EUVD-2026-29885

ChurchCRM is an open-source church management system. Prior to 7.3.2, top-level cross-site GET navigation from an attacker-controlled page to FundRaiserDelete.php, PropertyTypeDelete.php, or NoteDelete.php causes a logged-in ChurchCRM user with the relevant role to silently delete records,...

CVE-2026-44548

ChurchCRM is an open-source church management system. Prior to 7.3.2, top-level cross-site GET navigation from an attacker-controlled page to FundRaiserDelete.php, PropertyTypeDelete.php, or NoteDelete.php causes a logged-in ChurchCRM user with the relevant role to silently delete records,...

CVE-2026-44548

CVE-2026-44548 affects ChurchCRM up to version 7.3.1. A top-level cross-site GET navigation from an attacker-controlled page to FundRaiserDelete.php, PropertyTypeDelete.php, or NoteDelete.php can cause a logged-in user with the relevant role to silently delete records, including cascaded property...

MINI-J349-2WC9-8PXF

Bulletin has no description...

PT-2026-40464

Name of the Vulnerable Software and Affected Versions ChurchCRM versions prior to 7.3.2 Description Top-level cross-site GET navigation from an attacker-controlled page to the endpoints "FundRaiserDelete.php", "PropertyTypeDelete.php", or "NoteDelete.php" allows a logged-in user with the...

@tanstack/solid-start (>=1.121.0-alpha.28 <=1.167.62) potentially affected by CVE-2026-45321 via @tanstack/solid-start-client (>=1.121.0-alpha.28 <=1.166.5)

@tanstack/solid-start-client NPM version =1.121.0-alpha.28, =1.121.0-alpha.28, =1.167.62 Source cves: CVE-2026-45321 Source advisory: SNYK:JS-TANSTACKSOLIDSTARTCLIENT-16640233...

CVE-2026-42291

SysReptor is a fully customizable pentest reporting platform. From version 2026.4 to before version 2026.27, the endpoints for reading and creating sharing links for personal notes is not properly authorized. This allows authenticated attackers who obtain the note ID of victim users to list and...

MINI-F752-X5C6-27P7

Bulletin has no description...

MINI-433P-7P64-4WRW

Bulletin has no description...

MINI-82CF-PQ8C-HCFJ

Bulletin has no description...

MINI-FM2V-6VX6-5PMH

Bulletin has no description...

MINI-VP6V-M57H-MGFX

Bulletin has no description...

MINI-JRFW-P5PV-FXM4

Bulletin has no description...

MINI-FG69-7982-V5GG

Bulletin has no description...

MINI-4F7X-C7P5-Q47M

Bulletin has no description...

MINI-JFQ6-MVW7-MCV9

Bulletin has no description...

MINI-523C-G845-5J2P

Bulletin has no description...

MINI-G562-5V3W-P593

Bulletin has no description...

MINI-3MVJ-4763-5VVC

Bulletin has no description...

MINI-WW26-F2C9-FR9R

Bulletin has no description...