lighthousekeeper1212
35 kredili kayıt · son 12 ayda 35 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
21İzleyin | CVE-2026-116008İstismar yok | DaybydayCRM through 2.2.1 Missing Authorization via ProjectsController updateAssignbottelet · daybydaycrm · CWE-862 | Orta5,3 | — | %0,1 | 24 Eki 2026 |
9İzleyin | CVE-2026-115509İstismar yok | Jitsu Console before 2.14.0-beta.41 Cross-Workspace Authorization Bypass via sources/state APIjitsucom · jitsu · CWE-863 | Düşük2,3 | — | %0,1 | 22 Eki 2026 |
28İzleyin | CVE-2026-114391İstismar yok | ZenTao PMS before 22.3 Authorization Bypass via Ajax Controller Methodseasysoft · zentaopms · CWE-863 | Yüksek7,1 | — | %0,2 | 21 Eki 2026 |
27İzleyin | CVE-2026-114390İstismar yok | Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization in AJAX Handlerschamilo · chamilo-lms · CWE-862 | Orta6,9 | — | %0,2 | 21 Eki 2026 |
21İzleyin | CVE-2026-114389İstismar yok | Chamilo LMS 2.0.0-alpha.4 before 2.0.0-RC.3 Missing Authorization via openAnswerGradechamilo · chamilo-lms · CWE-639 | Orta5,3 | — | %0,2 | 21 Eki 2026 |
27İzleyin | CVE-2026-114388İstismar yok | Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization via GradebookControllerchamilo · chamilo-lms · CWE-862 | Orta6,9 | — | %0,1 | 21 Eki 2026 |
34İzleyin | CVE-2026-114387İstismar yok | Shopper 2.0.0 before 2.6.0 Privilege Escalation via Unguarded Livewire Componentsshopperlabs · shopper · CWE-862 | Yüksek8,7 | — | %0,3 | 21 Eki 2026 |
21İzleyin | CVE-2026-113601İstismar yok | Memos before 0.27.0 Missing Authorization via ActivityService ListActivities/GetActivityusememos · memos · CWE-862 | Orta5,3 | — | %0,3 | 20 Eki 2026 |
21İzleyin | CVE-2026-113600İstismar yok | Fat Free CRM before 0.26.0 IDOR via CommentsController update and destroyfatfreecrm · fat_free_crm · CWE-639 | Orta5,3 | — | %0,3 | 20 Eki 2026 |
21İzleyin | CVE-2026-113599İstismar yok | Modoboa before 2.8.0 IDOR via API v2 armessages Auto-Reply Creationmodoboa · modoboa · CWE-639 | Orta5,3 | — | %0,3 | 20 Eki 2026 |
21İzleyin | CVE-2026-113598İstismar yok | Modoboa before 2.8.0 IDOR via API v2 alarms bulk_deletemodoboa · modoboa · CWE-639 | Orta5,3 | — | %0,3 | 20 Eki 2026 |
21İzleyin | CVE-2026-113597İstismar yok | Blinko through 1.8.8 IDOR via Tag tRPC Router Proceduresblinkospace · blinko · CWE-639 | Orta5,3 | — | %0,2 | 20 Eki 2026 |
9İzleyin | CVE-2026-113596İstismar yok | Webstudio before 0.256.0 Information Disclosure via tRPC publishedBuilds and findManyByIdswebstudio-is · webstudio · CWE-639 | Düşük2,3 | — | %0,3 | 20 Eki 2026 |
21İzleyin | CVE-2026-113595İstismar yok | Sharkord before 0.0.26 Missing Authorization via changeLogo tRPC Routesharkord · sharkord · CWE-862 | Orta5,3 | — | %0,3 | 20 Eki 2026 |
21İzleyin | CVE-2026-113594İstismar yok | Sharkord before 0.0.8 Missing Authorization via updateSettings tRPC Routesharkord · sharkord · CWE-862 | Orta5,3 | — | %0,3 | 20 Eki 2026 |
21İzleyin | CVE-2026-113349İstismar yok | OpenCATS before 0.10.0 Missing Authorization in Calendar editEvent/deleteEventopencats · opencats · CWE-639 | Orta5,3 | — | %0,2 | 20 Eki 2026 |
21İzleyin | CVE-2026-112787İstismar yok | OpenCATS before 0.10.0 Missing Authorization in Reports Module EEO Reportsopencats · opencats · CWE-862 | Orta5,3 | — | %0,2 | 20 Eki 2026 |
21İzleyin | CVE-2026-112786İstismar yok | OpenCATS before 0.10.0 Missing Authorization via Import Revert Actionopencats · opencats · CWE-862 | Orta5,3 | — | %0,2 | 20 Eki 2026 |
21İzleyin | CVE-2026-112785İstismar yok | OpenCATS before 0.10.0 Missing Authorization in Saved-List AJAX Endpointsopencats · opencats · CWE-862 | Orta5,3 | — | %0,2 | 20 Eki 2026 |
21İzleyin | CVE-2026-112784İstismar yok | OpenCATS before 0.10.0 Missing Authorization via ajax/testEmailSettings.phpopencats · opencats · CWE-862 | Orta5,3 | — | %0,2 | 20 Eki 2026 |
21İzleyin | CVE-2026-112783İstismar yok | OpenCATS before 0.10.0 Missing Authorization via Activity AJAX Endpointsopencats · opencats · CWE-862 | Orta5,3 | — | %0,2 | 20 Eki 2026 |
21İzleyin | CVE-2026-112293İstismar yok | BoxyHQ SaaS Starter Kit through 1.6.0 Missing Authorization on Team Payment APIboxyhq · saas-starter-kit · CWE-862 | Orta5,3 | — | %0,1 | 19 Eki 2026 |
37İzleyin | CVE-2026-112292İstismar yok | CheckCle through 1.6.0 Missing Authorization via Empty PocketBase API Rulesoperacle · checkcle · CWE-862 | Kritik9,3 | — | %0,3 | 19 Eki 2026 |
27İzleyin | CVE-2026-112291İstismar yok | Flarum Extension Manager 2.0.0-beta.1 before 2.0.0-beta.8 Missing Authorization via Task APIflarum · extension manager · CWE-862 | Orta6,9 | — | %0,3 | 19 Eki 2026 |
28İzleyin | CVE-2026-110630İstismar yok | VentureDrake Laravel CRM before 2.4.0 Privilege Escalation via Unscoped Role Assignmentventuredrake · laravel-crm · CWE-863 | Yüksek7,0 | — | %0,6 | 14 Eki 2026 |
- CVE-2026-11600821İzleyin
DaybydayCRM through 2.2.1 Missing Authorization via ProjectsController updateAssign
OrtaCVSS 5,3İstismar yokEPSS %0bottelet · daybydaycrm24 Eki 2026
- CVE-2026-1155099İzleyin
Jitsu Console before 2.14.0-beta.41 Cross-Workspace Authorization Bypass via sources/state API
DüşükCVSS 2,3İstismar yokEPSS %0jitsucom · jitsu22 Eki 2026
- CVE-2026-11439128İzleyin
ZenTao PMS before 22.3 Authorization Bypass via Ajax Controller Methods
YüksekCVSS 7,1İstismar yokEPSS %0easysoft · zentaopms21 Eki 2026
- CVE-2026-11439027İzleyin
Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization in AJAX Handlers
OrtaCVSS 6,9İstismar yokEPSS %0chamilo · chamilo-lms21 Eki 2026
- CVE-2026-11438921İzleyin
Chamilo LMS 2.0.0-alpha.4 before 2.0.0-RC.3 Missing Authorization via openAnswerGrade
OrtaCVSS 5,3İstismar yokEPSS %0chamilo · chamilo-lms21 Eki 2026
- CVE-2026-11438827İzleyin
Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization via GradebookController
OrtaCVSS 6,9İstismar yokEPSS %0chamilo · chamilo-lms21 Eki 2026
- CVE-2026-11438734İzleyin
Shopper 2.0.0 before 2.6.0 Privilege Escalation via Unguarded Livewire Components
YüksekCVSS 8,7İstismar yokEPSS %0shopperlabs · shopper21 Eki 2026
- CVE-2026-11360121İzleyin
Memos before 0.27.0 Missing Authorization via ActivityService ListActivities/GetActivity
OrtaCVSS 5,3İstismar yokEPSS %0usememos · memos20 Eki 2026
- CVE-2026-11360021İzleyin
Fat Free CRM before 0.26.0 IDOR via CommentsController update and destroy
OrtaCVSS 5,3İstismar yokEPSS %0fatfreecrm · fat_free_crm20 Eki 2026
- CVE-2026-11359921İzleyin
Modoboa before 2.8.0 IDOR via API v2 armessages Auto-Reply Creation
OrtaCVSS 5,3İstismar yokEPSS %0modoboa · modoboa20 Eki 2026
- CVE-2026-11359821İzleyin
Modoboa before 2.8.0 IDOR via API v2 alarms bulk_delete
OrtaCVSS 5,3İstismar yokEPSS %0modoboa · modoboa20 Eki 2026
- CVE-2026-11359721İzleyin
Blinko through 1.8.8 IDOR via Tag tRPC Router Procedures
OrtaCVSS 5,3İstismar yokEPSS %0blinkospace · blinko20 Eki 2026
- CVE-2026-1135969İzleyin
Webstudio before 0.256.0 Information Disclosure via tRPC publishedBuilds and findManyByIds
DüşükCVSS 2,3İstismar yokEPSS %0webstudio-is · webstudio20 Eki 2026
- CVE-2026-11359521İzleyin
Sharkord before 0.0.26 Missing Authorization via changeLogo tRPC Route
OrtaCVSS 5,3İstismar yokEPSS %0sharkord · sharkord20 Eki 2026
- CVE-2026-11359421İzleyin
Sharkord before 0.0.8 Missing Authorization via updateSettings tRPC Route
OrtaCVSS 5,3İstismar yokEPSS %0sharkord · sharkord20 Eki 2026
- CVE-2026-11334921İzleyin
OpenCATS before 0.10.0 Missing Authorization in Calendar editEvent/deleteEvent
OrtaCVSS 5,3İstismar yokEPSS %0opencats · opencats20 Eki 2026
- CVE-2026-11278721İzleyin
OpenCATS before 0.10.0 Missing Authorization in Reports Module EEO Reports
OrtaCVSS 5,3İstismar yokEPSS %0opencats · opencats20 Eki 2026
- CVE-2026-11278621İzleyin
OpenCATS before 0.10.0 Missing Authorization via Import Revert Action
OrtaCVSS 5,3İstismar yokEPSS %0opencats · opencats20 Eki 2026
- CVE-2026-11278521İzleyin
OpenCATS before 0.10.0 Missing Authorization in Saved-List AJAX Endpoints
OrtaCVSS 5,3İstismar yokEPSS %0opencats · opencats20 Eki 2026
- CVE-2026-11278421İzleyin
OpenCATS before 0.10.0 Missing Authorization via ajax/testEmailSettings.php
OrtaCVSS 5,3İstismar yokEPSS %0opencats · opencats20 Eki 2026
- CVE-2026-11278321İzleyin
OpenCATS before 0.10.0 Missing Authorization via Activity AJAX Endpoints
OrtaCVSS 5,3İstismar yokEPSS %0opencats · opencats20 Eki 2026
- CVE-2026-11229321İzleyin
BoxyHQ SaaS Starter Kit through 1.6.0 Missing Authorization on Team Payment API
OrtaCVSS 5,3İstismar yokEPSS %0boxyhq · saas-starter-kit19 Eki 2026
- CVE-2026-11229237İzleyin
CheckCle through 1.6.0 Missing Authorization via Empty PocketBase API Rules
KritikCVSS 9,3İstismar yokEPSS %0operacle · checkcle19 Eki 2026
- CVE-2026-11229127İzleyin
Flarum Extension Manager 2.0.0-beta.1 before 2.0.0-beta.8 Missing Authorization via Task API
OrtaCVSS 6,9İstismar yokEPSS %0flarum · extension manager19 Eki 2026
- CVE-2026-11063028İzleyin
VentureDrake Laravel CRM before 2.4.0 Privilege Escalation via Unscoped Role Assignment
YüksekCVSS 7,0İstismar yokEPSS %0venturedrake · laravel-crm14 Eki 2026