127 matches found
CVE-2026-86753
snipe-it (asset management application by grokability) versions before 8.7.0 contain a business logic bypass in the POST /account/request/asset_model/{modelId} endpoint. The root cause is a failure to validate the requestable flag for asset models, allowing authenticated users to bypass administr...
CVE-2026-86753 snipe-it before 8.7.0 Business Logic Bypass via asset_model endpoint
snipe-it versions before 8.7.0 fail to validate the requestable flag for asset models in the POST /account/request/assetmodel/modelId endpoint. Authenticated users can bypass administrative restrictions and create checkout requests for non-requestable asset models by submitting requests directly ...
CVE-2026-86753 snipe-it before 8.7.0 Business Logic Bypass via asset_model endpoint
snipe-it versions before 8.7.0 fail to validate the requestable flag for asset models in the POST /account/request/assetmodel/modelId endpoint. Authenticated users can bypass administrative restrictions and create checkout requests for non-requestable asset models by submitting requests directly ...
CVE-2024-53677
POC 출처 https://y4tacker.github.io/2024/12/16/year/2024/12/Apache-Struts2-%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E9%80%BB%E8%BE%91%E7%BB%95%E8%BF%87-CVE-2024-53677-S2-067/ RCE 조건 1. 위험 유형 확장자에 대한 제한 없음 2. 파일 업로드 시 업로드 매개변수에서 파일 이름 획득 따라서 완화 수정도 간단합니다. 확장자를 제한하고, 사용자 정의 무작위 파일 이름을 사용하는 등. 스크립트 사용...
CVE-2020-10130
CVE-2020-10130 - V-9.1 이전의 SearchBlox 제품은 비즈니스 로직 우회에 취약합니다 제품 설명: SearchBlox는 복잡한 조직을 위한 엔터프라이즈 검색을 단순화합니다. SearchBlox의 직관적이고 지능적인 도구는 즉시 사용 가능한 설정, 안전한 암호화, 낮은 총 소유 비용을 제공합니다. AI 기반 솔루션은 검색 여정의 각 단계를 최적화하여 참여도를 크게 향상시킵니다. SearchBlox는 금융 서비스, 의료, 정부 분야 리더들에게 쉬운 선택입니다. 설명: 버전 9.1 이전의 SearchBlox는...
EUVD-2026-58189
Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the public extend utility in ui/src/utils/extend/extend.js recursively copied attacker-controlled object keys during extendtrue, target, source deep merges without rejecting an own proto propert...
PT-2026-71723
Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the public extend utility in ui/src/utils/extend/extend.js recursively copied attacker-controlled object keys during extendtrue, target, source deep merges without rejecting an own proto propert...
CVE-2024-27253
IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated user to bypass security logic to perform unauthorized activities...
CVE-2024-27253 IBM Engineering Requirements Management DOORS Next is impacted by vulnerability in Reviews delete request
IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated user to bypass security logic to perform unauthorized activities...
PT-2026-71352
Name of the Vulnerable Software and Affected Versions IBM DOORS Next versions 7.0.3 through 7.0.3 Interim Fix 018 Description An authenticated user can bypass security logic to perform unauthorized activities. Recommendations Update IBM DOORS Next to a version later than 7.0.3 Interim Fix 018...
CVE-2026-13724
Technical details about CVE-2026-13724 are not publicly available in the provided documents. The description mentions a client-side bypass and input manipulation in Gobito's Corporate Training Management System, but no concrete affected versions or remediation are disclosed. Monitor for updates.
SUSE-SU-2026:22160-1 Security update for unbound
This update for unbound fixes the following issues - CVE-2026-32792: Packet of death with DNSCrypt bsc1265583. - CVE-2026-33278: Possible remote code execution during DNSSEC validation bsc1265587. - CVE-2026-40622: "Ghost domain name" variant bsc1265581. - CVE-2026-41292: Parsing a long list of...
CVE-2026-41986
Logic bypass vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-41986
Logic bypass vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-41986
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2026-41986
Logic bypass vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability...
EUVD-2026-35358
Logic bypass vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-41986
Logic bypass vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system developed by Chinese company Huawei. It is a full-scenario distributed operating system based on a microkernel architecture. There is a security vulnerability in Huawei HarmonyOS, which stems from a logic bypass in the file system. This vulnerability may...