CVE-2026-105621

A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function updateAccountHeadAndDetail of the file jshERP-boot/src/main/java/com/jsh/erp/service/AccountHeadService.java of the component Financial Receipt Update Handler. Performing a manipulation results in imprope...

CVE-2026-35678

취약점 연구 보고서: All Eduplus Student ERP 안전하지 않은 직접 객체 참조 IDOR 연구자: Vinay Sharma 1. 요약 본 보고서는 Eduplus Student ERP 플랫폼, 특히 학생 학습자 포털learnerapi.pceterp.in에서 식별된 높은 심각도의 보안 취약점에 대해 상세히 설명합니다. 해당 애플리케이션은 시험 양식 제출 엔드포인트에서 범용 안전하지 않은 직접 객체 참조 IDOR 취약점을 가지고 있으며, 이로 인해 인증된 사용자학생는 양식 식별자를 조작하여 다른 학생의 민감한 개인 및...

CVE-2025-61148

CVE-2025-61148 이 취약점은 학생 결제 API에 존재합니다. 애플리케이션은 영수증을 요청하는 사용자가 해당 영수증을 볼 수 있는 권한이 있는지 제대로 검증하지 않습니다. 공격자는 API 요청의 recno 매개변수를 수정하여 다른 사용자의 영수증에 접근할 수 있습니다. CVE-2025-61148: EduplusCampus 학생 결제 API의 IDOR CVE ID: CVE-2025-61148 취약점 유형: Insecure Direct Object Reference IDOR 영향받는 제품: EduplusCampus 영향받...

HLF_TxTime_spoofing

HLFTxTimespoofing HLFTxTimespoofing - Hyperledger Fabric 블록체인에서 트랜잭션 시간 조작GetTxTimestamp 또는 GetHistoryForKey 사용 문제를 다루는 PoC입니다. v 2.5.5 및 v3.0.0-beta에서 테스트되었습니다. 프로젝트는 여러 부분으로 구성됩니다: 1. timeinsecure - 예치금에서 이자를 계산하기 위해 GetTxTimestamp를 사용하는 취약한 체인코드 변형 2. timesecurentp - 예치금 이자 계산 시 공격자의 시간 스푸핑을...

FinRED-paper

FinRED: 금융 레드팀 평가 데이터셋 금융 도메인의 안전성 평가를 위한 레드팀 벤치마크 생성 파이프라인. 보충 문서 논문에서 참조된 상세 자료: docs/expertvalidation.md — 12명의 FSI 도메인 전문가가 수행한 질문별 포커스 그룹 인터뷰FGI 결과 일치도, Likert 점수, Cohen's κ / Krippendorff's α. docs/judgerubric.md — 전체 LLM-as-a-Judge 평가 템플릿, 다섯 가지 루브릭 차원, 결정 규칙, 출력 JSON 스키마. docs/schemas.md ...

Patch-management-

패치 관리 - 엔터프라이즈 패치 관리 시나리오 – "금융 시스템을 위한 중요 패치 대응" 배경 귀하는 인도, 미국, 유럽에서 운영되는 다국적 금융 서비스 회사의 IT 관리자입니다. 중요한 취약점예: CVE-2025-4321 - 48시간 이내에 패치 배포를 식별, 승인 및 준비해야 합니다...

CVE-2026-100869

Sylius versions before 2.1.16 and 2.2.9 fail to restrict payment request actions in the Shop API endpoint, allowing customers to trigger refunds on completed orders. Attackers with order tokens can submit arbitrary payment actions like refunds that payment gateways execute while Sylius maintains...

CVE-2026-100869 Sylius 2.x before 2.1.16 and 2.2.9 Arbitrary Payment Action via Shop API

Sylius versions before 2.1.16 and 2.2.9 fail to restrict payment request actions in the Shop API endpoint, allowing customers to trigger refunds on completed orders. Attackers with order tokens can submit arbitrary payment actions like refunds that payment gateways execute while Sylius maintains...

CVE-2026-100869

Sylius versions before 2.1.16 and 2.2.9 are vulnerable to an arbitrary payment action flaw in the Shop API endpoint . The root cause is a failure to restrict payment request actions, which allows customers possessing order tokens to trigger unauthorized actions, such as refunds , on completed ord...

CVE-2026-100869 Sylius 2.x before 2.1.16 and 2.2.9 Arbitrary Payment Action via Shop API

Sylius versions before 2.1.16 and 2.2.9 fail to restrict payment request actions in the Shop API endpoint, allowing customers to trigger refunds on completed orders. Attackers with order tokens can submit arbitrary payment actions like refunds that payment gateways execute while Sylius maintains...

CVE-2026-100869 Sylius 2.x before 2.1.16 and 2.2.9 Arbitrary Payment Action via Shop API

Sylius versions before 2.1.16 and 2.2.9 fail to restrict payment request actions in the Shop API endpoint, allowing customers to trigger refunds on completed orders. Attackers with order tokens can submit arbitrary payment actions like refunds that payment gateways execute while Sylius maintains...

EUVD-2026-87941

Sylius versions before 2.1.16 and 2.2.9 fail to restrict payment request actions in the Shop API endpoint, allowing customers to trigger refunds on completed orders. Attackers with order tokens can submit arbitrary payment actions like refunds that payment gateways execute while Sylius maintains...

CVE-2026-100869: Incorrect Authorization

Sylius versions before 2.1.16 and 2.2.9 fail to restrict payment request actions in the Shop API endpoint, allowing customers to trigger refunds on completed orders. Attackers with order tokens can submit arbitrary payment actions like refunds that payment gateways execute while Sylius maintains...

GHSA-VV77-66RF-PM86 mpp vulnerable to Gas Draining with no limit

Details When the server acts as the feepayer, the mpp Elixir 0.4.0 does not validate gaslimit, maxfeepergas and maxpriorityfeepergas before cosigning the client's fee-payer transaction. A malicious client embeds arbitrarily large maxfeepergas and maxpriorityfeepergas values in the signed envelope...

CVE-2026-85274

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane exposes Recurring::stop as a state-changing GET route without CSRF token validation. When an authenticated administrator loads attacker-controlled content that requests...

CVE-2026-49850

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane exposes Invoices::delete and Invoices::deleteinvoicetax as state-changing routes without requiring POST and validating a CSRF token. When an authenticated administrator...

CVE-2026-49850

The open-source invoice management application InvoicePlane is vulnerable to a Cross-Site Request Forgery (CSRF) flaw in versions prior to 1.7.2 . The application fails to require POST requests or validate CSRF tokens for the state-changing routes Invoices::delete() and Invoices::delete_invoice_t...

CVE-2026-49850 InvoicePlane: Missing CSRF Protection on State-Changing delete Actions

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane exposes Invoices::delete and Invoices::deleteinvoicetax as state-changing routes without requiring POST and validating a CSRF token. When an authenticated administrator...

CVE-2026-85274

Prior to version 1.7.2 , InvoicePlane is vulnerable to a Cross-Site Request Forgery (CSRF) flaw because the Recurring::stop() function is exposed as a state-changing GET route without CSRF token validation. An attacker can trick an authenticated administrator into loading malicious content that t...

CVE-2026-85274 InvoicePlane: Recurring Invoice State Change via GET Request Without CSRF Protection

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane exposes Recurring::stop as a state-changing GET route without CSRF token validation. When an authenticated administrator loads attacker-controlled content that requests...