11 matches found
CVE-2026-16624
The Cal.com OSS platform is vulnerable to an authorization bypass during the creation of webhooks. An authenticated user can perform an unvalidated injection of the teamId variable, enabling them to create a webhook for any team. By triggering a webhook delivery, an attacker can steal booking dat...
Incorrect Authorization
org.apache.streampipes:streampipes-parent is vulnerable to Incorrect Authorization. The vulnerability is due to a flaw in the user ID creation and JWT handling mechanism, which allows a non-administrator attacker to manipulate tokens and swap usernames with an administrator, thereby gaining full...
CVE-2025-47411: Improper Privilege Management
A user with a legitimate non-administrator account can exploit a vulnerability in the user ID creation mechanism in Apache StreamPipes that allows them to swap the username of an existing user with that of an administrator. This vulnerability allows an attacker to gain administrative control over...
PT-2026-6371
A user with a legitimate non-administrator account can exploit a vulnerability in the user ID creation mechanism in Apache StreamPipes that allows them to swap the username of an existing user with that of an administrator. This vulnerability allows an attacker to gain administrative control over...
CVE-2025-8344
creationtimestamp| type| source ---|---|--- 2025-07-31 03:43:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lva7s3ctfx2p...
SUSE: Security Advisory (SUSE-SU-2025:1430-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
UBUNTU-CVE-2025-37772
In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix workqueue crash in cmaneteventworkhandler struct rdmacmid has member "struct workstruct network" that is reused for enqueuing cmaneteventworkhandlers onto cmawq. Below crash1 can occur if more than one call to...
CVE-2024-11970
creationtimestamp| type| source ---|---|--- 2024-11-28 22:07:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113562855088023402...
CVE-2024-10325
creationtimestamp| type| source ---|---|--- 2024-11-08 11:34:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113447119670926541 2024-11-08 13:50:41+00:00| seen| https://t.me/cvedetector/10195...
COMFAST CF-WR6110N 授权问题漏洞
COMFAST CF-WR6110N is a wireless router from China Four Seas Zonglian COMFAST. A security vulnerability exists in the COMFAST CF-WR6110N version V2.3.1, which originates from incorrect access control and allows a remote attacker on the same network to perform any HTTP request to an unauthenticate...
