Lucene search
+L

7715 matches found

osv_cve
osv_cve
•added 2026/09/13 1:30 p.m.•13 views

CVE-2026-90524 jaychouchannel Tourism-Management-System Update Endpoint missing authentication

A security flaw has been discovered in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The impacted element is an unknown function of the component Update Endpoint. Performing a manipulation results in missing authentication. The attack may be initiated...

6.9CVSS5.1AI score
SaveExploits0References9
Vulnrichment
Vulnrichment
•added 2026/09/13 1:30 p.m.•22 views

CVE-2026-90524 jaychouchannel Tourism-Management-System Update Endpoint missing authentication

A security flaw has been discovered in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The impacted element is an unknown function of the component Update Endpoint. Performing a manipulation results in missing authentication. The attack may be initiated...

7.5CVSS6.5AI score0.00693EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/09/13 1:30 p.m.•65 views

CVE-2026-90524 jaychouchannel Tourism-Management-System Update Endpoint missing authentication

A security flaw has been discovered in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The impacted element is an unknown function of the component Update Endpoint. Performing a manipulation results in missing authentication. The attack may be initiated...

7.5CVSS0.00693EPSS
SaveExploits0References7
CVE
CVE
•added 2026/09/13 1:30 p.m.•56 views

CVE-2026-90524

jaychouchannel Tourism-Management-System contains a missing authentication flaw in the Update Endpoint component, allowing a remote unauthenticated attacker to manipulate an unknown function. The flaw was tracked in GitHub issue #11 and patched in commit 84d8ec3 . A proof-of-concept exploit has b...

7.5CVSS6.5AI score0.00693EPSS
SaveExploits0References7
NVD
NVD
•added 2026/09/13 11:17 a.m.•26 views

CVE-2026-90513

A flaw has been found in simalexan api-lambda-send-email-ses up to bda6869aa81371d1e872242e74fe7d953edb818d. This issue affects the function SES.sendEmail of the file template.yml of the component API Gateway Endpoint. This manipulation of the argument...

6.9CVSS0.00758EPSS
SaveExploits0References6
Mend
Mend
•added 2026/09/13 10:45 a.m.•13 views

CVE-2026-90513

A flaw has been found in simalexan api-lambda-send-email-ses up to bda6869aa81371d1e872242e74fe7d953edb818d. This issue affects the function SES.sendEmail of the file template.yml of the component API Gateway Endpoint. This manipulation of the argument...

6.9CVSS6AI score0.00758EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/13 10:45 a.m.•22 views

EUVD-2026-76985

A flaw has been found in simalexan api-lambda-send-email-ses up to bda6869aa81371d1e872242e74fe7d953edb818d. This issue affects the function SES.sendEmail of the file template.yml of the component API Gateway Endpoint. This manipulation of the argument...

6.9CVSS6AI score0.00758EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/13 10:45 a.m.•53 views

CVE-2026-90513 simalexan api-lambda-send-email-ses API Gateway Endpoint template.yml SES.sendEmail missing authentication

A flaw has been found in simalexan api-lambda-send-email-ses up to bda6869aa81371d1e872242e74fe7d953edb818d. This issue affects the function SES.sendEmail of the file template.yml of the component API Gateway Endpoint. This manipulation of the argument...

6.9CVSS0.00758EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/09/13 10:45 a.m.•21 views

CVE-2026-90513 simalexan api-lambda-send-email-ses API Gateway Endpoint template.yml SES.sendEmail missing authentication

A flaw has been found in simalexan api-lambda-send-email-ses up to bda6869aa81371d1e872242e74fe7d953edb818d. This issue affects the function SES.sendEmail of the file template.yml of the component API Gateway Endpoint. This manipulation of the argument...

6.9CVSS5.2AI score
SaveExploits0References8
CVE
CVE
•added 2026/09/13 10:45 a.m.•27 views

CVE-2026-90513

CVE-2026-90513 affects simalexan api-lambda-send-email-ses (up to commit bda6869aa81371d1e872242e74fe7d953edb818d ). The flaw resides in the SES.sendEmail function within the API Gateway Endpoint component (file template.yml ), where a missing authentication mechanism allows remote manipulation o...

6.9CVSS6AI score0.00758EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/13 10:45 a.m.•14 views

CVE-2026-90513 simalexan api-lambda-send-email-ses API Gateway Endpoint template.yml SES.sendEmail missing authentication

A flaw has been found in simalexan api-lambda-send-email-ses up to bda6869aa81371d1e872242e74fe7d953edb818d. This issue affects the function SES.sendEmail of the file template.yml of the component API Gateway Endpoint. This manipulation of the argument...

6.9CVSS6AI score0.00758EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/13 10:16 a.m.•23 views

CVE-2026-90504

A vulnerability has been found in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. The impacted element is the function authorized. The manipulation of the argument SECRETKEY leads to missing authentication. The attack can be initiated remotely. The exploit has been disclos...

7.5CVSS0.00654EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/13 8:45 a.m.•54 views

CVE-2026-90504 vvbbnn00 WARP-Clash-API authorized missing authentication

A vulnerability has been found in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. The impacted element is the function authorized. The manipulation of the argument SECRETKEY leads to missing authentication. The attack can be initiated remotely. The exploit has been disclos...

7.5CVSS0.00654EPSS
SaveExploits0References5
Mend
Mend
•added 2026/09/13 8:45 a.m.•8 views

CVE-2026-90504

A vulnerability has been found in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. The impacted element is the function authorized. The manipulation of the argument SECRETKEY leads to missing authentication. The attack can be initiated remotely. The exploit has been disclos...

7.5CVSS6.8AI score0.00654EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/13 8:45 a.m.•21 views

EUVD-2026-76977

A vulnerability has been found in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. The impacted element is the function authorized. The manipulation of the argument SECRETKEY leads to missing authentication. The attack can be initiated remotely. The exploit has been disclos...

7.5CVSS6.8AI score0.00654EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/13 8:45 a.m.•16 views

CVE-2026-90504 vvbbnn00 WARP-Clash-API authorized missing authentication

A vulnerability has been found in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. The impacted element is the function authorized. The manipulation of the argument SECRETKEY leads to missing authentication. The attack can be initiated remotely. The exploit has been disclos...

7.5CVSS6.8AI score0.00654EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/13 8:45 a.m.•60 views

CVE-2026-90504

CVE-2026-90504 affects the vvbbnn00 WARP-Clash-API project, specifically the authorized function , where manipulation of the SECRET_KEY argument results in missing authentication . The vulnerability is exploitable remotely with no privileges or user interaction required, yielding low impact on co...

7.5CVSS6.8AI score0.00654EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/13 12:00 a.m.•11 views

CVE-2026-90579: Missing Authentication for Critical Function

A vulnerability has been found in cheshire-cat-ai Cheshire Cat AI up to 1.9.2. This affects the function authorizehttpkey of the file core/cat/factory/customauthhandler.py. The manipulation of the argument userid leads to missing authentication. The attack may be initiated remotely. The exploit h...

7.5CVSS6.8AI score0.00654EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/13 12:00 a.m.•14 views

CVE-2026-90524: Missing Authentication for Critical Function

A security flaw has been discovered in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The impacted element is an unknown function of the component Update Endpoint. Performing a manipulation results in missing authentication. The attack may be initiated...

7.5CVSS6.5AI score0.00693EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/13 12:00 a.m.•13 views

CVE-2026-90513: Missing Authentication for Critical Function

A flaw has been found in simalexan api-lambda-send-email-ses up to bda6869aa81371d1e872242e74fe7d953edb818d. This issue affects the function SES.sendEmail of the file template.yml of the component API Gateway Endpoint. This manipulation of the argument...

6.9CVSS6AI score0.00758EPSS
SaveExploits0References3
Rows per page
Query Builder