Snipe-IT has Improper Authorization in File Deletion (IDOR)
CVE-2026-55519
### Impact A vulnerability was identified in Snipe-IT v8.4.0 (build 21280-g91a95dbc6) that allows any authenticated user
#composer
共收录 517 条相关情报。
← 返回所有主题Snipe-IT Vulnerable to Privilege Escalation via Missing admin Permission Check in User Creation
CVE-2026-55483
### Impact The `store()` method in both the web and API `UsersController` only strips the superuser permission when a no
Snipe-IT has Multi-Tenancy Bypass via Bulk Asset Update
CVE-2026-55482
### Impact The `BulkAssetsController::update()` method accepts `company_id` directly from user input without calling `Co
Snipe-IT has a 2FA reset privilege bypass
CVE-2026-50550
### Impact A user who can edit other users could reset a superadmin's 2FA. ### Patches Patched in 8.5.0
Snipe-IT Vulnerable to User Account Escalation via CSV Import
CVE-2026-49976
### Impact The CSV user import in update mode bypasses user-edit authorization. A user with only the `import` permission
Snipe-IT's TOTP is Brute-Forceable Due to Missing Rate Limiting on `POST /two-factor`
CVE-2026-49870
### Impact `POST /two-factor` had no rate limiting, lockout, or attempt counter. An attacker with valid credentials can
phpMyFAQ: Missing userHasPermission() in 4 API write endpoints (CVE-2026-24421 Incomplete Fix)
CVE-2026-49205
Missing Authorization in API CategoryController — CVE-2026-24421 fixed BackupController by adding userHasPermission(Per
Snipe-IT: Bulk editing users allowed `ldap_import` and `activated_in` bulk editing users
CVE-2026-48507
### Impact The vulnerability allows a non-admin user holding only the granular `users.edit` permission to lock every adm
Filament: Unauthenticated temporary file upload on auth pages
CVE-2026-48500
Any schema can contain a file upload form field, so Filament applies Livewire's `WithFileUploads` trait to the Livewire
Snipe-IT Vulnerable to Privilege Escalation for self via API Permissions Assignment
CVE-2026-48493
### Impact A user with only users.edit AND api permissions can send a PATCH to /api/v1/users/{their_own_id} and grant th
Snipe-IT's selectlist visibility is too permissive
CVE-2026-48492
### Impact The GET /api/v1/{object}/selectlist API endpoint is missing an authorization check. Any user who can log into
phpMyFAQ has Weak Cryptography - SHA1 for Password Hashing
CVE-2026-48488
### Summary Attachment passwords are hashed using SHA-1, a cryptographically broken algorithm. SHA-1 has been vulnerabl
Filament: Unvalidated ImageColumn and ImageEntry values can be used for XSS
CVE-2026-48167
The `ImageColumn` and `ImageEntry` components render raw database values without escaping HTML. Where the data passed to
Filament: Timing-based user enumeration on login page
CVE-2026-48166
The login page has an observable timing discrepancy that allows unauthenticated attackers to enumerate registered email
Slim has Reflected XSS in the HtmlErrorRenderer
CVE-2026-48157
### Impact If an application uses `HttpException::setTitle()` and/or `setDescription()` to include untrusted/request-de
Paymenter has broken object level authorization via service reference manipulation on ticket creation
CVE-2026-44585
### Summary The ticket creation endpoint accepts a user-supplied service identifier without enforcing ownership validati
Paymenter doesn't reset email verification status after email change
CVE-2026-44584
### Summary The email update functionality fails to invalidate the existing verification state when a user changes their
Paymenter has Blind Unauthenticated SSRF on the Paypal gateway module
CVE-2026-44583
### Summary The PayPal webhook endpoint `/extensions/paypal/webhook` processes the `PAYPAL-CERT-URL` HTTP header without
AVideo has an Authorize.Net Webhook Signature Bypass that Enables Wallet Balance Inflation via Forged Payment Data
CVE-2026-33731
## Summary The Authorize.Net webhook handler at `plugin/AuthorizeNet/webhook.php` contains a signature verification byp
AVideo Vulnerable to Unauthenticated .env File Exposure via Official Docker Compose Configuration
CVE-2026-33692
## Vulnerability Details **CWE**: CWE-538 - Insertion of Sensitive Information into Externally-Accessible File or Direc