EUVD-2026-75665

pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods...

MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs

Impact Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Library can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

EUVD-2026-75637

MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs...

GHSA-8FXW-FMJ8-XP7J MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs

Impact Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Library can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

CVE-2026-105785 Joplin Server password reset accepts tokens issued for unrelated purposes

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to Joplin Server 3.7.2, packages/server/src/models/TokenModel.ts stores CSRF, account-confirmation, email-change, and password-reset tokens without a purpose, and...

CVE-2026-105785 Joplin Server password reset accepts tokens issued for unrelated purposes

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to Joplin Server 3.7.2, packages/server/src/models/TokenModel.ts stores CSRF, account-confirmation, email-change, and password-reset tokens without a purpose, and...

CVE-2026-105785 Joplin Server password reset accepts tokens issued for unrelated purposes

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to Joplin Server 3.7.2, packages/server/src/models/TokenModel.ts stores CSRF, account-confirmation, email-change, and password-reset tokens without a purpose, and...

CVE-2026-105785

Prior to Joplin Server 3.7.2 , a vulnerability exists in the TokenModel.ts and UserModel.ts components. The system stores CSRF, account-confirmation, email-change, and password-reset tokens without distinguishing their specific purposes. This allows an attacker to use a leaked CSRF or confirmatio...

EUVD-2026-92872

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to Joplin Server 3.7.2, packages/server/src/models/TokenModel.ts stores CSRF, account-confirmation, email-change, and password-reset tokens without a purpose, and...

CVE-2019-17234b-Exploit

Vulnerabilidad del plugin Wordpress IgniteUp El plugin IgniteUp de Wordpress v3.4 y versiones anteriores permite a usuarios remotos no autenticados eliminar arbitrariamente cualquier archivo del servidor web objetivo, pudiendo provocar un ataque de denegación de servicio. Cronología de...

CVE-2024-10448

Versión Afectada: BloodBank Management System : 1.0 Información de la Vulnerabilidad: Tipo de Vulnerabilidad: Cross Site Request Forgery CSRF Severidad: ALTA Estado: Sin Parchear Endpoint Vulnerable: Ruta: /file/delete.php?bid= Descripción de la Vulnerabilidad: Se descubrió una vulnerabilidad de...

CVE-2025-60710

CVE-2025-60710 Este es un PoC para la vulnerabilidad de escalada de privilegios local en la tarea programada \Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration. Cuando se inicia esta tarea programada, el proceso taskhostw.exe intentará abrir el directorio...

CVE-2026-105695

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, assemble-chunks retrieves an upload session using only its session ID, while upload-chunk correctly scopes the lookup to the authenticated profile. An authenticated user who obtains another user's live, completed...

CVE-2026-105695 Penpot: Missing authorization in chunked-upload assembly lets another authenticated user consume a victim's upload session

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, assemble-chunks retrieves an upload session using only its session ID, while upload-chunk correctly scopes the lookup to the authenticated profile. An authenticated user who obtains another user's live, completed...

EUVD-2026-92710

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the delete-share-link RPC retrieves a caller-selected share-link ID and verifies only that the caller can edit the parent file. It does not verify that the caller created the share link or has owner or administrator...

CVE-2026-105692 Penpot: IDOR in Share-Link Deletion Allows Any File Editor to Delete Share-Links They Did Not Create

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the delete-share-link RPC retrieves a caller-selected share-link ID and verifies only that the caller can edit the parent file. It does not verify that the caller created the share link or has owner or administrator...

org.hibernate/hibernate-core: Hibernate: Information disclosure and data deletion via second-order SQL injection

A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive informatio...

CVE-2026-105629

Plane is an open-source project management tool. Prior to 1.4.0, BulkEstimatePointEndpoint.destroy resolves an estimate point through a bare primary-key lookup without workspace, project, or estimate scoping. An administrator or member of one workspace can permanently delete an estimate point...

CVE-2026-12277

CVE-2026-12277 Plugin Frontend File Manager WordPress = 23.6 - Eliminación arbitraria de archivos sin autenticar que deriva en RCE Resumen Campo| Valor ---|--- CVE| CVE-2026-12277 Plugin| Frontend File Manager Plugin nmedia-user-file-uploader Afectado| = 23.6 Tipo| Eliminación arbitraria de...

CVE-2026-105629

The open-source project management tool Plane is vulnerable to a destructive cross-tenant IDOR in versions prior to 1.4.0 . The root cause is that the BulkEstimatePointEndpoint.destroy function performs a bare primary-key lookup without validating workspace, project, or estimate scoping. This all...