CVE-2026-32699 FacturaScripts unauthorized modification of immutable nick field via EditUser controller

FacturaScripts is an open source accounting and invoicing software. In versions 2025.92 and earlier, the application fails to validate the nick parameter during a POST request to the EditUser controller. Although the user interface prevents editing this field, a user can bypass this restriction b...

EUVD-2026-27438

FacturaScripts is an open source accounting and invoicing software. In versions 2025.92 and earlier, the application fails to validate the nick parameter during a POST request to the EditUser controller. Although the user interface prevents editing this field, a user can bypass this restriction b...

CVE-2026-32699

FacturaScripts (versions ≤ 2025.92) exposes a vulnerability in the EditUser endpoint where the nick field is not validated on POST, allowing an attacker to modify an immutable nickname by intercepting and altering form-data. The UI prevents editing this field, but a modified request can rename an...

CVE-2026-32699

FacturaScripts is an open source accounting and invoicing software. In versions 2025.92 and earlier, the application fails to validate the nick parameter during a POST request to the EditUser controller. Although the user interface prevents editing this field, a user can bypass this restriction b...

EUVD-2026-27386

In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, the Operation Delegation feature fails to validate the destination URI of delegated requests. An unauthenticated remote attacker can exploit this design flaw to force the BaSyx server to execute blind HTTP POST requests to...

GHSA-GX3V-WXFJ-8H24 Eclipse BaSyx Java Server SDK vulnerable to Server-Side Request Forgery

In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, the Operation Delegation feature fails to validate the destination URI of delegated requests. An unauthenticated remote attacker can exploit this design flaw to force the BaSyx server to execute blind HTTP POST requests to...

CVE-2026-7854

A security vulnerability has been detected in D-Link DI-8100 16.07.26A1. Affected by this vulnerability is the function urlruleasp of the file /urlrule.asp of the component POST Parameter Handler. Such manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploi...

CVE-2026-7854 D-Link DI-8100 POST Parameter url_rule.asp url_rule_asp buffer overflow

A security vulnerability has been detected in D-Link DI-8100 16.07.26A1. Affected by this vulnerability is the function urlruleasp of the file /urlrule.asp of the component POST Parameter Handler. Such manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploi...

CVE-2026-7854

The CVE-2026-7854 entry concerns D-Link DI-8100 firmware 16.07.26A1. The vulnerability lies in the POST Parameter Handler, specifically the url_rule_asp function in /url_rule.asp, which is reported to cause a buffer overflow. This could be exploited remotely, and public exploit information is ind...

CVE-2026-7854 D-Link DI-8100 POST Parameter url_rule.asp url_rule_asp buffer overflow

A security vulnerability has been detected in D-Link DI-8100 16.07.26A1. Affected by this vulnerability is the function urlruleasp of the file /urlrule.asp of the component POST Parameter Handler. Such manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploi...

CVE-2026-43066

creationtimestamp| type| source ---|---|--- 2026-05-05 17:33:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4psw3okh2k 2026-07-09 01:17:30+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260702 2026-08-03 06:23:34+00:00| seen|...

CVE-2026-7845

creationtimestamp| type| source ---|---|--- 2026-05-05 17:23:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4paz6c6m2i...

CVE-2026-43062

creationtimestamp| type| source ---|---|--- 2026-05-05 17:18:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4oy2pb6d2i 2026-08-03 06:23:29+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...

CVE-2026-43070

creationtimestamp| type| source ---|---|--- 2026-05-05 16:56:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4nrq6hei2r...

CVE-2026-43069

creationtimestamp| type| source ---|---|--- 2026-05-05 16:53:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4nme7x2p2k 2026-08-03 06:24:09+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...

CVE-2026-43073

creationtimestamp| type| source ---|---|--- 2026-05-05 16:46:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4n6tmbqb2e 2026-05-05 17:48:17+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116523223692989082 2026-05-06 11:10:07+00:00| seen|...

CVE-2026-43067

creationtimestamp| type| source ---|---|--- 2026-05-05 16:42:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4mxfrwuy2h...

CVE-2026-43068

creationtimestamp| type| source ---|---|--- 2026-05-05 16:36:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4mnv42z62q 2026-07-09 01:17:33+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260702 2026-08-03 06:24:06+00:00| seen|...

CVE-2026-7834

creationtimestamp| type| source ---|---|--- 2026-05-05 16:35:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4mljpjkx2r 2026-05-05 18:48:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4tzww26k2t...

CVE-2026-43060

creationtimestamp| type| source ---|---|--- 2026-05-05 16:33:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4mieah6b2e 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601 2026-08-03 06:54:10+00:00| seen|...