CVE-2026-92773

Trigger.dev before 4.6.0 contains a GitHub App installation takeover vulnerability in its GitHub integration service (gitHub.server.ts). The root cause is a failure to verify that an authenticated user actually controls a GitHub App installation before binding it to their organization. An attacke...

CVE-2026-92752

CVE-2026-92752 affects metasfresh , an ERP/business-management platform. The DocumentAttachmentsRestController and CommentsRestController endpoints validate only that a caller is authenticated but fail to enforce record-level permissions , allowing any logged-in user to enumerate sequential docum...

exploit_CVE-2022-24112

exploitCVE-2022-24112 CVE-2022-24112 安装 root@kitploit: git clone https://github.com/btar1gan/exploitCVE-2022-24112 使用 root@kitploit: cd exploitCVE-2022-24112/ python3 508291.py && python3 508292.py 如果您有任何反馈，请与我们联系...

CVE-2026-87894 Rox Appointment Booking 1.0.9 - 1.2.2 - Unauthenticated Customer PII Disclosure via IDOR

The Rox Appointment Booking WordPress plugin before 1.2.3 does not perform any authorization check on the endpoint that returns a booking's confirmation details, and each booking is addressed by a sequential numeric identifier, allowing unauthenticated attackers to read any customer's name, email...

CVE-2026-87894

CVE-2026-87894 affects the Rox Appointment Booking WordPress plugin in versions 1.0.9 through 1.2.2 . The vulnerability is an Insecure Direct Object Reference (IDOR) : the endpoint that returns a booking's confirmation details performs no authorization check , and each booking is addressed by a s...

EUVD-2026-76804

The Rox Appointment Booking WordPress plugin before 1.2.3 does not perform any authorization check on the endpoint that returns a booking's confirmation details, and each booking is addressed by a sequential numeric identifier, allowing unauthenticated attackers to read any customer's name, email...

CVE-2026-18121

Concrete CMS 9.5.2 and below is vulnerable to an authorization bypass IDOR because the frontend calendar lightbox endpoint /ccm/calendar/viewevent/bID/occurrenceid does not verify that the caller is permitted to view the calendar that owns the requested event occurrence. The controller loads the...

EUVD-2026-74924

Snipe-IT is an open source IT asset management system. In versions up to and including 8.6.3, the report acceptance endpoints POST /reports/unacceptedassets/sentreminder ReportsController::sentAssetAcceptanceReminder and DELETE /reports/unacceptedassets/acceptanceId/delete...

CVE-2026-82848

The Masteriyo LMS WordPress plugin before 3.4.0 does not perform any authorization check before returning a course enrolment record over its REST API, allowing unauthenticated users to read any learner's enrolment status, timestamps and course-progress data by walking sequential record identifier...

CVE-2026-80340 Payment Plugins for PayPal WooCommerce < 2.0.26 - Unauthenticated Customer PII Disclosure via order-pay

The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.26 does not validate the order key before adding order data to the JavaScript configuration it outputs on the front end, allowing unauthenticated users to obtain the secret that gates access to any order and, through it, that...

CVE-2026-80340

The Payment Plugins for PayPal WooCommerce WordPress plugin, versions before 2.0.26 , fails to validate the order key before embedding order data into the JavaScript configuration rendered on the front end. This allows unauthenticated users to recover the secret that gates access to a given order...

CVE-2026-80339

The Payment Plugins for Stripe WooCommerce WordPress plugin before 4.0.12 fails to validate the order key before embedding order data in the front-end JavaScript configuration (via the order-pay endpoint). This allows unauthenticated users to enumerate sequential order identifiers and retrieve bi...

CVE-2026-80340 Payment Plugins for PayPal WooCommerce < 2.0.26 - Unauthenticated Customer PII Disclosure via order-pay

The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.26 does not validate the order key before adding order data to the JavaScript configuration it outputs on the front end, allowing unauthenticated users to obtain the secret that gates access to any order and, through it, that...

CVE-2026-80339 Payment Plugins for Stripe WooCommerce < 4.0.12 - Unauthenticated Customer PII Disclosure via order-pay

The Payment Plugins for Stripe WooCommerce WordPress plugin before 4.0.12 does not validate the order key before adding order data to the JavaScript configuration it outputs on the front end, allowing unauthenticated users to obtain the billing details of any order, together with the secret that...

CVE-2026-80339 Payment Plugins for Stripe WooCommerce < 4.0.12 - Unauthenticated Customer PII Disclosure via order-pay

The Payment Plugins for Stripe WooCommerce WordPress plugin before 4.0.12 does not validate the order key before adding order data to the JavaScript configuration it outputs on the front end, allowing unauthenticated users to obtain the billing details of any order, together with the secret that...

EUVD-2026-74704

The Payment Plugins for Stripe WooCommerce WordPress plugin before 4.0.12 does not validate the order key before adding order data to the JavaScript configuration it outputs on the front end, allowing unauthenticated users to obtain the billing details of any order, together with the secret that...

CVE-2026-86113

BookWyrm through 0.9.1 contains an authorization bypass vulnerability in the editreadthrough function that allows authenticated users to modify other users' reading records. Attackers can exploit sequential ReadThrough IDs to overwrite arbitrary users' start dates, finish dates, progress, and...

CVE-2026-86113 BookWyrm through 0.9.1 Insecure Direct Object Reference in edit-readthrough Allows Tampering with Other Users' Reading Records

BookWyrm through 0.9.1 contains an authorization bypass vulnerability in the editreadthrough function that allows authenticated users to modify other users' reading records. Attackers can exploit sequential ReadThrough IDs to overwrite arbitrary users' start dates, finish dates, progress, and...

CVE-2026-86113

BookWyrm through version 0.9.1 is affected by an authorization bypass (Insecure Direct Object Reference) in the edit_readthrough function. Because ReadThrough IDs are sequential, any authenticated user can overwrite other users' start dates, finish dates, progress, and progress mode, corrupting r...

CVE-2026-86111 BookWyrm through 0.9.1 Insecure Direct Object Reference in EditStatus Exposes Followers-Only and Direct Statuses

BookWyrm through 0.9.1 fails to validate user visibility permissions in the status edit endpoint, allowing authenticated attackers to read followers-only and direct-message reviews by enumerating sequential status IDs. Attackers can access the raw content of restricted statuses through the edit...