lighthousekeeper1212

DaybydayCRM through 2.2.1 Missing Authorization via ProjectsController updateAssign

Jitsu Console before 2.14.0-beta.41 Cross-Workspace Authorization Bypass via sources/state API

Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization via GradebookController

Shopper 2.0.0 before 2.6.0 Privilege Escalation via Unguarded Livewire Components

Jorani before 1.0.4 Missing Authorization and SSRF via Contracts::import()

Formbricks before 4.9.0 Cross-Organization IDOR in Server Actions via organizationId

Sharkord before 0.0.26 Missing Authorization via changeLogo tRPC Route

Fat Free CRM before 0.26.0 IDOR via CommentsController update and destroy

Memos before 0.27.0 Missing Authorization via ActivityService ListActivities/GetActivity

Webstudio before 0.256.0 Information Disclosure via tRPC publishedBuilds and findManyByIds