CVE-2026-89022

BookStack before 26.05.5 contains an authentication bypass vulnerability in its social login implementation that allows unauthenticated attackers to sign in as arbitrary users by authenticating through a different social provider sharing the same driverid namespace. Attackers can authenticate at...

CVE-2026-89022

BookStack before 26.05.5 is affected by an authentication bypass in its social login implementation. The root cause lies in SocialAuthService::handleLoginCallback , whose database query ignores the driver column when retrieving linked account records, allowing an unauthenticated attacker to authe...

PT-2026-92117

BookStack before 26.05.5 contains an authentication bypass vulnerability in its social login implementation that allows unauthenticated attackers to sign in as arbitrary users by authenticating through a different social provider sharing the same driver id namespace. Attackers can authenticate at...

CodeAstro Car Rental System 注入漏洞

CodeAstro Car Rental System is a car rental system from CodeAstro. An injection vulnerability exists in CodeAstro Car Rental System version 1.0, which stems from an incorrect operation of the parameter driveridfromdropdown that can result in SQL injection...

inDrive: Stored XSS on promo.indrive.com

Vulnerability description not provided...

CVE-2021-23279

Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improper input validation in metadriversrv.js class with saveDriverData action using invalidated driverID. An attacker can send specially crafted packets to delete...

CVE-2021-23279

Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improper input validation in metadriversrv.js class with saveDriverData action using invalidated driverID. An attacker can send specially crafted packets to delete...