CVE-2026-129139

The paicoding platform (commits b8206b9 through 903adce ) is vulnerable to account takeover due to predictable credentials for accounts created via ZSXQ login. The root cause is that the loginByZsxq function derives both the username and password solely from the member's ZSXQ number . An unauthen...

EUVD-2026-125621

paicoding from commit b8206b9 through commit 903adce uses predictable credentials for accounts created via ZSXQ login, because loginByZsxq derives both the username and password solely from the member's ZSXQ number. Unauthenticated attackers can read that number from the victim's /user/userId...

CVE-2026-77439

Summary Two related broken access control vulnerabilities in album member management allow any album Editor to: 1. Privilege escalation — promote themselves or any member to the Owner role via "PATCH /api/albums/:albumId/user/:userId" with ""role": "owner"" 2. Owner removal — delete any Owner-rol...

CVE-2026-59258

immich before 3.0.3 contains a broken access control vulnerability in the PUT /albums/:id/user/:userId endpoint that allows shared album editors to modify member roles without owner-only restrictions. Attackers with editor access can demote the album owner to editor and promote themselves to owne...

CVE-2026-59258: Incorrect Authorization

immich before 3.0.3 contains a broken access control vulnerability in the PUT /albums/:id/user/:userId endpoint that allows shared album editors to modify member roles without owner-only restrictions. Attackers with editor access can demote the album owner to editor and promote themselves to owne...

CVE-2022-32170

The “Bytebase” application does not restrict low privilege user to access admin “projects“ for which an unauthorized user can view the “projects“ created by “Admin” and the affected endpoint is “/api/project?user=$userId”...

CVE-2022-32170: Improper Authorization

The “Bytebase” application does not restrict low privilege user to access admin “projects“ for which an unauthorized user can view the “projects“ created by “Admin” and the affected endpoint is “/api/project?user=$userId”...

CVE-2017-16821

b3log Symphony aka Sym 2.2.0 has XSS in processor/AdminProcessor.java in the admin console, as demonstrated by a crafted X-Forwarded-For HTTP header that is mishandled during display of a client IP address in /admin/user/userid...

PT-2017-14581

Name of the Vulnerable Software and Affected Versions b3log Symphony aka Sym version 2.2.0 Description The issue concerns a problem where a crafted X-Forwarded-For HTTP header is mishandled, leading to XSS in the admin console. This occurs during the display of a client IP address in the...