215 matches found
raccoon
Raccoon: Salesforce オブジェクトアクセス監査ツール NCC Group Plc によりオープンソースとして公開 - https://www.nccgroup.com/ 開発: Jerome Smith @exploresecurity（協力: Viktor Gazdag @wucpi） https://www.github.com/nccgroup/raccoon AGPL のもとで公開 - 詳細は LICENSE を参照。 説明...
CVE-2026-81916 Incorrect Authorization in the Concrete CMS Express Entries Dashboard below version 9.5.3 Allows Entry Creation in an Unauthorized Object
Concrete CMS before 9.5.3 evaluated the authorization check for an Express entry submission against the entity of the posted form rather than the entity identified by the dashboard route. As a result, a user permitted to add entries to one Express object could create entries in a different Expres...
CVE-2026-78278
Subscriber Insecure Direct Object References IDOR in Fluent Boards Pro = 2.0.11 versions...
Arbitrary Code Injection
Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Arbitrary Code Injection through the handleException function, which fails to sanitize the .cause property of errors. An attacker can gain access to...
Arbitrary Code Injection
Overview org.webjars.npm:vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Arbitrary Code Injection through the handleException function, which fails to sanitize the .cause property of errors. An attacker can...
EUVD-2026-58380
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain unauthorized access to arbitrary objects due to a path traversal vulnerability...
EUVD-2026-57227
RustFS is a distributed object storage system built in Rust. RustFS authorizes explicit versionId reads in GetObject, CopyObject sources, and UploadPartCopy sources with s3:GetObject instead of s3:GetObjectVersion, allowing principals without historical-version permission to disclose known...
CVE-2026-68267
The CVE-2026-68267 entry concerns the Linux kernel DRM/xe/rtp component. The issue is that OA registers could be whitelisted by default after probe, GT reset, resume, and engine reset, which is a security violation. The root cause is unconditional whitelisting of OA registers. The fix (cherry-pic...
Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability
A vulnerability in the Blocks Extensible Exchange Protocol BEEP feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper handling when parsing a specific BEEP SOAP...
CVE-2026-71191
In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz- headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, causing Swift to perform a server-side copy...
Linux Distros Unpatched Vulnerability : CVE-2026-71192
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers X-Copy-From, X-Copy-From-Account from S3 API requests whe...
CVE-2026-15255 RegistrationMagic < 6.0.9.4 - Unauthenticated Form Submission Disclosure via IDOR
The RegistrationMagic WordPress plugin before 6.0.9.4 does not properly validate that a one-time password presented in a cookie belongs to the identity being requested before returning front-end form submissions, allowing unauthenticated attackers to read other users' form submission data,...
The vulnerability of the Apache Camel JIRA Java framework component allows a malicious individual to gain unauthorized access to read, modify, add, and delete objects.
The vulnerability of the Apache Camel JIRA Java framework involves bypassing authentication using a user-controlled key. Exploiting this vulnerability can allow an intruder to gain unauthorized access to read, modify, add, and delete objects in the target JIRA system...
CVE-2026-65708
sysPass through version 3.2.11 contains an insecure direct object reference vulnerability that allows any authenticated attacker to access account file attachments belonging to accounts they do not have ACL permissions for by exploiting missing authorization checks in AccountFileController...
Plone 4.x < 4.0.10 / 4.1.x < 4.1.1 Multiple Vulnerabilities (HF 20110928)
The version of Plone installed on the remote host is 4.x prior to 4.0.10 or 4.1.x prior to 4.1.1. It is, therefore, affected by the following vulnerabilities: - Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used allows remote attackers to execute arbitrary commands via vectors related t...
CVE-2026-60200
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise...
CVE-2026-47399
PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Prior to version 0.1.4, the workspace-scoped REST routes contain a systemic object-level authorization flaw that allows an authenticated user from one workspace to access, modify, and delete objects belonging to...
CVE-2026-47399
Summary of vulnerability (CVE-2026-47399): PraisonAI Platform prior to version 0.1.4 exposes a systemic object-level authorization flaw where workspace-scoped REST routes verify only that a caller is in the URL workspace, but the service layer resolves objects (e.g., agents, projects, issues, com...
PT-2026-60702
The Ninja Forms - Excel Export plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.3.6 via the 'spreadsheet export form id' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers,...