9 matches found
CVE-2026-16624
Cal.com OSS ships lacks authorization on webhook teamId creation, allowing any authenticated user to create a webhook on any team via unvalidated teamId injection, then steal booking data, including fields like organizer/attendee emails and custom responses, and conditionally video-call passwords...
Incorrect Authorization
org.apache.streampipes:streampipes-parent is vulnerable to Incorrect Authorization. The vulnerability is due to a flaw in the user ID creation and JWT handling mechanism, which allows a non-administrator attacker to manipulate tokens and swap usernames with an administrator, thereby gaining full...
CVE-2025-8344
creationtimestamp| type| source ---|---|--- 2025-07-31 03:43:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lva7s3ctfx2p...
SUSE: Security Advisory (SUSE-SU-2025:1430-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
UBUNTU-CVE-2025-37772
In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix workqueue crash in cmaneteventworkhandler struct rdmacmid has member "struct workstruct network" that is reused for enqueuing cmaneteventworkhandlers onto cmawq. Below crash1 can occur if more than one call to...
CVE-2024-11970
creationtimestamp| type| source ---|---|--- 2024-11-28 22:07:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113562855088023402...
CVE-2024-10325
creationtimestamp| type| source ---|---|--- 2024-11-08 11:34:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113447119670926541 2024-11-08 13:50:41+00:00| seen| https://t.me/cvedetector/10195...
COMFAST CF-WR6110N 授权问题漏洞
COMFAST CF-WR6110N is a wireless router from China Four Seas Zonglian COMFAST. A security vulnerability exists in the COMFAST CF-WR6110N version V2.3.1, which originates from incorrect access control and allows a remote attacker on the same network to perform any HTTP request to an unauthenticate...
