Lucene search
+L

7 matches found

osv_cve
osv_cve
•added 2026/10/14 2:16 p.m.•22 views

CVE-2026-110621 Swetrix Cloud before 5.1.0 Missing Authorization via POST /project/organisation/:orgId

Swetrix Cloud before 5.1.0 contains a missing authorization vulnerability in ProjectController.addProject that allows authenticated users to hijack arbitrary projects by moving them into their own organisation. Attackers can create an organisation and add a victim project by its public tracking I...

8.7CVSS6AI score
SaveExploits0References8
Cvelist
Cvelist
•added 2026/10/14 2:16 p.m.•35 views

CVE-2026-110621 Swetrix Cloud before 5.1.0 Missing Authorization via POST /project/organisation/:orgId

Swetrix Cloud before 5.1.0 contains a missing authorization vulnerability in ProjectController.addProject that allows authenticated users to hijack arbitrary projects by moving them into their own organisation. Attackers can create an organisation and add a victim project by its public tracking I...

8.8CVSS0.00523EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/14 2:16 p.m.•15 views

CVE-2026-110621

Swetrix Cloud versions prior to 5.1.0 are affected by a missing authorization vulnerability in the ProjectController.addProject function. This flaw allows authenticated users to hijack arbitrary projects by moving them into their own organization using a public tracking ID. Successful exploitatio...

8.8CVSS5.9AI score0.00523EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/06 12:00 a.m.•11 views

CVE-2026-27603: Missing Authentication for Critical Function

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to version 4.8.4, the chart filter endpoint POST /project/:projectid/chart/:chartid/filter is missing both verifyToken and checkPermissions middleware, allowing...

8.7CVSS5.7AI score0.00437EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/10/02 12:00 a.m.•16 views

PT-2025-40337

Name of the Vulnerable Software and Affected Versions Ekushey CRM version 5.0 Description A stored Cross Site Scripting issue exists in Ekushey CRM version 5.0 due to insufficient validation of user-supplied data. The issue is located in the project bug creation functionality, accessible via the...

5.4CVSS6AI score0.00212EPSS
SaveExploits0References9
Packet Storm
Packet Storm
•added 2010/07/18 12:00 a.m.•52 views

Freelancers Marketplace Script Cross Site Scripting

Name : Freelancers Marketplace Script Persistent XSS Vulnerability Date : july 17,2010 Critical Level : HIGH vendor URL :http://www.guruscript.com/ google dork:Powered by Guruscript.com Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...

7.4AI score
SaveExploits0
zdt
zdt
•added 2010/07/17 12:00 a.m.•44 views

Freelancer Marketplace Script Upload Vulnerability

Exploit for php platform in category web applications ================================================== Freelancer Marketplace Script Upload Vulnerability ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...

7.1AI score
SaveExploits0
Rows per page
Query Builder