CVE-2026-87846

The Shipping for Nova Poshta WordPress plugin through 1.19.8 does not perform any authorisation, nonce or ownership checks on one of its AJAX actions available to unauthenticated users, allowing anyone to delete the shipment records of arbitrary orders and to make the store issue the carrier's...

CVE-2026-49087: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user can submit a specially crafted bulk deletion request that causes excessive resource consumption, which may render Kibana unavailable...

CVE-2025-65562

The free5GC UPF suffers from a lack of bounds checking on the SEID when processing PFCP Session Deletion Requests. An unauthenticated remote attacker can send a request with a very large SEID e.g., 0xFFFFFFFFFFFFFFFF that causes an integer conversion/underflow in LocalNode.DeleteSess /...

Five Data Privacy Tips for Consumers

As a consumer, you must assume that your personal information is not 100% safe online. Hackers cause data breaches every single day, exposing our email addresses, passwords, credit card numbers, social security numbers and other sensitive personal data in the process. Most people don’t think abou...

UAA server 信息泄露漏洞

Cloud Foundry UAA is an authentication and managed service endpoint for the CloudFoundry cloud platform from the Cloud Foundry Foundation in the United States. An information disclosure vulnerability exists in the UAA server, which stems from the fact that when an IdP identity provider deletion...

Recall Products <= 0.8 - Authenticated SQL Injection

The Manufacturer POST parameter is vulnerable to SQL injection when submitting a deletion request. PoC The PoC will be displayed once the issue has been remediated...

CVE-2015-0773

Cisco FireSIGHT Management Center (System Software 5.3.1.3 and 6.0.0) is affected by CVE-2015-0773. The issue allows remote authenticated users to delete another user’s dashboard by submitting a modified VPN deletion request within a management session, due to improper validation of the deletion ...

PT-2015-4874

Name of the Vulnerable Software and Affected Versions Cisco FireSIGHT System Software versions 5.3.1.3 and 6.0.0 Description The issue allows remote authenticated users to delete an arbitrary user's dashboard via a modified VPN deletion request in a management session. Recommendations For version...

CVE-2015-0773: Undefined Security Weakness

Cisco FireSIGHT System Software 5.3.1.3 and 6.0.0 allows remote authenticated users to delete an arbitrary user's dashboard via a modified VPN deletion request in a management session, aka Bug ID CSCut67078...