CVE-2026-105272

The GROWI platform contains an authorization bypass vulnerability within its page viewing and commenting functionality. This flaw stems from the improper use of a user-controlled key , which allows an authenticated attacker to access the contents and comments of pages for which they lack the nece...

EUVD-2026-111555

GROWI contains an authorization bypass vulnerability in its page viewing and commenting functionality due to improper use of a user-controlled key. By exploiting this vulnerability, an authenticated attacker may obtain the contents and comments of pages without the required read permission...

Rapid7 InsightVM code-related vulnerabilities

Rapid7 InsightVM is a vulnerability scanning and management application from Rapid7 USA. A security vulnerability exists in Rapid7 InsightVM that stems from the presence of an information disclosure issue that allows an attacker to use the Inspect Element browser feature to delete the login panel...