EUVD-2026-125600

Seafile SeaDoc converter 2.0.4 before 2.0.11 and 3.0.0 before 3.0.8 contains an absolute path traversal vulnerability that allows unauthenticated attackers holding a public share token to execute code. Attackers supply an absolute filename to /api/v1/confluence-to-wiki/ to extract a ZIP from...

CVE-2026-129167

The SeaDoc converter (versions 2.0.4 before 2.0.11 and 3.0.0 before 3.0.8) is vulnerable to an absolute path traversal vulnerability. This flaw allows unauthenticated attackers possessing a public share token to achieve Remote Code Execution (RCE) . By supplying an absolute filename to the /api/v...

CVE-2026-63170

Omnispace Agora Project through 26.10.0 contains a predictable token generation vulnerability that allows unauthenticated attackers to forge the shared-calendar iCal share token by deriving md5Id from predictable fields such as object creation time, which is self-disclosed through autorDate and t...

EUVD-2026-125587

Omnispace Agora Project through 26.10.0 contains a predictable token generation vulnerability that allows unauthenticated attackers to forge the shared-calendar iCal share token by deriving md5Id from predictable fields such as object creation time, which is self-disclosed through autorDate and t...

PT-2026-147023

Name of the Vulnerable Software and Affected Versions Seafile SeaDoc converter versions 2.0.4 through 2.0.10 Seafile SeaDoc converter versions 3.0.0 through 3.0.7 Description An absolute path traversal issue exists that allows unauthenticated attackers with a public share token to execute code. A...

PT-2026-147034

Omnispace Agora Project through 26.10.0 contains a predictable token generation vulnerability that allows unauthenticated attackers to forge the shared-calendar iCal share token by deriving md5Id from predictable fields such as object creation time, which is self-disclosed through autorDate and t...

CVE-2026-85708

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.3, Chart share and embed tokens were signed with CBSECRET, including known or shipped-default values in stock source and repository Docker Compose installs...

CVE-2026-85708

Versions of Chartbrew prior to 5.2.3 are vulnerable to an information disclosure flaw due to improper cryptographic signature verification (CWE-347 ). The application uses CB_SECRET to sign share and embed tokens; however, stock source and repository Docker Compose installs often use known or shi...

CVE-2026-85708 Chartbrew: Private chart data disclosure via forgeable CB_SECRET share tokens

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.3, Chart share and embed tokens were signed with CBSECRET, including known or shipped-default values in stock source and repository Docker Compose installs...

EUVD-2026-118503

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.3, Chart share and embed tokens were signed with CBSECRET, including known or shipped-default values in stock source and repository Docker Compose installs...

CVE-2026-85708 Chartbrew: Private chart data disclosure via forgeable CB_SECRET share tokens

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.3, Chart share and embed tokens were signed with CBSECRET, including known or shipped-default values in stock source and repository Docker Compose installs...

CVE-2026-120209 AJ-Report through 1.7.1 Authentication Bypass leading to RCE via Share-Token

AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens offline. Attackers can mint a token with reportCode 'dataSet' to access the testTransform endpoint, which passes scripts to GroovyClassLoader for unauthenticated remote code...

CVE-2026-120209 AJ-Report through 1.7.1 Authentication Bypass leading to RCE via Share-Token

AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens offline. Attackers can mint a token with reportCode 'dataSet' to access the testTransform endpoint, which passes scripts to GroovyClassLoader for unauthenticated remote code...

CVE-2026-120209

The AJ-Report software (through version 1.7.1) is vulnerable to an authentication bypass leading to remote code execution (RCE) . The root cause is the use of a hard-coded JWT secret to sign share tokens, which allows attackers to forge valid tokens offline. By minting a token with the reportCode...

CVE-2026-104189

The 3D Viewer for Nextcloud is a comprehensive 3D model viewer application for Nextcloud that supports multiple 3D file formats. In versions 1.7.9 through 3.3.1, the app's public file endpoint performed no share authorization. Anyone who knows a share token could read the shared file's contents...

CVE-2026-104189

The 3D Viewer for Nextcloud is a comprehensive 3D model viewer application for Nextcloud that supports multiple 3D file formats. In versions 1.7.9 through 3.3.1, the app's public file endpoint performed no share authorization. Anyone who knows a share token could read the shared file's contents...

EUVD-2026-111082

The 3D Viewer for Nextcloud is a comprehensive 3D model viewer application for Nextcloud that supports multiple 3D file formats. In versions 1.7.9 through 3.3.1, the app's public file endpoint performed no share authorization. Anyone who knows a share token could read the shared file's contents...

CVE-2026-104189 3Dviewer-Nextcloud: Share password not enforced when streaming 3D models from a public link share

The 3D Viewer for Nextcloud is a comprehensive 3D model viewer application for Nextcloud that supports multiple 3D file formats. In versions 1.7.9 through 3.3.1, the app's public file endpoint performed no share authorization. Anyone who knows a share token could read the shared file's contents...

PT-2026-126616

The 3D Viewer for Nextcloud is a comprehensive 3D model viewer application for Nextcloud that supports multiple 3D file formats. In versions 1.7.9 through 3.3.1, the app's public file endpoint performed no share authorization. Anyone who knows a share token could read the shared file's contents...

PT-2026-118054

Vikunja: Link-share token reads any tenant's kanban buckets and enumerates usernames/IDs instance-wide BOLA in code.vikunja.io/api. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...