The vulnerability of the cipher_update_inplace() function in the openssl/src/cipher_ctx.rs module of the OpenSSL library allows a attacker to compromise the integrity and accessibility of the protected information.

The vulnerability of the cipherupdateinplace function in the openssl/src/cipherctx.rs module of the OpenSSL library is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected...

UBUNTU-CVE-2026-91202

A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by crafting a directory containing a symbolic link symlink and then using the privileged "Paste as owner" function. This allows for arbitrary file ownership changes outside the intended pasted directory,...

Linux Distros Unpatched Vulnerability : CVE-2026-91202

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by crafting a directory containing a symbolic link symlink and the...

RISE-Ultimate_Project_Manager_e_CRM

CVE-2025-3855 - RISE Ultimate Project Manager - IDOR Vulnerabilidad de seguridad: IDOR Referencia Directa Insegura a Objetos Componente afectado: endpoint de carga de imagen de perfil, controlador teammembers Software: RISE - Ultimate Project Manager & CRM Vendor: codecanyon Versión: 3.8.2 CVE OR...

BLE-TPMS

CVE-2024-39081 Enlace: https://vulners.com/cve/CVE-2024-39081 TPMS DE TREEL BASADO EN BLE para bicicletas Aquí, realizamos y explicamos la manipulación de datos TPMS a través de bluetooth. Podemos enviar una falsa alarma al usuario de la aplicación a través de bluetooth. Los hallazgos detallados ...

DEBIAN-CVE-2026-91202

A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by crafting a directory containing a symbolic link symlink and then using the privileged "Paste as owner" function. This allows for arbitrary file ownership changes outside the intended pasted directory,...

CVE-2026-91202

A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by crafting a directory containing a symbolic link symlink and then using the privileged "Paste as owner" function. This allows for arbitrary file ownership changes outside the intended pasted directory,...

CVE-2026-91202

A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by crafting a directory containing a symbolic link symlink and then using the privileged "Paste as owner" function. This allows for arbitrary file ownership changes outside the intended pasted directory,...

EUVD-2026-83298

A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by crafting a directory containing a symbolic link symlink and then using the privileged "Paste as owner" function. This allows for arbitrary file ownership changes outside the intended pasted directory,...

CVE-2026-91202

A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by crafting a directory containing a symbolic link symlink and then using the privileged "Paste as owner" function. This allows for arbitrary file ownership changes outside the intended pasted directory,...

CVE-2026-91202

CVE-2026-91202 affects cockpit-files , a component of the Cockpit web-based server management suite. A low-privileged local user can exploit a symlink-following flaw in the privileged "Paste as owner" function by crafting a directory containing a symbolic link. This allows arbitrary file ownershi...

grafana: Grafana: Unauthorized snapshot deletion via Broken Access Control in Snapshot API

A flaw was found in Grafana. An authenticated user with editor privileges could exploit a Broken Access Control BAC vulnerability in the Snapshot API. This flaw allows an editor to delete any dashboard snapshot, even those they do not have explicit read or write access to, leading to unauthorized...

CVE-2026-54648

CubeCart is an ecommerce software solution. Prior to 6.7.5, the GDPR tools in admin/sources/customers.gdpr.inc.php rely on page-level CCPERMREAD access and do not require CCPERMDELETE for the purge, noorderpurge, or deleteguests commands. An authenticated administrator with read-only customer...

grafana: Grafana: Unauthorized snapshot deletion via Broken Access Control in Snapshot API

A flaw was found in Grafana. An authenticated user with editor privileges could exploit a Broken Access Control BAC vulnerability in the Snapshot API. This flaw allows an editor to delete any dashboard snapshot, even those they do not have explicit read or write access to, leading to unauthorized...

grafana: Grafana: Unauthorized annotation deletion by editor users

A flaw was found in Grafana. An authenticated editor user could exploit this vulnerability to delete any annotation, even those for which they lack read permissions. This unauthorized action compromises the integrity of data by allowing deletion of information beyond their intended access scope...

grafana: Grafana: Unauthorized snapshot deletion via Broken Access Control in Snapshot API

A flaw was found in Grafana. An authenticated user with editor privileges could exploit a Broken Access Control BAC vulnerability in the Snapshot API. This flaw allows an editor to delete any dashboard snapshot, even those they do not have explicit read or write access to, leading to unauthorized...

CVE-2026-45767

A flaw was found in Suricata, a network Intrusion Detection System IDS, Intrusion Prevention System IPS, and Network Security Monitoring engine. A highly privileged remote attacker could exploit this vulnerability by crafting a malicious rule. When this rule is loaded or reloaded, it could allow...

python: Python: FTP connection redirection via ftpcp() function bypass

A flaw was found in the ftplib.py module of Python. This vulnerability allows a remote attacker to bypass a previous security fix by manipulating the ftpcp function. By supplying a malicious IP address and port, an attacker can redirect FTP connections to an arbitrary host. This could lead to the...

python: Python: FTP connection redirection via ftpcp() function bypass

A flaw was found in the ftplib.py module of Python. This vulnerability allows a remote attacker to bypass a previous security fix by manipulating the ftpcp function. By supplying a malicious IP address and port, an attacker can redirect FTP connections to an arbitrary host. This could lead to the...

python: Python: FTP connection redirection via ftpcp() function bypass

A flaw was found in the ftplib.py module of Python. This vulnerability allows a remote attacker to bypass a previous security fix by manipulating the ftpcp function. By supplying a malicious IP address and port, an attacker can redirect FTP connections to an arbitrary host. This could lead to the...