72711 matches found
CVE-2026-56324 Capgo - Rate Limit Bypass via User-Controlled device_id Parameter
Capgo before 12.128.2 contains a rate limit bypass vulnerability in the channelself endpoint that allows attackers to circumvent rate limiting by rotating the user-controlled deviceid parameter. Attackers can send multiple requests per second by changing deviceid values to flood the channeldevice...
Paymenter has broken object level authorization via service reference manipulation on ticket creation
Summary The ticket creation endpoint accepts a user-supplied service identifier without enforcing ownership validation, allowing authenticated users to create support tickets referencing services belonging to other accounts by modifying the service ID in the request. Technical Details The ticket...
GHSA-X93Q-X9PC-W5HW Paymenter has broken object level authorization via service reference manipulation on ticket creation
Summary The ticket creation endpoint accepts a user-supplied service identifier without enforcing ownership validation, allowing authenticated users to create support tickets referencing services belonging to other accounts by modifying the service ID in the request. Technical Details The ticket...
GHSA-HM92-R4W5-C3MJ vulnerabilities
Vulnerabilities for packages: vitess, renovate, code-server...
MINI-JM5R-8G3G-3675
Bulletin has no description...
MINI-QP7C-95P4-G9VV
Bulletin has no description...
MINI-33MG-RPJC-RRW8
Bulletin has no description...
MINI-9RCX-J92J-Q2F2
Bulletin has no description...
MINI-WG5W-5Q26-62JG
Bulletin has no description...
MINI-WGJV-4QC8-3M6F
Bulletin has no description...
MINI-85RC-XJJR-M28X
Bulletin has no description...
MINI-F6W2-457G-FCCC
Bulletin has no description...
MINI-MF87-5Q5V-Q6C5
Bulletin has no description...
MINI-WP58-4QW7-HV9M
Bulletin has no description...
MINI-M87X-2P9M-QXQ4
Bulletin has no description...
MINI-55Q8-PFJ9-VX7W
Bulletin has no description...
MINI-78F9-JQMV-3V5G
Bulletin has no description...
MINI-V753-8R6Q-QV43
Bulletin has no description...