Kirby CMS's read access to site, user and role information is not gated by permissions

TL;DR This vulnerability affects all Kirby sites that might have potential attackers in the group of authenticated Panel users. This vulnerability is of high severity for affected sites. Sites using Kirby are not affected if they intend all users of the site to be able to list and access the site...

CVE-2025-61197

Several Orban broadcast audio processor products, including Optimod 5950 , Optimod 5950HD , Optimod 5750 , Optimod 5750HD , and Optimod Trio , are vulnerable when running Optimod version 1.0.0.33 through System version 2.5.26 . The root cause is that the application stores user privilege and role...

PT-2024-20237 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: Novel-Plus versions prior to 4.3.0-RC1 Description: A SQL injection issue exists, allowing an attacker to perform SQL injection by passing crafted offset, limit, and sort parameters via the "/system/roleDataPerm/list" API endpoint...

PT-2016-3892 · Huawei · Fusioncompute

Name of the Vulnerable Software and Affected Versions: Huawei FusionCompute versions prior to V100R005C10SPC700 Description: The issue allows remote authenticated users to obtain sensitive role and permission information via unspecified vectors. Recommendations: For versions prior to...