7 matches found
CVE-2026-93366 Bludit CMS 3.22.0 Authorization Bypass via list-images/delete-image AJAX Endpoints
Bludit CMS through 3.22.0 contains an authorization bypass vulnerability that allows authenticated users with the Author role to enumerate and delete media files belonging to pages owned by other users, including administrators, by supplying arbitrary uuid parameters to unprotected AJAX endpoints...
EUVD-2026-87211
Bludit CMS through 3.22.0 contains an authorization bypass vulnerability that allows authenticated users with the Author role to enumerate and delete media files belonging to pages owned by other users, including administrators, by supplying arbitrary uuid parameters to unprotected AJAX endpoints...
CVE-2026-93366 Bludit CMS 3.22.0 Authorization Bypass via list-images/delete-image AJAX Endpoints
Bludit CMS through 3.22.0 contains an authorization bypass vulnerability that allows authenticated users with the Author role to enumerate and delete media files belonging to pages owned by other users, including administrators, by supplying arbitrary uuid parameters to unprotected AJAX endpoints...
CVE-2026-93366 Bludit CMS 3.22.0 Authorization Bypass via list-images/delete-image AJAX Endpoints
Bludit CMS through 3.22.0 contains an authorization bypass vulnerability that allows authenticated users with the Author role to enumerate and delete media files belonging to pages owned by other users, including administrators, by supplying arbitrary uuid parameters to unprotected AJAX endpoints...
EUVD-2006-2015
Malware in sbrugna...
MAL-2022-4322 Malicious code in list-images (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edf3b4ffccf50da436b9f927419f8d777691cbc30ad3918981b083e2e56b3bf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in list-images (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edf3b4ffccf50da436b9f927419f8d777691cbc30ad3918981b083e2e56b3bf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...