PoC-for-CVE-2021-38540-

CVE-2021-38540 Proof of Concept Missing Authentication on Critical component Known as CVE-2021-38540 About this bug: The variable import endpoint was not protected by authentication in Airflow =2.0.0, =2.0.0, variables List Variables PoC Source: POST /variable/varimport HTTP/2 Host:...

PT-2026-135498

The vulnerability gives a role that is restricted to a list of CAs cas = ... its full permission set for every request that is not tied to a CA, including the bulk import endpoint POST /api/v1/bulk/cas/import. It adds a new child CA under any existing CA, gives the child any of that CA's resource...

CVE-2026-115970

A vulnerability has been found in Travisun Opptrix 0.4.0. This impacts an unknown function of the file /api/system-update/import of the component Import Endpoint. Such manipulation leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public...

CVE-2026-115970

A code injection vulnerability exists in Travisun Opptrix 0.4.0 within the Import Endpoint component, specifically affecting an unknown function of the file /api/system-update/import. This flaw allows for remote code injection . While the maintainer stated the risk was a design flaw primarily for...

CVE-2026-115970 Travisun Opptrix Import Endpoint import code injection

A vulnerability has been found in Travisun Opptrix 0.4.0. This impacts an unknown function of the file /api/system-update/import of the component Import Endpoint. Such manipulation leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public...

CVE-2026-115970 Travisun Opptrix Import Endpoint import code injection

A vulnerability has been found in Travisun Opptrix 0.4.0. This impacts an unknown function of the file /api/system-update/import of the component Import Endpoint. Such manipulation leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public...

EUVD-2026-109308

A vulnerability has been found in Travisun Opptrix 0.4.0. This impacts an unknown function of the file /api/system-update/import of the component Import Endpoint. Such manipulation leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public...

Travis Un Optrix input validation error vulnerability

Travis Un Optrix version 0.4.0 contains a security vulnerability. This vulnerability stems from improper handling of an unknown function in the file /api/system-update/import within the Import Endpoint component, potentially enabling code injection and allowing remote exploitation by attackers...

PT-2026-122611

A vulnerability has been found in Travisun Opptrix 0.4.0. This impacts an unknown function of the file /api/system-update/import of the component Import Endpoint. Such manipulation leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public...

CVE-2026-109957

EspoCRM before 10.0.7 contains an insecure direct object reference vulnerability that allows authenticated users with Import scope access to read other users' attachments by supplying a foreign attachmentId to the Import endpoint. Attackers can create an Import record referencing a known attachme...

EUVD-2026-98661

EspoCRM before 10.0.7 contains an insecure direct object reference vulnerability that allows authenticated users with Import scope access to read other users' attachments by supplying a foreign attachmentId to the Import endpoint. Attackers can create an Import record referencing a known attachme...

CVE-2026-109957: Authorization Bypass Through User-Controlled Key

EspoCRM before 10.0.7 contains an insecure direct object reference vulnerability that allows authenticated users with Import scope access to read other users' attachments by supplying a foreign attachmentId to the Import endpoint. Attackers can create an Import record referencing a known attachme...

PT-2026-111552

Name of the Vulnerable Software and Affected Versions EspoCRM versions prior to 10.0.7 Description An insecure direct object reference allows authenticated users with Import scope access to read attachments belonging to other users. This occurs when a foreign attachmentId is supplied to the Impor...

CVE-2026-94047

samanhappy MCPHub (up to version 1.0.32) is affected by an improper privilege management flaw in the Template Import Endpoint , specifically the importTemplate function within src/services/templateService.ts. The vulnerability is remotely exploitable over the network with low complexity and low p...

CVE-2026-94047 samanhappy MCPHub Template Import Endpoint templateService.ts importTemplate privileges management

A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function importTemplate of the file src/services/templateService.ts of the component Template Import Endpoint. The manipulation leads to improper privilege management. Remote exploitation of...

CVE-2026-94047

A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function importTemplate of the file src/services/templateService.ts of the component Template Import Endpoint. The manipulation leads to improper privilege management. Remote exploitation of...

PT-2026-96004

Name of the Vulnerable Software and Affected Versions samanhappy MCPHub versions prior to 1.0.33 Description Improper privilege management exists within the Template Import Endpoint. The issue resides in the importTemplate function located in the src/services/templateService.ts file, allowing for...

CVE-2026-86490

In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed overwriting of bundled apps via the app import endpoint...

CVE-2026-86490

In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed overwriting of bundled apps via the app import endpoint...

CVE-2026-86490

JetBrains YouTrack versions before 2026.2.18634 are affected by improper permission checks in the app import endpoint , allowing an authenticated attacker to overwrite bundled applications. The vulnerability yields a CVSS 3.1 score of 6.5 (Medium) with high integrity impact , exploitable over the...