Plane: Cross-Workspace Project Modification via Unscoped Project Lookup
CVE-2026-104964
Plane is an open-source project management tool. Prior to 1.4.0, Plane's project update endpoint authorizes the caller a
#cwe-639
共收录 1905 条相关情报。
← 返回所有主题Plane: Authorization bypass in workspace-scoped asset download endpoint exposes secret project file assets to non-project workspace users
CVE-2026-104960
Plane is an open-source project management tool. Prior to 1.4.0, Plane exposes the workspace-scoped GET /api/assets/v2/w
Plane: Cross-Tenant Module Issue Linking via IDOR
CVE-2026-104894
Plane is an open-source project management tool. Prior to 1.4.0, the modules endpoint accepts issue UUIDs in the URL pat
Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1.8 - Phoca Cart's order-file download endpoint does ...
CVE-2026-102775
Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0
Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.Th...
CVE-2026-103079
Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting
Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.Th...
CVE-2026-103078
Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting
The UPI QR Code Payment Gateway WordPress plugin through 1.4.3 does not verify that a payment-confirmation request actually belongs to the order and customer it claims to confir...
CVE-2026-84169
The UPI QR Code Payment Gateway WordPress plugin through 1.4.3 does not verify that a payment-confirmation request actua
The File Uploads Addon for WooCommerce WordPress plugin before 1.7.6 does not verify that the person requesting a customer-uploaded file is the customer who uploaded it, allowin...
CVE-2026-78371
The File Uploads Addon for WooCommerce WordPress plugin before 1.7.6 does not verify that the person requesting a custom
A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected ...
CVE-2026-105171
A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03
A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the file /customer-currency/ of the component Customer Information API. ...
CVE-2026-105097
CVE-2026-105097 是一枚被分配在 Omega Solution 旗下产品 CoinEx Crypto 2025 中的授权绕过（Authorization Bypass）漏洞。根据 NVD 描述，问题位于组件 Customer
A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /customer/ of the component Customer Profile API. Executing a m...
CVE-2026-105096
CVE-2026-105096 是 NVD 收录的一则授权绕过漏洞，影响 Omega Solution 开发的 CoinEx Crypto 2025 产品。漏洞位于该产品 Customer Profile API（客户资料接口）的 /cus
Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Member Ultimate Member...
CVE-2026-96451
Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Member Ultimate Member ultimate-member allows
Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member:...
CVE-2026-96451
CVE-2026-96451 是 WordPress 生态中广泛使用的会员/用户资料插件 Ultimate Member (ultimate-member) 的一个授权绕过漏洞，缺陷类型为 CWE-639「通过用户可控键实现授权绕过 (Au
The Helpdesk Support Ticket System for WooCommerce plugin for WordPress is vulnerable to Insecure...
CVE-2026-11399
The Helpdesk Support Ticket System for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Referenc
The Helpdesk Support Ticket System for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.1.6 via the 'id...
CVE-2026-11399
The Helpdesk Support Ticket System for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Referenc
UVdesk support-center-bundle before 1.1.3.3 contains an insecure direct object reference...
CVE-2026-105029
UVdesk support-center-bundle before 1.1.3.3 contains an insecure direct object reference vulnerability in the rateTicket
UVdesk support-center-bundle before 1.1.3.3 contains an insecure direct object reference vulnerability in the rateTicket action of Controller/Ticket.php that allows authenticate...
CVE-2026-105029
UVdesk 是一个基于 Symfony 框架构建的开源工单与客服支持系统, support-center-bundle 是其面向客户的前台支持中心组件。根据 NVD 元数据, 该组件 1.1.3.3 之前的版本在 Controller/T
Trigger.dev: Cross-environment deployment cancel
### Summary Trigger.dev isolates each project into multiple **environments** (`dev`, `staging`, `prod`, and per-PR `pre
Trigger.dev: Cross-tenant SQL injection in the TSQL query compiler (POST /api/v1/query) via unsanitized window-function name
### Summary A cross-tenant SQL injection in the TSQL query compiler lets **any authenticated trigger.dev customer read
Trigger.dev: Run replay injects a task run into an attacker-chosen environment (cross-tenant write)
### Summary The dashboard replay action authorizes the source run (it must belong to the caller's org), but the target e