Sylius: IDOR on Shop Payment Request API endpoints
CVE-2026-53639
### Impact The `GET /api/v2/shop/payment-requests/{hash}` and `PUT /api/v2/shop/payment-requests/{hash}` endpoints look
#severity:medium
共收录 5559 条相关情报。
← 返回所有主题Sylius: Channel-based payment method restriction bypass on shop account orders API endpoint
CVE-2026-53638
### Impact An authorization bypass vulnerability exists in the shop account API. The `PATCH /api/v2/shop/account/orders/
Sylius: Cart FormComponent allows modification or deletion of an already-completed order
CVE-2026-53637
### Impact A user opens the cart page in the browser. In the background, the order gets completed, e.g. an admin changes
YesWiki Vulnerable to Reflected XSS via Unescaped `id` Parameter in Bazar Widget HTML Attributes
CVE-2026-52774
### Summary YesWiki's Bazar widget handler reflects the `id` `GET` parameter into HTML attributes using `strip_tags()` o
YesWiki Vulnerable to Reflected XSS via Unescaped Archived-Revision `time` Parameter in `handlers/page/show.php`
CVE-2026-52773
### Summary YesWiki's archived-revision view reflects the `time` `GET` parameter into a hidden HTML input in `handlers/p
YesWiki has stored XSS in Bazar form-field templates via unescaped field.label / field.hint (|raw('html'))
CVE-2026-52772
# Bazar form-field templates still apply `|raw('html')` to `field.label` / `field.hint` in attribute and label-body cont
YesWiki: SQL injection via the `recentchanges` action `period` argument leads to arbitrary DB read
CVE-2026-52763
### Summary The `recentchanges` action (`actions/recentchanges.php`) accepts a `period` argument from two disjoint para
Avo: Direct attachment upload endpoint lacks upload authorization and bypasses field-level upload policy
CVE-2026-53769
### Summary Avo's direct attachment upload endpoint lacks server-side upload authorization and bypasses the documented
nebula-mesh: Host revocation is not durable - blocked/offboarded hosts can regain a valid certificate
CVE-2026-53602
## Summary Two related authorization gaps let a host that should no longer be trusted obtain a fresh, valid Nebula cert
A weakness has been identified in code-projects Interview Management System 1.0. This...
CVE-2026-15137
A weakness has been identified in code-projects Interview Management System 1.0. This vulnerability affects unknown code
A security flaw has been discovered in code-projects Online Food Order System 1.0. This affects...
CVE-2026-15135
A security flaw has been discovered in code-projects Online Food Order System 1.0. This affects an unknown part of the f
A vulnerability was determined in CodeAstro Simple Online Leave Management System 1.0. Affected...
CVE-2026-15134
A vulnerability was determined in CodeAstro Simple Online Leave Management System 1.0. Affected by this vulnerability is
Malicious use of a stolen cookie might allow modifications to the contents of the IP phone’s...
CVE-2026-5923
Malicious use of a stolen cookie might allow modifications to the contents of the IP phone’s webpage.
The IP phone might use malicious input stored in configuration parameters and render it as...
CVE-2026-5922
The IP phone might use malicious input stored in configuration parameters and render it as content for the WebUI’s webpa
Catapult DCT2000 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows...
CVE-2026-15174
Catapult DCT2000 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.1 before 18.11.7, 19...
CVE-2026-7492
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.1 before 18.11.7, 19.0 before 19.0.4, and 1
GitLab has remediated an issue in GitLab EE affecting all versions from 18.9 before 18.11.7, 19.0...
CVE-2026-8472
GitLab has remediated an issue in GitLab EE affecting all versions from 18.9 before 18.11.7, 19.0 before 19.0.4, and 19.
HashiCorp Nomad and Nomad Enterprise are vulnerable to a cross-namespace authorization bypass in...
CVE-2026-14896
HashiCorp Nomad and Nomad Enterprise are vulnerable to a cross-namespace authorization bypass in the dynamic host volume
Crash in ciscodump 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service
CVE-2026-15164
Crash in ciscodump 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service
pcapng file parser crash in Wireshark 4.6.0 to 4.6.6 allows denial of service
CVE-2026-15173
pcapng file parser crash in Wireshark 4.6.0 to 4.6.6 allows denial of service