24119 matches found
CVE-2026-12400
The FlowForms – Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.1 via the updateform due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...
EUVD-2026-42856
R-SOFT DMS is vulnerable to Insecure Direct Object Reference IDOR attack in multiple file download endpoints. The application fetches files from the database by ID and serves them to whoever requests them, relying only on session authentication, meaning any valid user can access any file. This...
CVE-2026-41878
Vulnerability (CVE-2026-41878) in R-SOFT DMS: Insecure Direct Object Reference (IDOR) affecting multiple file download endpoints. The app fetches files from the database by ID and serves them to any request, relying solely on session authentication, enabling a valid user to access any file. Repor...
CVE-2026-41878 Insecure Direct Object Reference in R-SOFT DMS
R-SOFT DMS is vulnerable to Insecure Direct Object Reference IDOR attack in multiple file download endpoints. The application fetches files from the database by ID and serves them to whoever requests them, relying only on session authentication, meaning any valid user can access any file. This...
CVE-2026-41878
R-SOFT DMS is vulnerable to Insecure Direct Object Reference IDOR attack in multiple file download endpoints. The application fetches files from the database by ID and serves them to whoever requests them, relying only on session authentication, meaning any valid user can access any file. This...
MINI-8647-W24X-872X
Bulletin has no description...
MINI-8MHJ-JRMF-P6QV
Bulletin has no description...
MINI-2X27-3XVC-6QJ5
Bulletin has no description...
MINI-W5WW-6858-2H88
Bulletin has no description...
MINI-5PJQ-47RC-MX39
Bulletin has no description...
MINI-WM5F-PH23-WQ96
Bulletin has no description...
MINI-4MQM-PCJ4-QJ5V
Bulletin has no description...
MINI-H273-FHXJ-66WR
Bulletin has no description...
MINI-FHVP-XC2R-RP5V
Bulletin has no description...
MINI-PCXH-96CQ-78RP
Bulletin has no description...
MINI-J32F-6QQ2-FMV7
Bulletin has no description...
MINI-CRCJ-88WP-M98X
Bulletin has no description...
MINI-JFX6-3GVC-WFV2
Bulletin has no description...