https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 22:59:49 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-109164 <p>TDuck survey form through 6.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users&#39; form submissions by supplying arbitrary submission ids. Attackers can place their own formKey in the path and iterate sequential submission ids in the request body to permanently delete submissions platform-wide.</p> <p>TDuck survey form through 6.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users&#39; form submissions by supplying arbitrary submission ids. Attackers can place their own formKey in the path and iterate sequential submission ids in the request body to permanently delete submissions platform-wide.</p> https://db.gcve.eu/vuln/fkie_cve-2026-109164 https://db.gcve.eu/vuln/ghsa-cjgh-vqwv-7g46 <p>TDuck survey form through 6.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users&#39; form submissions by supplying arbitrary submission ids. Attackers can place their own formKey in the path and iterate sequential submission ids in the request body to permanently delete submissions platform-wide.</p> <p>TDuck survey form through 6.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users&#39; form submissions by supplying arbitrary submission ids. Attackers can place their own formKey in the path and iterate sequential submission ids in the request body to permanently delete submissions platform-wide.</p> https://db.gcve.eu/vuln/ghsa-cjgh-vqwv-7g46