CVE-2026-86174: Authorization Bypass Through User-Controlled Key

Plane through 1.4.2 fails to validate that issues belong to the deploy board's project in the public comment endpoint. Authenticated attackers can post comments to arbitrary issues across workspaces by supplying an issueid parameter to the public deploy-board comment endpoint...

CVE-2026-47415: Authorization Bypass Through User-Controlled Key

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object Reference. The issue CRUD endpoints GET / PATCH / DELETE /workspaces/workspaceid/issues/issueid gate access on requireworkspacememberworkspaceid only, then...

Sql injection

SQL injection vulnerability in MyIssuesView.asp in Advanced Data Solutions Virtual Support Office-XP VSO-XP allows remote attackers to execute arbitrary SQL commands via the IssueID parameter...

CVE-2008-1354

SQL injection vulnerability in MyIssuesView.asp in Advanced Data Solutions Virtual Support Office-XP VSO-XP allows remote attackers to execute arbitrary SQL commands via the IssueID parameter...