can pass any values to the driver via the ioctl interface. If the driver fails to validate the value of pixclock, it may result in a division-by-zero error. In...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: fbdev: savage: Error out if pixclock equals zero The userspace program can pass any values to the driver via the ioctl interface. If the driver fails to validate the value of pixclock, it may result in a division-by-zero error...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: s390/netiucv: Fixed the return type of netiucvtx With Clang’s Kernel Control Flow Integrity kCFI, CONFIGCFICLANG feature, indirect call targets are validated against the expected function pointer prototype to ensure that the call...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu – fixed a heap-buffer-overflow issue in imspcuprocessdata The imspcuprocessdata function processes incoming URB data byte by byte. However, it fails to check whether the readpos index exceeds IMSPCUBUFSIZE. If a...