CVE-2026-42517

This vulnerability exists in e-Sushrut due to the use of reversible Base64 encoding for protecting sensitive data. An authenticated attacker could exploit this vulnerability by decoding and manipulating Base64-encoded parameters in the request URL to gain unauthorized access to sensitive...

CVE-2025-3013

Insecure Direct Object References IDOR in access control in Customer Portal before 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references...

Navidrome 安全漏洞

Navidrome is a web-based open source music collection server and streamer. It is used to freely listen to music collections from any browser or mobile device. A security vulnerability exists in Navidrome 0.51.1 and earlier versions, which stems from a vulnerability that allows an attacker to...