user-security-stories

User Security Stories This repository contains a collection of user security stories and acceptance criteria. User Security Stories Security Acceptance Criteria Please fork and contribute additional security stories and acceptance criteria that you think will benefit the community. History The...

WAFEC

OWASP WAFEC Project Document Repository OWASP WAF Evaluation Criteria Project The Web Application Firewall Evaluation Criteria WAFEC provides interested partied, including users, vendors and 3rd party evaluators with a tool to learn about Web Application Firewalls WAFs and evaluate the suitabilit...

CVE-2026-50543

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing authorization on POST /displaygroup/criteria/displayGroupId allows an authenticated user to send criteria updates to any display via XMR. These criteri...

EUVD-2026-112141

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing authorization on POST /displaygroup/criteria/displayGroupId allows an authenticated user to send criteria updates to any display via XMR. These criteri...

CVE-2026-50543

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing authorization on "POST /displaygroup/criteria/displayGroupId" allows an authenticated user to send criteria updates to any display via "XMR". These...

CVE-2026-50543

The Xibo digital signage platform (prior to version 4.4.3 ) is vulnerable to a missing authorization flaw on the POST /displaygroup/criteria/{displayGroupId} endpoint. This allows an authenticated user to inject arbitrary scheduling criteria updates to any display via XMR . Such updates can modif...

CVE-2026-50543 Xibo: Missing Authorization on POST /displaygroup/criteria/{displayGroupId} Allows Arbitrary Scheduling Criteria Injection to Player Devices

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing authorization on POST /displaygroup/criteria/displayGroupId allows an authenticated user to send criteria updates to any display via XMR. These criteri...

CVE-2026-50543 Xibo: Missing Authorization on POST /displaygroup/criteria/{displayGroupId} Allows Arbitrary Scheduling Criteria Injection to Player Devices

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing authorization on POST /displaygroup/criteria/displayGroupId allows an authenticated user to send criteria updates to any display via XMR. These criteri...

PT-2026-128269

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing authorization on POST /displaygroup/criteria/displayGroupId allows an authenticated user to send criteria updates to any display via XMR. These criteri...

CVE-2026-50543: Missing Authorization

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing authorization on POST /displaygroup/criteria/displayGroupId allows an authenticated user to send criteria updates to any display via XMR. These criteri...

xibosignage xibo-cms authorization issue vulnerability

Versions prior to 4.4.3 of xibosignage xibo-cms contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks on POST /displaygroup/criteria/displayGroupId. Authenticated users can use XMR to send conditional updates to any display device, thereby...

Astra Linux – vulnerability in libhibernate3-java

A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. An SQL injection in the implementation of the JPA Criteria API can allow un sanitized literals to be used when a literal appears in the SQL comments of a query. This flaw may enable an attacker to access...

pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods

ImpactWhen reading/writing via an ID with the GridFS API, require an exact match on the given ID. Otherwise, if a Hash is given in place of the ID, it may be interpreted as criteria, overriding the ID match. PatchesPatch available in pymongo = 4.18.1 WorkaroundsEnsure your existing workflow only...

PYSEC-2026-4294 pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods

Impact When reading/writing via an ID with the GridFS API, require an exact match on the given ID. Otherwise, if a Hash is given in place of the ID, it may be interpreted as criteria, overriding the ID match. Patches Patch available in pymongo = 4.18.1 Workarounds Ensure your existing workflow on...

CVE-2026-105107 Koha SQL injection in reports/cat_issues_top.pl via the Criteria, Filter and Limit request parameters

Koha is vulnerable to SQL injection in the Most-circulated items report. The reports/catissuestop.pl script sub calculate concatenates the user-controlled Criteria, Filter, and Limit request parameters directly into dynamic SQL. Criteria is only prefix-normalized and never validated against an...

CVE-2026-105107

The Koha library system is vulnerable to SQL injection within the reports/cat_issues_top.pl script (specifically the sub calculate function). The root cause is the direct concatenation of user-controlled Criteria , Filter , and Limit request parameters into dynamic SQL queries without adequate va...

SoK: Failure Modes in Common Criteria Product Evaluation - a Taxonomy and Design-For-Evaluability Guidance

The Common Criteria CC; ISO/IEC 15408 is the principal international framework for evaluating the security of IT products, and its certificates gate procurement across government, defense, and regulated industry. Yet evaluations routinely stall, fail, or yield certificates whose assurances do not...

CVE-2026-93759 Server-side JavaScript injection via string query criteria bypassing the strict operator allowlist

Mongoid does not neutralize a string-typed query criterion supplied to its query builder, and instead passes it to the database as a server-side JavaScript expression. An unauthenticated party able to influence the value an application supplies as a query argument may cause code of their choosing...

CVE-2026-93759

Mongoid does not neutralize a string-typed query criterion supplied to its query builder, and instead passes it to the database as a server-side JavaScript expression. An unauthenticated party able to influence the value an application supplies as a query argument may cause code of their choosing...

Server-side JavaScript injection via string query criteria bypassing the strict operator allowlist

Mongoid does not neutralize a string-typed query criterion supplied to its query builder, and instead passes it to the database as a server-side JavaScript expression. An unauthenticated party able to influence the value an application supplies as a query argument may cause code of their choosing...