5 matches found
CVE-2026-26973: Incorrect Authorization
Discourse is an open source discussion platform. Versions prior to 2025.12.2, 2026.1.1, and 2026.2.0 have an IDOR Insecure Direct Object Reference in ReviewableNotesController. When enablecategorygroupmoderation is enabled, a user belonging to a category moderation group can create or delete thei...
EUVD-2025-11798
Malicious code in bioql PyPI...
CVE-2025-29456
An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the create Notes function...
CVE-2025-29456
Personal Management System version 1.4.65 is vulnerable to a security issue in the create Notes function. This flaw allows a remote attacker to obtain sensitive information due to the mishandling of the feature. As a remediation, it is recommended to disable the create Notes function until a patc...
