PT-2026-71045

The hunt delete VQL function allows deleting hunts. Velociraptor misapplied the permission check requiring only COLLECT CLIENT usually assigned to the "investigator" role instead of the "DELETE RESULTS" permission usually only assigned to "administrators"...

CVE-2025-1530

CVE-2025-1530 : The Tripetto WordPress plugin is vulnerable to Cross-Site Request Forgery (CSRF) in all versions up to and including 8.0.9 due to missing nonce validation. This can allow unauthenticated attackers to delete arbitrary results by tricking a site administrator into performing an acti...