CVE-2026-47231

CVE-2026-47231 (Admidio) : The vulnerability is an IDOR in modules/documents-files.php (mode=move_save). The move operation validates rights only on the destination folder, not the source containing the file, enabling a user with a single folder upload right to move files out of private folders a...

Swego - Swiss Army Knife Webserver In Golang

Swiss army knife Webserver in Golang. Keep simple like the python SimpleHTTPServer but with many features. Usage Help $ ./webserver -help web subcommand -bind string Bind Port default "8080" -certificate string HTTPS certificate : openssl req -new -x509 -sha256 -key server.key -out server.crt -da...

Information Disclosure

products.poi is vulnerable to information disclosure. In workflows, the issues tracker inside private folder is visible to anonymous users...