EUVD-2026-42856

R-SOFT DMS is vulnerable to Insecure Direct Object Reference IDOR attack in multiple file download endpoints. The application fetches files from the database by ID and serves them to whoever requests them, relying only on session authentication, meaning any valid user can access any file. This...

MINI-8MHJ-JRMF-P6QV

Bulletin has no description...

MINI-8647-W24X-872X

Bulletin has no description...

MINI-2X27-3XVC-6QJ5

Bulletin has no description...

MINI-W5WW-6858-2H88

Bulletin has no description...

MINI-5PJQ-47RC-MX39

Bulletin has no description...

MINI-WM5F-PH23-WQ96

Bulletin has no description...

MINI-4MQM-PCJ4-QJ5V

Bulletin has no description...

MINI-H273-FHXJ-66WR

Bulletin has no description...

MINI-FHVP-XC2R-RP5V

Bulletin has no description...

MINI-PCXH-96CQ-78RP

Bulletin has no description...

MINI-CRCJ-88WP-M98X

Bulletin has no description...

MINI-J32F-6QQ2-FMV7

Bulletin has no description...

MINI-QMC4-P6RR-7F4J

Bulletin has no description...

MINI-JFX6-3GVC-WFV2

Bulletin has no description...

MINI-X3PH-C34R-98F6

Bulletin has no description...

MINI-Q3MM-J367-6J2C

Bulletin has no description...

MINI-R58Q-675C-FHG9

Bulletin has no description...

MINI-P8RH-5XX7-X2PJ

Bulletin has no description...

EUVD-2026-42847

The FlowForms – Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.1 via the updateform due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...