CVE-2026-124573

The software logseq versions 2.0.1 and 2.0.2 contains a vulnerability in the Local HTTP API component. Specifically, the validate-auth-token function located in src/electron/electron/server.cljs fails to properly enforce authentication, leading to a missing authentication flaw (CWE-306 , CWE-287 ...

PT-2022-26184 · Unknown · Bigbluebutton

Name of the Vulnerable Software and Affected Versions: BigBlueButton versions prior to 2.4.3 Description: The issue is related to Insufficient Verification of Data Authenticity, resulting in Denial of Service. An attacker can make a Meteor call to validateAuthToken using a victim's userId,...