CVE-2026-97859: Missing Authorization

Seven Gitea API routes under /api/v1/users/username followers, following, following/target, starred, subscriptions, keys and gpgkeys were registered without the individualPermsChecker middleware that enforces the visibility of the target user. An authenticated user could therefore read the...

CVE-2026-68964

An authenticated account marked restricted can retrieve the SSH public keys and GPG keys of a user whose profile visibility is set to Limited, through "GET /api/v1/users/username/keys" and "GET /api/v1/users/username/gpgkeys". The SSH response exposes key titles, public key material and...

CVE-2026-66853

A restricted account can enumerate Limited-visibility organizations and their name, description and avatar by listing the public organization memberships of a known user through "GET /api/v1/users/username/orgs"...

CVE-2026-67577

An authenticated account marked restricted can read the activity feed and contribution heatmap of a Limited-visibility user through "GET /api/v1/users/username/activities/feeds" and "GET /api/v1/users/username/heatmap". The ordinary user-information endpoint and the web/RSS profile routes correct...

Gitea API Disclosure Sensitive Information

The vulnerability of endpoints /api/v1/user/orgs and /api/v1/users/username/orgs/org/permissions in the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

CVE-2026-77508

Weblate is a web based localization tool. Prior to 2026.8, an authenticated user can change the account's primary email through PUT or PATCH requests to /api/users/username/ without verifying the new address, allowing a later team invitation for that address to be accepted without access to the...

CVE-2026-29195: Incorrect Authorization

Netmaker makes networks with WireGuard. Prior to version 1.5.0, the user update handler PUT /api/users/username lacks validation to prevent an admin-role user from assigning the super-admin role during account updates. While the code correctly blocks an admin from assigning the admin role to...

CVE-2026-20139: Uncontrolled Resource Consumption

In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.8, 9.3.9, and 9.2.12, and Splunk Cloud Platform versions below 10.2.2510.3, 10.1.2507.8, 10.0.2503.9, and 9.3.2411.121, a low-privileged user that does not hold the "admin" or "power" Splunk roles could craft a malicious payload into the...

PT-2021-10644

Name of the Vulnerable Software and Affected Versions: Core FTP LE version 2.2 Description: The issue allows local attackers to cause a denial of service, resulting in a crash, by entering a long string in the Setup-Users-Username editbox. This is due to a buffer overflow. Recommendations: For Co...

Core FTP security vulnerabilities

Core FTP is a file transfer server. Core FTP LE v2.2 allows local attackers to cause a denial or service A security vulnerability exists that allows local attackers to cause a denial of service via a long string in Settings-Users-Username editbox...

PT-2017-6266

Name of the Vulnerable Software and Affected Versions GetSimple CMS version 3.3.4 Description The issue allows remote attackers to obtain sensitive information via direct requests to specific files, including "data/users/.xml", "backups/users/.xml.bak", "data/other/authorization.xml", or...

CVE-2006-1209: Undefined Security Weakness

PHP Advanced Transfer Manager 1.00 through 1.30 stores sensitive information, including password hashes, under the web root with insufficient access control, which allows remote attackers to download each password hash via a direct request for a users/USERNAME file...

CVE-2006-1207: Undefined Security Weakness

PHP Upload Center stores password hashes under the web root with insufficient access control, which allows remote attackers to download each password hash via a direct request for the upload/users/USERNAME file...

CVE-2006-0103: Exposure of Sensitive Information to an Unauthorized Actor

TinyPHPForum 3.6 and earlier stores the 1 users/USERNAME.hash and 2 users/USERNAME.email files under the web root with insufficient access control, which allows remote attackers to list all registered users and possibly obtain other sensitive information...