EUVD-2026-50952

The Persian Elementor المنتور فارسی plugin for WordPress is vulnerable to Price Manipulation in all versions up to, and including, 2.8.1. This is due to the plugin trusting a user-supplied payment amount without server-side validation against the configured ZarinPal widget price. This makes it...

PT-2026-64420

Name of the Vulnerable Software and Affected Versions Tycon Systems TPDIN-Monitor-WEB2 affected versions not specified Description The web management interface fails to perform server-side validation of credentials during the login process. An unauthenticated remote attacker can bypass the...

CVE-2026-15017

The MDJM Event Management plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.7.8.4. This is due to missing capability checks and nonce verification in the MDJMPermissions::setpermissions and MDJMEmployeeManager::init functions, combined with the...

PT-2026-63787

The MDJM Event Management plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.7.8.4. This is due to missing capability checks and nonce verification in the MDJM Permissions::set permissions and MDJM Employee Manager::init functions, combined with the...

The vulnerability of the Glances monitoring tool, related to insufficient validation of requests on the server side, allows a perpetrator to gain unauthorized access to protected information or perform an SSRF attack.

The vulnerability of the Glances monitoring tool is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information or perform an SSRF attack...

The vulnerability of the Azure OpenAI cloud platform, related to insufficient validation of requests on the server side, allows attackers to escalate their privileges.

The vulnerability of the Azure OpenAI cloud platform is related to insufficient validation of requests at the server side. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

CVE-2026-65051

Ninja Forms WordPress plugin version 3.14.8 contains a client-side enforcement of server-side security vulnerability that allows unauthenticated attackers to bypass all form validation by merging attacker-controlled field metadata over server-loaded form definitions before validation runs...

Arbitrary File Upload

TYPO3 CMS is vulnerable to Arbitrary File Upload. The vulnerability is due to missing server-side enforcement of configured MIME type restrictions, where uploaded files are not validated against allowed MIME types, allowing attackers to upload files with arbitrary MIME types...

The vulnerability of the Content Credentials SDK libraries lies in the insufficient validation of requests on the server side, allowing attackers to increase their privileges.

The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of requests at the server side. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the SyncFabric cloud service for synchronizing Microsoft Entra Provisioning Service allows a perpetrator to escalate their privileges.

The vulnerability of the SyncFabric cloud service for synchronizing Microsoft Entra Provisioning Services is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the Appliance Work Place microprogramming software for SonicWall SMA 1000 network devices allows a perpetrator to execute an SRF attack.

The vulnerability of the Appliance Work Place microprogramming software for SonicWall’s SMA 1000 series network interface controllers is related to insufficient checking of requests on the server side. Exploiting this vulnerability can allow a remote attacker to execute an SSRF attack...

Duplicate Advisory: TYPO3-CORE-SA-2026-020: TYPO3 CMS - Unrestricted File Upload in Form Framework

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-mfqj-cqv3-h7xw. This link is maintained to preserve external references. Original Description Users were able to upload files with arbitrary MIME types to forms using FileUpload or ImageUpload elements with...

CVE-2026-15305

Users were able to upload files with arbitrary MIME types to forms using FileUpload or ImageUpload elements with allowedMimeTypes configured. The restriction was not enforced server-side because the MimeTypeValidator was registered during form building before concrete form definition properties...

CVE-2026-15305

The CVE affects TYPO3 CMS versions 14.2.0–14.3.5. Root cause: MimeTypeValidator is registered during form building before concrete form definition properties are applied, so the server-side enforcement of allowedMimeTypes is bypassed and users can upload files with arbitrary MIME types via FileUp...

CVE-2026-15305 TYPO3 CMS - Unrestricted File Upload in Form Framework

Users were able to upload files with arbitrary MIME types to forms using FileUpload or ImageUpload elements with allowedMimeTypes configured. The restriction was not enforced server-side because the MimeTypeValidator was registered during form building before concrete form definition properties...

CVE-2026-15305 TYPO3 CMS - Unrestricted File Upload in Form Framework

Users were able to upload files with arbitrary MIME types to forms using FileUpload or ImageUpload elements with allowedMimeTypes configured. The restriction was not enforced server-side because the MimeTypeValidator was registered during form building before concrete form definition properties...

PYSEC-2026-2735 Open WebUI's Mass Assignment via Pydantic extra='allow' Allows Creating Folders in Other Users' Accounts

Mass Assignment via Pydantic extra='allow' Allows Creating Folders in Other Users' Accounts Affected Component Folder creation endpoint and form model: - backend/openwebui/models/folders.py lines 72-77, FolderForm with extra='allow' - backend/openwebui/models/folders.py lines 95-106,...

PT-2026-59377

Mass Assignment via Pydantic extra='allow' Allows Creating Folders in Other Users' Accounts Affected Component Folder creation endpoint and form model: - backend/open webui/models/folders.py lines 72-77, FolderForm with extra='allow' - backend/open webui/models/folders.py lines 95-106, insert new...

ROS-20260710-73-0011

The vulnerability of the built-in reverse proxy server in the Go programming language is related to insufficient checking of requests on the server side. Exploiting this vulnerability allows a remote attacker to perform an SSRF attack...

The vulnerability of the HostMatchList.checkIP method in the Git repository management system Gitea, which allows a hacker to perform an SSRF attack

The vulnerability of the HostMatchList.checkIP method in the Git repository management system Gitea is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to perform an SSRF attack remotely...