CVE-2026-65055 Taiga taiga-back Private Project Member Roster Disclosure via Unauthenticated filters_data Endpoints

Taiga 6.10.1 contains a missing authorization vulnerability that allows unauthenticated attackers to disclose the full member roster and internal workflow configuration of any private project by supplying a project ID to the filtersdata API endpoints on UserStory, Task, Issue, and Epic viewsets...

Nextcloud: Chat room member disclosure via autocomplete API

It was possible to find out who is in a Spreed chat room using the autocomplete API, even if the person is not a member of the room. This vulnerability could have been exploited to gain information about the members of a chat room for malicious purposes...

CVE-2021-39876

Removed by vendor...

SS-2018-010: Member disclosure in login form

More info at https://www.silverstripe.org/download/security-releases/ss-2018-010/...

SS-2017-002: Member disclosure in login form

More info at https://www.silverstripe.org/download/security-releases/ss-2017-002/...

PHP-Fusion-6-01-18 (members.php) disclosure ways

Exploit for unknown platform in category web applications ================================================ PHP-fusion-6-01-18 members.php disclosure ways ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /...