CVE-2023-22518

CVE-2023-22518 Schwachstelle durch fehlerhafte Autorisierung in Confluence Data Center und Server. Atlassian hat Administratoren auf eine kritische Schwachstelle in Confluence hingewiesen. Die Ausnutzung dieses Problems kann zu Datenverlust führen, daher empfehlen die Entwickler dringend, die...

CVE-2026-54121

🛡️ CVE-2026-54121 — Indagine CTI su Certighost Privilege Escalation dei Servizi certificati di Active Directory / Rischio di compromissione del dominio Creato da Pratik Chhetri Data del report: 2026-07-28 📌 Sintesi esecutiva...

CVE-2026-78158

A flaw has been found in Open5GS 2.8.0. This vulnerability affects unknown code of the component AMF UEContextReleaseRequest Path Handler. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely...

EUVD-2026-64676

A flaw has been found in Open5GS 2.8.0. This vulnerability affects unknown code of the component AMF UEContextReleaseRequest Path Handler. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely...

CVE-2026-78158 Open5GS AMF UEContextReleaseRequest Path improper authorization

A flaw has been found in Open5GS 2.8.0. This vulnerability affects unknown code of the component AMF UEContextReleaseRequest Path Handler. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely...

CVE-2026-78158

Open5GS 2.8.0 contains an improper authorization flaw in the AMF UEContextReleaseRequest Path Handler . The root cause is not further specified in the provided documents. A remote attacker with low privileges can exploit this to bypass authorization controls, resulting in low impact on confidenti...

CVE-2026-78158 Open5GS AMF UEContextReleaseRequest Path improper authorization

A flaw has been found in Open5GS 2.8.0. This vulnerability affects unknown code of the component AMF UEContextReleaseRequest Path Handler. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely...

PT-2026-81001

Name of the Vulnerable Software and Affected Versions Dolibarr versions prior to 24.0.0 Description An improper authorization issue exists in the payments REST API delete endpoint. Authenticated attackers with invoice-deletion rights can bypass the required payment-issuance rights check to...

CVE-2026-78115

A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /admin/edituseraccount.php of the component User Account Update. Such manipulation of the argument id/username leads to improper authorization. The attack may be...

CVE-2026-78115 SourceCodester Class and Exam Timetabling System User Account Update edit_user_account.php improper authorization

A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /admin/edituseraccount.php of the component User Account Update. Such manipulation of the argument id/username leads to improper authorization. The attack may be...

CVE-2026-78115

SourceCodester Class and Exam Timetabling System 1.0 is affected by an improper authorization vulnerability in the User Account Update component, specifically in the file /admin/edit_user_account.php. Manipulation of the id/username argument allows a remote, authenticated attacker to bypass autho...

EUVD-2026-64646

A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /admin/edituseraccount.php of the component User Account Update. Such manipulation of the argument id/username leads to improper authorization. The attack may be...

PT-2026-79766

A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /admin/edit user account.php of the component User Account Update. Such manipulation of the argument id/username leads to improper authorization. The attack may be...

CVE-2026-62382

PasswordPusher versions v1.45.11 through v2.9.5 contain an improper authorization vulnerability in the push deletion logic. The ownership check compares @push.user against currentuser; for an anonymously created push both values are nil, and Ruby evaluates nil == nil as true, so the check passes...

EUVD-2026-64274

PasswordPusher versions v1.45.11 through v2.9.5 contain an improper authorization vulnerability in the push deletion logic. The ownership check compares @push.user against currentuser; for an anonymously created push both values are nil, and Ruby evaluates nil == nil as true, so the check passes...

CVE-2026-62382

PasswordPusher versions v1.45.11 through v2.9.5 contain an improper authorization flaw in the push deletion logic. The ownership check compares @push.user against current_user; for anonymously created pushes both values are nil, and Ruby evaluates nil == nil as true, bypassing the deletable_by_vi...

Fedora 44 : ceph (2026-7de7d03796)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7de7d03796 advisory. Ceph 20.2.4 GA CVE-2025-30156 is an authentication bypass in CephX caused by misuse of AES-CBC...

Fedora 43 : ceph (2026-ebffec502b)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ebffec502b advisory. Ceph 19.2.6 GA CVE-2025-30156 is an authentication bypass in CephX caused by misuse of AES-CBC...

CVE-2026-77795

A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.6.2. This issue affects the function FlwInstanceController/FlwDefinitionController/FlwCategoryController/FlwSpelController/TestLeaveController of the component Workflow Endpoint. Such manipulation leads to improper authorization. Th...

CVE-2026-77795 Dromara RuoYi-Vue-Plus Workflow Endpoint TestLeaveController improper authorization

A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.6.2. This issue affects the function FlwInstanceController/FlwDefinitionController/FlwCategoryController/FlwSpelController/TestLeaveController of the component Workflow Endpoint. Such manipulation leads to improper authorization. Th...