273 matches found
EUVD-2026-119402
Vikunja before 2.7.1 contains an information disclosure vulnerability that allows authenticated users to determine whether private teams exist by calling the team member self-removal endpoint. Attackers can send DELETE requests to /teams/id/members/own username for arbitrary team ids and use the...
CVE-2026-123517
Vikunja versions prior to 2.7.1 are vulnerable to an information disclosure vulnerability via the team member self-removal endpoint. Authenticated users can send DELETE requests to /teams/{id}/members/{own username} for arbitrary team IDs. By analyzing the distinguishable responses, an attacker c...
PT-2026-139798
Vikunja before 2.7.1 contains an information disclosure vulnerability that allows authenticated users to determine whether private teams exist by calling the team member self-removal endpoint. Attackers can send DELETE requests to /teams/id/members/own username for arbitrary team ids and use the...
CVE-2026-123517: go-vikunja vikunja: Vikunja before 2.7.1 contains an information disclosure vulnerability that allows authenticated users to determine…
Vikunja before 2.7.1 contains an information disclosure vulnerability that allows authenticated users to determine whether private teams exist by calling the team member self-removal endpoint. Attackers can send DELETE requests to /teams/id/members/own username for arbitrary team ids and use the...
concealed_position
Concealed Position Concealed Position is a local privilege escalation attack against Windows using the concept of "Bring Your Own Vulnerability". Specifically, Concealed Position CP uses the as designed package point and print logic in Windows that allows a low privilege user to stage and install...
CVE-2026-118555
Incorrect Authorization vulnerability in Drupal Commerce License allows Forceful Browsing. This issue affects Commerce License versions: from 0.0.0 to 3.1.1...
DRUPAL-CONTRIB-2026-260
This module enables you to sell licenses granting access to resources, such as user roles, files, or protected content. The module doesn't sufficiently restrict access to license fields for users with the "update own commerce\license" permission. A license owner can change the rights granted by...
Commerce License - Moderately critical - Access bypass - SA-CONTRIB-2026-260
This module enables you to sell licenses granting access to resources, such as user roles, files, or protected content. The module doesn't sufficiently restrict access to license fields for users with the "update own commercelicense" permission. A license owner can change the rights granted by...
PT-2026-130584
This module enables you to sell licenses granting access to resources, such as user roles, files, or protected content. The module doesn't sufficiently restrict access to license fields for users with the "update own commerce license" permission. A license owner can change the rights granted by...
CVE-2026-61844
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.18.0, FileRise flattens logical folder paths into metadata filenames by replacing separators and spaces with hyphens, so distinct folders such as team/docs and team-docs can share on...
PT-2026-114235
Name of the Vulnerable Software and Affected Versions FileRise versions prior to 3.18.0 Description FileRise flattens logical folder paths into metadata filenames by replacing separators and spaces with hyphens. This process allows distinct folders, such as team/docs and team-docs, to share a...
CVE-2026-61844: Use of Incorrectly-Resolved Name or Reference
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.18.0, FileRise flattens logical folder paths into metadata filenames by replacing separators and spaces with hyphens, so distinct folders such as team/docs and team-docs can share on...
Exploit for CVE-2026-106445
CVE-2026-106445 — Handlebars.js RCE constructor own-property...
NPM: Handlebars: JavaScript Injection via Own Property Check Bypass
NPM: Handlebars: JavaScript Injection via Own Property Check Bypass vulnerability discovered by ? in WordPress Npm handlebars versions = 3.0.0, = 4.7.9...
CVE-2026-106445 Handlebars: JavaScript Injection via Own Property Check Bypass
Handlebars provides the power necessary to let users build semantic templates. From 3.0.0 until 4.7.10, Handlebars lookupProperty returns Function.prototype.constructor before applying the prototype-access deny list because constructor is an own property of Function.prototype. When an attacker ca...
CVE-2026-106445
The Handlebars template engine is vulnerable to JavaScript Injection in versions 4.0.0 through 4.7.10 . The root cause is an own property check bypass in the lookupProperty function, which returns Function.prototype.constructor before applying the prototype-access deny list. If an attacker can re...
CVE-2026-106445 Handlebars: JavaScript Injection via Own Property Check Bypass
Handlebars provides the power necessary to let users build semantic templates. From 3.0.0 until 4.7.10, Handlebars lookupProperty returns Function.prototype.constructor before applying the prototype-access deny list because constructor is an own property of Function.prototype. When an attacker ca...
PT-2026-110330
This is another instance of https://github.com/sveltejs/devalue/security/advisories/GHSA-mwv9-gp5h-frr4, where some payloads could cause parse to create objects with a proto own property. This on its own is not enough to cause prototype pollution, and indeed this is actually how JSON.parse works,...
CVE-2026-91921 Cross-Site Scripting (XSS) in 1millionbot’s AI chatbot platform
Cross-Site Scripting XSS vulnerability due to inadequate input sanitisation in the client-side rendering engine of the 1millionbot AI Chat Platform. An unauthenticated remote user could cause external hyperlinks to be rendered in the web interface by sending messages containing Markdown syntax an...