85906 matches found
MINI-VWJ9-VCQ7-VJC6
Bulletin has no description...
MINI-CPG8-9VCG-G22P
Bulletin has no description...
MINI-PGM5-X577-4M6X
Bulletin has no description...
MINI-X5FG-V63F-5JR9
Bulletin has no description...
MINI-J6V2-PQ45-66QX
Bulletin has no description...
MINI-W3WH-3CPH-RR34
Bulletin has no description...
MINI-6GFP-2FVM-4XVV
Bulletin has no description...
MINI-924M-863H-MG3H
Bulletin has no description...
MINI-HW79-8WHX-RMMJ
Bulletin has no description...
MINI-86WH-VC2W-W49P
Bulletin has no description...
MINI-P862-RQ23-C5M6
Bulletin has no description...
MINI-JF3R-23G7-5RPJ
Bulletin has no description...
MINI-6CCP-79FH-Q9Q6
Bulletin has no description...
CVE-2026-59234 Authorization Bypass Through User-Controlled Key in Prospero Flow CRM calendar event deletion
Authorization Bypass Through User-Controlled Key CWE-639 in CalendarDeleteEventController app/Http/Controllers/Calendar/CalendarDeleteEventController.php, exposed at GET /calendar/event/delete/id, in Prospero Flow CRM before 5.5.3 allows a remote, authenticated attacker to delete arbitrary calend...
CVE-2026-59234
This CVE affects Prospero Flow CRM prior to version 5.5.3. The vulnerability lies in the CalendarDeleteEventController (app/Http/Controllers/Calendar/CalendarDeleteEventController.php), exposed at the GET endpoint /calendar/event/delete/{id} . The delete logic uses Calendar::find($id)->delete(...
Missing Origin Validation in WebSockets
Overview @theia/terminal is a Theia - Terminal Extension Affected versions of this package are vulnerable to Missing Origin Validation in WebSockets via the shell-terminal and terminals/:id WebSocket endpoints when origin validation is bypassed due to missing or manipulated headers. An attacker c...
Missing Origin Validation in WebSockets
Overview @theia/core is a the main extension for all Theia-based applications, and provides the main framework for all dependent extensions. Affected versions of this package are vulnerable to Missing Origin Validation in WebSockets via the shell-terminal and terminals/:id WebSocket endpoints whe...
ECHO-DCB3-F5F0-1F95
Bulletin has no description...