https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 18:44:51 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-18635 <p>Velociraptor&#39;s VQL has a query() plugin which allows running a VQL query in a different org or user context. To be able to run as a different user, the calling user needs to have the IMPERSONATE permission (usually only given to administrators). Velociraptor versions prior to 0.77.2 evaluate this permission against the caller&#39;s org instead of against the target org.</p> <p>This allows an administrator in one org to impersonate another user in another org, in which they may not have the IMPERSONATE permission.</p> <p>Velociraptor&#39;s VQL has a query() plugin which allows running a VQL query in a different org or user context. To be able to run as a different user, the calling user needs to have the IMPERSONATE permission (usually only given to administrators). Velociraptor versions prior to 0.77.2 evaluate this permission against the caller&#39;s org instead of against the target org.</p> <p>This allows an administrator in one org to impersonate another user in another org, in which they may not have the IMPERSONATE permission.</p> https://db.gcve.eu/vuln/fkie_cve-2026-18635 https://db.gcve.eu/vuln/ghsa-5h5v-cxvm-wgr3 <p>Velociraptor&#39;s VQL has a query() plugin which allows running a VQL query in a different org or user context. To be able to run as a different user, the calling user needs to have the IMPERSONATE permission (usually only given to administrators). Velociraptor versions prior to 0.77.2 evaluate this permission against the caller&#39;s org instead of against the target org.</p> <p>This allows an administrator in one org to impersonate another user in another org, in which they may not have the IMPERSONATE permission.</p> <p>Velociraptor&#39;s VQL has a query() plugin which allows running a VQL query in a different org or user context. To be able to run as a different user, the calling user needs to have the IMPERSONATE permission (usually only given to administrators). Velociraptor versions prior to 0.77.2 evaluate this permission against the caller&#39;s org instead of against the target org.</p> <p>This allows an administrator in one org to impersonate another user in another org, in which they may not have the IMPERSONATE permission.</p> https://db.gcve.eu/vuln/ghsa-5h5v-cxvm-wgr3 https://db.gcve.eu/vuln/wid-sec-w-2026-2728 <p>Ein Angreifer kann mehrere Schwachstellen in Rapid7 Velociraptor ausnutzen, um erweiterte Berechtigungen, einschließlich Administratorrechte, zu erlangen, Sicherheitsmaßnahmen zu umgehen, Spoofing- und Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, sensible Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Rapid7 Velociraptor ausnutzen, um erweiterte Berechtigungen, einschließlich Administratorrechte, zu erlangen, Sicherheitsmaßnahmen zu umgehen, Spoofing- und Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, sensible Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-2728