14 matches found
CVE-2026-35488 Tandoor Recipes — CustomIsShared permits DELETE/PUT on RecipeBook by shared (read-only) users
Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.4, RecipeBookViewSet and RecipeBookEntryViewSet use CustomIsShared as an alternative permission class, but CustomIsShared.hasobjectpermission returns True for all HTTP methods —...
CVE-2016-10801
cPanel before 58.0.4 has improper session handling for shared users SEC-139...
EUVD-2019-5619
Malware in sbrugna...
EUVD-2016-1837
Malware in sbrugna...
CVE-2019-14413
cPanel before 78.0.2 allows certain file-write operations as shared users during connection resets SEC-476...
Ring Makes 2-Factor Authentication Mandatory Following Recent Hacks
Smart doorbells and cameras bring a great sense of security to your home, especially when you're away, but even a thought that someone could be spying on you through the same surveillance system would shiver up your spine. Following several recent reports of hackers gaining access to people's...
CVE-2016-10801
cPanel before 58.0.4 has improper session handling for shared users SEC-139...
CVE-2016-10801
cPanel before 58.0.4 has improper session handling for shared users SEC-139...
CVE-2016-10843
cPanel before 11.54.0.4 allows code execution in the context of shared users via JSON-API SEC-76...
Code injection
cPanel before 11.54.0.4 allows code execution in the context of shared users via JSON-API SEC-76...
CVE-2019-14413
cPanel before 78.0.2 allows certain file-write operations as shared users during connection resets SEC-476...
CVE-2019-14413
cPanel before 78.0.2 allows certain file-write operations as shared users during connection resets SEC-476...
CVE-2019-14413
CVE-2019-14413 affects cPanel prior to 78.0.2, where an input validation/permissions issue allows certain file-write operations as a shared user during connection resets (SEC-476). Documented by multiple sources (NVD, Red Hat, CNVD, CVE lists) confirms the vulnerability in the cPanel web-based pl...
CVE-2019-14413
cPanel before 78.0.2 allows certain file-write operations as shared users during connection resets SEC-476...