CVE-2026-57570 backpack/crud: HasMany/MorphMany relation fields allow cross-tenant record re-parenting (IDOR) via attachManyRelation

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.15 and 7.0.47, HasMany and MorphMany handling through attachManyRelation during CRUD create and update...

CVE-2026-57570

backpack/crud (a Laravel Backpack CRUD package) versions 6.0.0 through 6.8.15 and 7.0.47 contain a Missing Authorization flaw (CWE-862) in how HasMany and MorphMany relationship fields are handled during CRUD create and update operations. The attachManyRelation logic accepted submitted child prim...

CVE-2026-57570 backpack/crud: HasMany/MorphMany relation fields allow cross-tenant record re-parenting (IDOR) via attachManyRelation

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.15 and 7.0.47, HasMany and MorphMany handling through attachManyRelation during CRUD create and update...

GHSA-575R-357H-FHCH Snipe-IT vulnerable to cross-company asset maintenance re-parenting via API update

Impact The API endpoint for updating asset maintenance records allows an authorized user to change the assetid of an existing maintenance record to an asset outside their company scope. In a Full Multiple Company Support / multi-company deployment, this allows a user from Company A to attach or...

Snipe-IT vulnerable to cross-company asset maintenance re-parenting via API update

Impact The API endpoint for updating asset maintenance records allows an authorized user to change the assetid of an existing maintenance record to an asset outside their company scope. In a Full Multiple Company Support / multi-company deployment, this allows a user from Company A to attach or...

CVE-2026-4242: Plaintext Storage of a Password

A security flaw has been discovered in BabyChakra Pregnancy & Parenting App up to 5.4.3.0 on Android. This affects an unknown function of the file file app/babychakra/babychakra/Configuration.java of the component app.babychakra.babychakra. Performing a manipulation of the argument SEGMENTWRITEKE...

SUSE SLES15: libQt53DAnimation-devel / libQt53DAnimation5 / libQt53DCore-devel / etc (SUSE-SU-2024:2975-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2975-1 advisory. - CVE-2024-40724: Fixed heap-based buffer overflow in the PLY importer class in assimp bsc1228204 Other fixes: - Check for a nullptr returne...

How to Teach Your Child Coding: A Gift for Their Digital Future

By Owais Sultan Let's code, kids! This is a post from HackRead.com Read the original post: How to Teach Your Child Coding: A Gift for Their Digital Future...

parenting-chart.com Cross Site Scripting vulnerability OBB-1303621

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Working From Home. So Far, So Much Learned.

Hello all! I'm Nicole Fitzpatrick, Deputy General Counsel at Akamai. I also sit on the D&I Executive Steering Committee. Normally I'd be in our Cambridge office about now, but like so many of us I am working from home and writing this surrounded by four kids, the dog and my husband not written in...

parenting.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1074441 Security Researcher kun-fly Helped patch 667 vulnerabilities Received 7 Coordinated Disclosure badges Received 43 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting parenting.com website and i...

Parenting in the Digital World: a review

Before I became a new mum not so long ago, I did the best I could to prepare myself to take care of my little one by reading a lot books. From learning how to discern possible meanings behind baby's various cries to finding out what you can and can't feed your baby once they begin eating solids. ...

Yuanzi Parenting AliCloud OSS credentials have information leakage vulnerability

Yuanzi Parenting APP is a parenting mobile application for parents of 1 to 6 year old babies, which can be an interactive sharing platform for the exchange of parenting knowledge and experience. Aliyun Object Storage Service OSS is a massive, secure and highly reliable cloud storage service...

Friends in War Make or Break SQL Injection Vulnerability

Make or Break is a is a parenting blog. Friends in War Make or Break suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information such as data...

parenting.com.tw XSS vulnerability

Vulnerable URL: https://www.parenting.com.tw/search/?keyword=keyword%3C%2Fscript%3E%22%3E%3Cscript%3Eprompt%28%2FOPENBUGBOUNTY%2F%29%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

Pregnany & Parenting - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Pregnany & Parenting published at the 'play' market has multiple vulnerabilities...