VulnCheck

SPIP < 4.4.18 Code Injection via Navigation Endpoint on SQLite

Flarum < 1.8.16 Session Persistence via Improper Access Token Revocation

Flarum < 1.8.16 Password Reset Token Expiry Bypass via POST /reset

Synk Sweater Comb < 3.8.8 Command Injection via .vervet.yaml Branch Name

Dolibarr < 24.0.0 Members REST API Sensitive Data Exposure via Member Endpoints

Dolibarr < 24.0.0 Users REST API SQL Injection via filter parameter

Dolibarr < 24.0.0 Expense Report REST API Improper Authorization via Update Endpoint

Dolibarr < 24.0.0 REST API Improper Authorization via User Update Endpoint

Dolibarr < 24.0.0 REST API Broken Object-Level Authorization via Bank Account Routes

Dolibarr < 24.0.0 Payments REST API Improper Authorization via Delete Endpoint