https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 13:37:55 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-18652 <p>Velociraptor allows reading Stacked result sets from the GUI.  Velociraptor&#39;s multi-tenant design stores sub orgs within the datastore directory. The path requested by the GUI is not correctly checked against the prefix deny list, allowing result sets to read from denied prefixes.</p> <p>In particular, a user with read access to the root org can access result sets from child orgs.</p> <p>Velociraptor allows reading Stacked result sets from the GUI.  Velociraptor&#39;s multi-tenant design stores sub orgs within the datastore directory. The path requested by the GUI is not correctly checked against the prefix deny list, allowing result sets to read from denied prefixes.</p> <p>In particular, a user with read access to the root org can access result sets from child orgs.</p> https://db.gcve.eu/vuln/fkie_cve-2026-18652 https://db.gcve.eu/vuln/ghsa-9qrg-7832-x9w4 <p>Velociraptor allows reading Stacked result sets from the GUI.  Velociraptor&#39;s multi-tenant design stores sub orgs within the datastore directory. The path requested by the GUI is not correctly checked against the prefix deny list, allowing result sets to read from denied prefixes.</p> <p>In particular, a user with read access to the root org can access result sets from child orgs.</p> <p>Velociraptor allows reading Stacked result sets from the GUI.  Velociraptor&#39;s multi-tenant design stores sub orgs within the datastore directory. The path requested by the GUI is not correctly checked against the prefix deny list, allowing result sets to read from denied prefixes.</p> <p>In particular, a user with read access to the root org can access result sets from child orgs.</p> https://db.gcve.eu/vuln/ghsa-9qrg-7832-x9w4 https://db.gcve.eu/vuln/wid-sec-w-2026-2728 <p>Ein Angreifer kann mehrere Schwachstellen in Rapid7 Velociraptor ausnutzen, um erweiterte Berechtigungen, einschließlich Administratorrechte, zu erlangen, Sicherheitsmaßnahmen zu umgehen, Spoofing- und Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, sensible Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Rapid7 Velociraptor ausnutzen, um erweiterte Berechtigungen, einschließlich Administratorrechte, zu erlangen, Sicherheitsmaßnahmen zu umgehen, Spoofing- und Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, sensible Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-2728