8109 matches found
EUVD-2026-88048
A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download of the file packages/Webkul/Admin/src/Config/acl.php of the component attachment-download Endpoint. The manipulation of the argument ID leads to improper control of resource...
CVE-2026-82323: Authorization Bypass Through User-Controlled Key
Authorization bypass through User-Controlled key vulnerability in Enocta Educational Technologies Inc. Enocta Platform allows Exploitation of Trusted Identifiers. This issue affects Enocta Platform: through 2026-09-28...
CVE-2026-100884
A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download of the file packages/Webkul/Admin/src/Config/acl.php of the component attachment-download Endpoint. The manipulation of the argument ID leads to improper control of resource...
CVE-2026-101047
Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests enterprise tier only with the intended random, time-limited URL token. Because Apple's InstallEnterpriseApplication MDM command requires these URLs to be reachable without a Fleet...
CVE-2026-100884: Improper Control of Resource Identifiers
A vulnerability has been found in Krayin laravel-crm up to 2.2.5. The impacted element is the function Storage::download of the file packages/Webkul/Admin/src/Config/acl.php of the component attachment-download Endpoint. The manipulation of the argument ID leads to improper control of resource...
CVE-2026-100654
A flaw was found in vLLM. An authenticated remote attacker can cause a Denial of Service DoS by submitting a completion request containing out-of-range stop token identifiers. Because the service does not verify that user-supplied token identifiers fall within the supported vocabulary range of th...
CVE-2026-85496
The Botslab G980H dash camera firmware is vulnerable to an authorization bypass due to the use of a small sequential value space for generating session identifiers instead of an unpredictable source. An unauthenticated attacker with adjacent network access and knowledge of an active session could...
EUVD-2026-86450
The Botslab G980H dash camera firmware generates session identifiers using a small sequential value space rather than a suitably unpredictable source. An unauthenticated attacker with adjacent network access and knowledge that an active session exists could potentially determine a valid session...
CVE-2026-85496 Botslab G980H Dashcams Generation of Predictable Numbers or Identifiers
The Botslab G980H dash camera firmware generates session identifiers using a small sequential value space rather than a suitably unpredictable source. An unauthenticated attacker with adjacent network access and knowledge that an active session exists could potentially determine a valid session...
EUVD-2026-85340
Isotope eCommerce through 2.9.10 derives order identifiers from uniqid instead of a cryptographically secure source, allowing unauthenticated attackers to guess identifiers. Guest orders lack ownership verification, enabling attackers to access order details including billing address, customer...
CVE-2026-95847: Improper Control of Resource Identifiers
Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, H2PersistentQueue derives a session's message-map name as queue plus the client ID and its metadata-map name as queue plus the client ID plus meta. A durable session whose client ID ends in meta can therefore make its message map collid...
PT-2026-97345
Name of the Vulnerable Software and Affected Versions Isotope eCommerce versions prior to 2.9.11 Description The software generates order identifiers using the uniqid function rather than a cryptographically secure source, which allows unauthenticated attackers to predict these identifiers. Becau...
ROS-20260923-73-0072
The vulnerability in the drivers/media/usb/uvc/uvcdriver.c and drivers/media/usb/uvc/uvcvideo.h files of the UVC driver for the Linux operating system is related to the improper assignment of identifiers. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2026-95653 Concrete CMS Community Store before 2.7.8 Predictable Digital Download Token
Concrete CMS Community Store before 2.7.8 derives digital product download tokens from order creation timestamps instead of random values, making tokens predictable. Unauthenticated attackers can enumerate sequential order and file identifiers to calculate valid download tokens and retrieve digit...
CVE-2026-95653: Generation of Predictable Numbers or Identifiers
Concrete CMS Community Store before 2.7.8 derives digital product download tokens from order creation timestamps instead of random values, making tokens predictable. Unauthenticated attackers can enumerate sequential order and file identifiers to calculate valid download tokens and retrieve digit...
CVE-2026-94149 Omega Solution HRM OS Role Permission Retrieval Endpoint permission resource injection
A vulnerability was identified in Omega Solution HRM OS up to 20260717. The affected element is an unknown function of the file /role-permission/permission of the component Role Permission Retrieval Endpoint. Such manipulation of the argument roleId leads to improper control of resource...
PT-2026-96051
Name of the Vulnerable Software and Affected Versions Omega Solution HRM OS versions prior to 20260717 Description An issue exists in the Role Permission Retrieval Endpoint within the /role-permission/permission file. Remote manipulation of the roleId argument allows for improper control of...
PT-2026-96217
Name of the Vulnerable Software and Affected Versions InvenTree versions prior to 1.4.0 Description An authentication bypass occurs because the system fails to call the users.permissions.check user permission function to verify the caller's per-model view role before selecting objects by primary...
CVE-2026-94149: Improper Control of Resource Identifiers
A vulnerability was identified in Omega Solution HRM OS up to 20260717. The affected element is an unknown function of the file /role-permission/permission of the component Role Permission Retrieval Endpoint. Such manipulation of the argument roleId leads to improper control of resource...