CVE-2025-8793

LitmusChaos Litmus up to 3.19.0 is affected by CVE-2025-8793. The vulnerability stems from manipulation of the projectID parameter, causing improper control of resource identifiers in an unknown functionality. It is exploitable remotely and has public PoCs; multiple sources (NVD/NVDC, Red Hat, Sn...

CVE-2025-8792

LitmusChaos (Litmus) up to version 3.19.0 is affected by a vulnerability described as a client‑side enforcement of server‑side security due to an issue in an unknown function. The vulnerability can be exploited remotely, and public exploitation has been disclosed. Multiple sources corroborate the...

CVE-2025-8791

CVE-2025-8791 affects LitmusChaos up to version 3.19.0. The vulnerability is an improper authorization flaw in the /auth/list_projects endpoint caused by manipulating the role parameter, enabling remote, unauthenticated-like actions with low privileges. Exploitation is possible and the exploit ha...

CVE-2025-8791 LitmusChaos Litmus list_projects improper authorization

A vulnerability was found in LitmusChaos Litmus up to 3.19.0. It has been rated as critical. This issue affects some unknown processing of the file /auth/listprojects. The manipulation of the argument role leads to improper authorization. The attack may be initiated remotely. The exploit has been...

CVE-2025-8795: Improper Access Control

A vulnerability, which was classified as critical, was found in LitmusChaos Litmus up to 3.19.0. This affects an unknown part of the file /auth/login. The manipulation of the argument projectID leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-8796: Missing Authorization

A vulnerability has been found in LitmusChaos Litmus up to 3.19.0 and classified as problematic. This vulnerability affects unknown code of the file /auth/deleteproject/ of the component Delete Request Handler. The manipulation of the argument projectID leads to missing authorization. The attack...

CVE-2025-8794: Authorization Bypass Through User-Controlled Key

A vulnerability, which was classified as problematic, has been found in LitmusChaos Litmus up to 3.19.0. Affected by this issue is some unknown functionality of the component LocalStorage Handler. The manipulation of the argument projectID leads to authorization bypass. Local access is required t...

CVE-2025-8792: Client-Side Enforcement of Server-Side Security

A vulnerability classified as problematic has been found in LitmusChaos Litmus up to 3.19.0. Affected is an unknown function. The manipulation leads to client-side enforcement of server-side security. It is possible to launch the attack remotely. The exploit has been disclosed to the public and m...

CVE-2025-8791: Improper Authorization

A vulnerability was found in LitmusChaos Litmus up to 3.19.0. It has been rated as critical. This issue affects some unknown processing of the file /auth/listprojects. The manipulation of the argument role leads to improper authorization. The attack may be initiated remotely. The exploit has been...

CVE-2025-8793: Improper Control of Resource Identifiers

A vulnerability classified as problematic was found in LitmusChaos Litmus up to 3.19.0. Affected by this vulnerability is an unknown functionality. The manipulation of the argument projectID leads to improper control of resource identifiers. The attack can be launched remotely. The exploit has be...

PT-2025-32468 · Unknown · Litmuschaos Litmus

Name of the Vulnerable Software and Affected Versions: LitmusChaos Litmus versions prior to 3.19.1 Description: A problematic issue exists in the LocalStorage Handler component of LitmusChaos Litmus. Manipulation of the projectID argument can lead to authorization bypass. Local access is required...

CVE-2025-8797: Incorrect Privilege Assignment

A vulnerability was found in LitmusChaos Litmus up to 3.19.0 and classified as critical. This issue affects some unknown processing of the component LocalStorage Handler. The manipulation leads to permission issues. The attack may be initiated remotely. The exploit has been disclosed to the publi...

Detecting Speculative Data Flow Vulnerabilities Using Weakest Precondition Reasoning

Speculative execution is a hardware optimisation technique where a processor, while waiting on the completion of a computation required for an instruction, continues to execute later instructions based on a predicted value of the pending computation. It came to the forefront of security research ...

[SECURITY] Fedora 19 Update: php-sabre-dav-1.8.9-1.fc19

What is SabreDAV SabreDAV allows you to easily add WebDAV support to a PHP application. SabreDAV is meant to cover the entire standard, and attempts to allow integration using an easy to understand API. Feature list: Fully WebDAV compliant Supports Windows XP, Windows Vista, Mac OS/X, DavFSv2,...