CVE-2026-46712 Misskey: Lack of proper permission checks in Direct Messaging feature

Misskey is an open source, federated social media platform. Versions 2025.3.2 and later, but prior to 2026.5.4, contain a vulnerability where a lack of proper permission checks allows access to certain data points from the Direct Messages formerly Chat feature, regardless of account permissions...

CVE-2026-28431

Misskey is an open source, federated social media platform. All Misskey servers running versions 8.45.0 and later, but prior to 2026.3.1, contain a vulnerability that allows bad actors access to data that they ordinarily wouldn't be able to access due to insufficient permission checks and proper...

VulnCheck KEV: CVE-2025-12845

The Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent plugin for WordPress is vulnerable to unauthorized access of data that leads to privilege escalation due to a missing capability check on the gettabledata function in versions 0.5.4 to 1.2.1. This makes it possible...

AutoQueryable 安全漏洞

AutoQueryable is a web application by the individual developer Thibaut Renoncourt. A security vulnerability exists in AutoQueryable version v1.7.0, which stems from the Unselectable function not restricting data access. An attacker exploiting this vulnerability could gain access to sensitive...