29068 matches found
CVE-2026-105785
Prior to Joplin Server 3.7.2 , a vulnerability exists in the TokenModel.ts and UserModel.ts components. The system stores CSRF, account-confirmation, email-change, and password-reset tokens without distinguishing their specific purposes. This allows an attacker to use a leaked CSRF or confirmatio...
CVE-2026-105785 Joplin Server password reset accepts tokens issued for unrelated purposes
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to Joplin Server 3.7.2, packages/server/src/models/TokenModel.ts stores CSRF, account-confirmation, email-change, and password-reset tokens without a purpose, and...
EUVD-2026-92872
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to Joplin Server 3.7.2, packages/server/src/models/TokenModel.ts stores CSRF, account-confirmation, email-change, and password-reset tokens without a purpose, and...
CVE-2026-105785 Joplin Server password reset accepts tokens issued for unrelated purposes
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to Joplin Server 3.7.2, packages/server/src/models/TokenModel.ts stores CSRF, account-confirmation, email-change, and password-reset tokens without a purpose, and...
CVE-2026-105785 Joplin Server password reset accepts tokens issued for unrelated purposes
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to Joplin Server 3.7.2, packages/server/src/models/TokenModel.ts stores CSRF, account-confirmation, email-change, and password-reset tokens without a purpose, and...
CVE-2019-17234b-Exploit
Wordpress IgniteUp प्लगइन भेद्यता Wordpress IgniteUp प्लगइन v3.4 और इससे नीचे के संस्करण दूरस्थ अप्रमाणित उपयोगकर्ताओं को लक्ष्य वेबसर्वर पर किसी भी फ़ाइल को मनमाने ढंग से हटाने की अनुमति देता है, जिससे संभावित रूप से सेवा से इनकार का हमला हो सकता है। CVE-2019-17234 समयरेखा भेद्यता की सूचना...
CVE-2024-10448
प्रभावित संस्करण: BloodBank Management System : 1.0 भेद्यता जानकारी: भेद्यता प्रकार: क्रॉस साइट रिक्वेस्ट फोर्जरी CSRF गंभीरता: HIGH स्थिति: अनपैच्ड भेद्य एंडपॉइंट: पथ: /file/delete.php?bid= भेद्यता विवरण: BloodBank Management System के रक्त अनुरोध कार्यक्षमता में एक क्रॉस साइट रिक्वेस्ट फोर्जरी...
CVE-2025-60710
CVE-2025-60710 Este é um PoC para a vulnerabilidade de escalada de privilégio local na tarefa agendada \Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration. Quando esta tarefa agendada é iniciada, o processo taskhostw.exe tentará abrir o diretório...
CVE-2026-105695
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, assemble-chunks retrieves an upload session using only its session ID, while upload-chunk correctly scopes the lookup to the authenticated profile. An authenticated user who obtains another user's live, completed...
CVE-2026-105695 Penpot: Missing authorization in chunked-upload assembly lets another authenticated user consume a victim's upload session
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, assemble-chunks retrieves an upload session using only its session ID, while upload-chunk correctly scopes the lookup to the authenticated profile. An authenticated user who obtains another user's live, completed...
EUVD-2026-92710
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the delete-share-link RPC retrieves a caller-selected share-link ID and verifies only that the caller can edit the parent file. It does not verify that the caller created the share link or has owner or administrator...
CVE-2026-105692 Penpot: IDOR in Share-Link Deletion Allows Any File Editor to Delete Share-Links They Did Not Create
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the delete-share-link RPC retrieves a caller-selected share-link ID and verifies only that the caller can edit the parent file. It does not verify that the caller created the share link or has owner or administrator...
org.hibernate/hibernate-core: Hibernate: Information disclosure and data deletion via second-order SQL injection
A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive informatio...
CVE-2026-105629
Plane is an open-source project management tool. Prior to 1.4.0, BulkEstimatePointEndpoint.destroy resolves an estimate point through a bare primary-key lookup without workspace, project, or estimate scoping. An administrator or member of one workspace can permanently delete an estimate point...
CVE-2026-12277
CVE-2026-12277 Plugin Frontend File Manager WordPress = 23.6 - Exclusão Arbitrária de Arquivos Não Autenticada para RCE Resumo Campo| Valor ---|--- CVE| CVE-2026-12277 Plugin| Frontend File Manager Plugin nmedia-user-file-uploader Afetado| = 23.6 Tipo| Exclusão Arbitrária de Arquivos Não...
CVE-2026-105629
The open-source project management tool Plane is vulnerable to a destructive cross-tenant IDOR in versions prior to 1.4.0 . The root cause is that the BulkEstimatePointEndpoint.destroy function performs a bare primary-key lookup without validating workspace, project, or estimate scoping. This all...
CVE-2026-105629 Plane: Cross-Tenant Destructive IDOR: Estimate Point Deletion via Unscoped Primary Key Lookup
Plane is an open-source project management tool. Prior to 1.4.0, BulkEstimatePointEndpoint.destroy resolves an estimate point through a bare primary-key lookup without workspace, project, or estimate scoping. An administrator or member of one workspace can permanently delete an estimate point...
EUVD-2026-92525
FacturaScripts before version 2026.7 contains a PHP object injection vulnerability in WidgetSelect::processFormData that allows authenticated attackers to trigger unserialize on raw POST data without an allowedclasses filter for multiple-select fields. Attackers can submit a serialized XLSXWriter...
CVE-2026-104905 FacturaScripts < 2026.7 PHP Object Injection via WidgetSelect
FacturaScripts before version 2026.7 contains a PHP object injection vulnerability in WidgetSelect::processFormData that allows authenticated attackers to trigger unserialize on raw POST data without an allowedclasses filter for multiple-select fields. Attackers can submit a serialized XLSXWriter...
CVE-2026-104905 FacturaScripts < 2026.7 PHP Object Injection via WidgetSelect
FacturaScripts before version 2026.7 contains a PHP object injection vulnerability in WidgetSelect::processFormData that allows authenticated attackers to trigger unserialize on raw POST data without an allowedclasses filter for multiple-select fields. Attackers can submit a serialized XLSXWriter...