Authorization Bypass Through User-Controlled Key

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the printassigned and printallassigned endpoints due to missing per-model authorization checks. An attacker can retrieve...

CVE-2026-86761

snipe-it versions before 8.7.0 contain an authorization bypass in the location print endpoints (printassigned and printallassigned ). The root cause is a failure to enforce per-model authorization checks, allowing any authenticated user with location view permission to retrieve associated users, ...

CVE-2017-20263

Joomla! Component FocalPoint Pro/Free 1.2.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to index.php with option=comfocalpoint, view=location, a...

CVE-2017-20263

Joomla! Component FocalPoint Pro/Free 1.2.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to index.php with option=comfocalpoint, view=location, a...

CVE-2017-20263 Joomla! FocalPoint Pro Free 1.2.3 SQL Injection via location

Joomla! Component FocalPoint Pro/Free 1.2.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to index.php with option=comfocalpoint, view=location, a...

CVE-2017-20263 Joomla! FocalPoint Pro Free 1.2.3 SQL Injection via location

Joomla! Component FocalPoint Pro/Free 1.2.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to index.php with option=comfocalpoint, view=location, a...

CVE-2017-20263

CVE-2017-20263 affects Joomla! FocalPoint Pro/Free 1.2.3. An SQL injection vulnerability exists in the location view when processing the id parameter, allowing unauthenticated attackers to inject SQL via HTTP GET to index.php with option=com_focalpoint, view=location, and crafted id values to exf...

CVE-2025-3859

Websites directing users to long URLs that caused eliding to occur in the location view could leverage the truncating behavior to potentially trick users into thinking they were on a different webpage This vulnerability affects Focus 138...

User Interface (UI) Misrepresentation of Critical Information

Overview mozilla-mobile/firefox-ios is a The source code and project files for the Firefox Focus application on the iOS platform. Affected versions of this package are vulnerable to User Interface UI Misrepresentation of Critical Information due to the truncating behavior in the location view. An...

CVE-2025-3859: URL Redirection to Untrusted Site

Websites directing users to long URLs that caused eliding to occur in the location view could leverage the truncating behavior to potentially trick users into thinking they were on a different webpage. This vulnerability was fixed in Focus 138...

PT-2025-5280 · Apple · Apple Macos +1

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.3 macOS versions prior to 14.7.3 macOS versions prior to 15.3 iPadOS versions prior to 17.7.4 Description: The issue is related to insufficient access control in macOS and iPadOS, allowing a remote attacker to...