CVE-2025-64649 Multiple Vulnerabilities in IBM Concert Software

IBM Concert 1.0.0 through 2.3.1 could allow a remote attacker to perform unauthorized actions using man in the middle techniques due to improper certificate validation...

CVE-2026-82284

Quivr versions through 0.0.322 fail to validate chat ownership in the GET /chat/chatid/history, DELETE /chat/chatid, and POST /chat/chatid/question/answer endpoints. Authenticated attackers can read other users' conversation histories including private knowledge base content, delete arbitrary...

CVE-2026-70309

Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to bypass a security feature over a network...

EUVD-2026-42984

Snipe-IT vulnerable to cross-company asset maintenance re-parenting via API update...

EUVD-2026-42986

Snipe-IT has missing object-level authorization in Kits API...

EUVD-2026-67852

Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-55521

Yamcs , a mission control framework, contains multiple missing function-level access control vulnerabilities in its Core API. Prior to 5.12.8 and 5.13.2 , authorization checks are omitted in IndexesApi.listPacketIndex, IndexesApi.listEventIndex, Cop1Api.disable/resume/initialize/updateConfig, and...

CVE-2024-50945

CVE-2024-50945 Descrizione SimplCommerce è affetto da una vulnerabilità di controllo degli accessi non corretti nel sistema di recensioni, che consente a utenti non autorizzati di pubblicare recensioni per prodotti che non hanno acquistato. Metodo di rilevamento Un attaccante può rilevare questa...

CVE-2026-82281 Kotaemon Missing Ownership Check in Conversation Functions

Kotaemon through 0.12.0 fails to properly validate conversation ownership in selectconv, deleteconv, renameconv, and onsetpublicconversation functions in control.py. Attackers can read other users' chat histories, delete conversations, or rename conversations by supplying arbitrary conversation...

CVE-2026-82279 HyperDX Team Management Operations Missing Role-Based Access Control

HyperDX through 1.10.1 fails to enforce role-based access controls in team management endpoints, allowing any team member to perform administrative actions. Attackers can delete team members including owners, rotate API keys, and rename teams by sending requests to PATCH /team/apiKey, PATCH...

CVE-2026-41940

CVE-2026-41940 - cPanel/WHM Auth-Bypass-Scanner & Exploit-Tool cPanel/WHM Authentifizierungs-Bypass-Scanner & Exploit-Tool für CVE-2026-41940 ⚠️ Haftungsausschluss Dieses Tool wird ausschließlich zu Bildungszwecken und für autorisierte Sicherheitstests bereitgestellt. Durch die Nutzung dieses Tool...

EUVD-2026-67729

Subscriber Insecure Direct Object References IDOR in WP Job Portal = 2.5.9 versions...

CVE-2026-19412 Hardcoded Credentials Vulnerability in CP Plus CP-XR-DE21-S Router

This vulnerability exists in the CP Plus CP-XR-DE21-S Router due to the presence of hardcoded HTTP Digest authentication credentials in the firmware that are identical across all devices running the affected firmware. An attacker with access to the local network could exploit this vulnerability b...

CVE-2025-55182

🛡️ CVE-2025-55182 – Eine Schwachstelle verstehen und entschärfen 🚀 Erste Schritte Willkommen zum CVE-2025-55182-Projekt. Diese Anleitung hilft Ihnen, die Schwachstelle zu verstehen, und zeigt Ihnen, wie Sie die benötigte Software herunterladen und ausführen. 📥 Die Anwendung herunterladen 🔍 Was ist...

CVE-2026-82237

filebrowser through 2.63.23 does not remove share records when a shared file is renamed only deletion triggers share cleanup. The share record is keyed by path, so it survives the rename and remains dormant returning 404 while the path is empty. When any new, unrelated file later appears at the...

CVE-2026-0257

🚨 CVE-2026-0257 – PAN-OS GlobalProtect Authentifizierungsumgehung Sicherheitsforschung, technische Analyse, Erkennungsanleitung, IOC-Sammlung und Ressourcen zur defensiven Validierung für CVE-2026-0257. 📌 Überblick CVE-2026-0257 ist eine Schwachstelle zur Authentifizierungsumgehung, die Palo Alto...

CVE-2026-82237

filebrowser through 2.63.23 has a stale-share-link vulnerability: when a shared file is renamed, the share record (keyed by path) is not cleaned up—only deletion triggers cleanup. The record stays dormant (returning 404) until a new, unrelated file appears at the original path via re-upload, anot...

CVE-2026-82237 filebrowser through 2.63.23 Stale Share Link via File Rename

filebrowser through 2.63.23 does not remove share records when a shared file is renamed only deletion triggers share cleanup. The share record is keyed by path, so it survives the rename and remains dormant returning 404 while the path is empty. When any new, unrelated file later appears at the...

CVE-batdappboomx

ID CVE CVE-2022-27134 PRODOTTO batdappboomx è uno smart contract pubblico eseguito sulla blockchain EOSIO. Questo smart contract premia i partecipanti con criptovaluta se questi pagano una certa quantità di criptovaluta in anticipo. Versione L'ultima versione di questo smart contract. Il codice...

CVE-2026-73208

An attacker that holds a token intended for a different purpose can authenticate, because when an OAuth2 token response does not contain a scope claim, the audience claim is used in its place and checked against the configured required scopes. These are different concepts, and the audience claim...