CVE-2026-24136-Lab

CVE-2026-24136 - Saleor GraphQL IDOR / 未授权PII窃取 概述 字段| 详情 ---|--- CVE ID| CVE-2026-24136 漏洞类型| IDOR - 通过用户控制密钥绕过授权 CWE-639 软件| Saleor 电子商务平台 受影响版本| 3.2.0 - 3.20.109 · 3.21.0 - 3.21.44 · 3.22.0 - 3.22.28 已修补版本| 3.20.110 · 3.21.45 · 3.22.29 CVSS 3.1| 7.5 高 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS...

CVE-2026-24136 Saleor has an Insecure Direct Object Reference (IDOR) in GraphQL API

Saleor is an e-commerce platform. Versions 3.2.0 through 3.20.109, 3.21.0-a.0 through 3.21.44 and 3.22.0-a.0 through 3.22.28 have a n Insecure Direct Object Reference IDOR vulnerability that allows unauthenticated actors to extract sensitive information in plain text. Orders created before Saleor...

EUVD-2016-1328

Malware in sbrugna...

Design/Logic Flaw

An issue was discovered on BLU R1 HD devices with Shanghai Adups software. The two package names involved in the exfiltration are com.adups.fota and com.adups.fota.sysoper. In the com.adups.fota.sysoper app's AndroidManifest.xml file, it sets the android:sharedUserId attribute to a value of...