EUVD-2026-104028

A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects the function sendmessagemobile of the file controllers/simple.php. Such manipulation of the argument userid leads to weak password recovery. The attack can be launched remotely. The exploit has been...

CVE-2026-112035

A security vulnerability exists in aircheng-org iWebShop-5 up to version 5.16 . The flaw is located in the send_message_mobile function within the controllers/simple.php file. By manipulating the user_id argument, an attacker can exploit a weak password recovery mechanism (CWE-640). This attack c...

CVE-2026-112035 aircheng-org iWebShop-5 simple.php send_message_mobile password recovery

A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects the function sendmessagemobile of the file controllers/simple.php. Such manipulation of the argument userid leads to weak password recovery. The attack can be launched remotely. The exploit has been...

CVE-2026-112033

A security flaw exists in aircheng-org iWebShop-5 up to version 5.16 . The vulnerability is located in the Password Change component, specifically within the admin_repwd/admin_repwd_act function of the controllers/system.php file. By manipulating the password/repassword arguments, an attacker can...

CVE-2026-112033 aircheng-org iWebShop-5 Password Change system.php admin_repwd_act cross-site request forgery

A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.16. The affected element is the function adminrepwd/adminrepwdact of the file controllers/system.php of the component Password Change. The manipulation of the argument password/repassword results in cross-site request forgery...

CVE-2026-112033 aircheng-org iWebShop-5 Password Change system.php admin_repwd_act cross-site request forgery

A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.16. The affected element is the function adminrepwd/adminrepwdact of the file controllers/system.php of the component Password Change. The manipulation of the argument password/repassword results in cross-site request forgery...

EUVD-2026-104026

A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.16. The affected element is the function adminrepwd/adminrepwdact of the file controllers/system.php of the component Password Change. The manipulation of the argument password/repassword results in cross-site request forgery...

CVE-2026-112033 aircheng-org iWebShop-5 Password Change system.php admin_repwd_act cross-site request forgery

A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.16. The affected element is the function adminrepwd/adminrepwdact of the file controllers/system.php of the component Password Change. The manipulation of the argument password/repassword results in cross-site request forgery...

CVE-2026-111704

LangChat through commit 2a6285a contains a missing authentication vulnerability that allows unauthenticated remote attackers to access REST controllers because no Sa-Token interceptor is registered. Attackers can query /api/v1/auth/users to read plaintext passwords, retrieve LLM provider API keys...

EUVD-2026-102996

LangChat through commit 2a6285a contains a missing authentication vulnerability that allows unauthenticated remote attackers to access REST controllers because no Sa-Token interceptor is registered. Attackers can query /api/v1/auth/users to read plaintext passwords, retrieve LLM provider API keys...

PT-2026-116103

LangChat through commit 2a6285a contains a missing authentication vulnerability that allows unauthenticated remote attackers to access REST controllers because no Sa-Token interceptor is registered. Attackers can query /api/v1/auth/users to read plaintext passwords, retrieve LLM provider API keys...

CVE-2026-111704: Missing Authentication for Critical Function

LangChat through commit 2a6285a contains a missing authentication vulnerability that allows unauthenticated remote attackers to access REST controllers because no Sa-Token interceptor is registered. Attackers can query /api/v1/auth/users to read plaintext passwords, retrieve LLM provider API keys...

EUVD-2026-98850

Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC Methods...

EUVD-2026-100523

VNote is a note-taking platform. Prior to 4.3.0, SessionConfig::ExternalProgram::fetchCommand wraps a note path in double quotes and substitutes it into a command string that QProcess::startconst QString& reparses into arguments through ProcessUtils::startDetached. The automatic path in...

CVE-2026-85990 Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC Methods

Leantime is an open source project management system. Prior to 3.10.0, for the provisionally grouped account-creation and plugin-management surfaces, Leantime's JSON-RPC dispatcher in app/Domain/Api/Controllers/Jsonrpc.php exposes public API service methods, while PermissionEnforcer::enforce allo...

CVE-2026-85990 Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC Methods

Leantime is an open source project management system. Prior to 3.10.0, for the provisionally grouped account-creation and plugin-management surfaces, Leantime's JSON-RPC dispatcher in app/Domain/Api/Controllers/Jsonrpc.php exposes public API service methods, while PermissionEnforcer::enforce allo...

CVE-2026-109568

Shaark 1.2.13 through 1.2.44 contains a missing authorization vulnerability in the Link, Story, Chest and Album API controllers that skips ownership checks. Authenticated non-admin users can send PUT or DELETE requests to /api/link,story,chest,album/id with numeric IDs to overwrite or delete othe...

CVE-2026-109568 Shaark 1.2.13 through 1.2.44 Missing Authorization via API Update and Delete Routes

Shaark 1.2.13 through 1.2.44 contains a missing authorization vulnerability in the Link, Story, Chest and Album API controllers that skips ownership checks. Authenticated non-admin users can send PUT or DELETE requests to /api/link,story,chest,album/id with numeric IDs to overwrite or delete othe...

CVE-2026-109568: Authorization Bypass Through User-Controlled Key

Shaark 1.2.13 through 1.2.44 contains a missing authorization vulnerability in the Link, Story, Chest and Album API controllers that skips ownership checks. Authenticated non-admin users can send PUT or DELETE requests to /api/link,story,chest,album/id with numeric IDs to overwrite or delete othe...

CVE-2026-108572

A security vulnerability has been detected in Casdoor up to 3.164.0/4.10.0. Affected is the function CasP3ProxyValidate of the file controllers/cas.go of the component Proxy Validation. Such manipulation of the argument pgtUrl leads to server-side request forgery. The attack may be performed from...