YouGile Project Management Service Random Number Generator Error

The vulnerability of the YouGile project management service is related to errors in the code of the pseudorandom number generator used for generating host keys. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application...

YouGile Project Management Service Unauthorized Access

The vulnerability of the YouGile project management service is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

YouGile Project Management Service Unauthorized Access

The vulnerability of the YouGile project management service is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Leantime-POC

Leantime-POC CVE-2024-27474, CVE-2024-27476, CVE-2024-27477 Description The following vulnerabilities were identified in version 3.0.6 of the Leantime goals focused project management system. CVE-2024-27474 A cross-site request forgery CSRF vulnerability which, when triggered, would create and...

thethe

The Threat Hunting Environment You are a Threat Hunter. While investigating, did you find yourself with more than 20 tabs opened in your browser, scattered .txt files with data and some terminals showing up in the background? theTHE centralizes all the information on an investigation in a single...

Leantime < 2.4 - Authenticated SQL Injection

Leantime is an open source project management system. A 'userId' variable in app/domain/files/repositories/class.files.php is not parameterized. An authenticated attacker can send a carefully crafted POST request to /api/jsonrpc to exploit an SQL injection vulnerability. Confidentiality is impact...

Kan <= 0.5.4 - Server-Side Request Forgery

Kan, an open-source project management tool Trello alternative, versions 0.5.4 and below are vulnerable to an unauthenticated Server-Side Request Forgery in the /api/download/attatchment endpoint. The endpoint passes the attacker-controlled url query parameter straight to a server-side fetch...

envizon

envizon - by evait security EOL https://github.com/evait-security/envizon/issues/130 We evait security moved to https://gitlab.com/invuls/pentest-projects/pcf for internal project documentation. network visualization & pentest reporting Version 5.0 This tool is designed, developed and supported b...

CVE-2026-108760

LlamaFarm through 0.0.34 contains an insecure default configuration that binds its unauthenticated FastAPI server to 0.0.0.0 on port 14345, while the lf CLI silently discards HOST overrides. Network-adjacent attackers can call the project and dataset management API to read stored provider API key...

CVE-2026-108760: Binding to an Unrestricted IP Address

LlamaFarm through 0.0.34 contains an insecure default configuration that binds its unauthenticated FastAPI server to 0.0.0.0 on port 14345, while the lf CLI silently discards HOST overrides. Network-adjacent attackers can call the project and dataset management API to read stored provider API key...

CVE-2026-105174

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function projectcreate of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument projectname leads to path traversal. Remote exploitation of the attack is...

CVE-2026-105174

A path traversal vulnerability exists in Gerapy up to version 0.9.13 within the Project Management component. The issue is located in the project_create function of the gerapy/server/core/views.py file, where improper handling of the project_name argument allows for unauthorized directory access....

EUVD-2026-92154

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function projectcreate of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument projectname leads to path traversal. Remote exploitation of the attack is...

CVE-2026-105174 Gerapy Project Management views.py project_create path traversal

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function projectcreate of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument projectname leads to path traversal. Remote exploitation of the attack is...

CVE-2026-105174 Gerapy Project Management views.py project_create path traversal

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function projectcreate of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument projectname leads to path traversal. Remote exploitation of the attack is...

CVE-2026-105174 Gerapy Project Management views.py project_create path traversal

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function projectcreate of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument projectname leads to path traversal. Remote exploitation of the attack is...

CVE-2026-105174: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function projectcreate of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument projectname leads to path traversal. Remote exploitation of the attack is...

CVE-2026-105637: Authorization Bypass Through User-Controlled Key

Plane is an open-source project management tool. Prior to 1.4.0, ProjectBulkAssetEndpoint.post in apps/api/plane/app/views/asset/v2.py retrieves assets using idin=assetids and workspaceslug=slug but does not constrain the query with projectid from the URL. A workspace Guest can provide asset UUID...

PT-2026-104663

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function project create of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument project name leads to path traversal. Remote exploitation of the attack is...

CVE-2026-100900

A vulnerability has been found in DevaslanPHP project-management 1.2.1/1.2.2/1.2.3/1.2.4/v2.0.0-beta1. Affected is the function updateJiraProjects of the file /jira-import of the component Jira Import. The manipulation of the argument host/username/token leads to server-side request forgery. It i...