6 matches found
PT-2026-93972
A vulnerability in the web-based management interface of Cisco Identify Services Engine ISE could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of server-side validation of Administrator permissions. An...
PT-2026-69348
Name of the Vulnerable Software and Affected Versions Pinpoint Booking System WordPress plugin versions prior to 2.9.9.6.10 Description Lack of server-side validation for the booking price allows unauthenticated users to create bookings at an arbitrary price, including zero. By selecting a specif...
CVE-2025-53545
Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service SaaS. Users can circumvent 2FA login for users due to a lack of server side validation for the same. This vulnerability is fixed in commit...
CVE-2025-25497: Client-Side Enforcement of Server-Side Security
An issue in account management interface in Netsweeper Server v.8.2.6 and earlier fixed in v.8.2.7 allows unauthorized changes to the "Account Owner" field due to client-side-only restrictions and a lack of server-side validation. This vulnerability enables account ownership reassignment to or aw...
PT-2025-10002
Name of the Vulnerable Software and Affected Versions Netsweeper Server versions prior to 8.2.7 Description The issue in the account management interface allows unauthorized changes to the Account Owner field due to client-side-only restrictions and a lack of server-side validation. This enables...