CVE-2026-93363

The @payloadcms/storage-vercel-blob storage adapter for Payload contains an improper access control vulnerability that allows authenticated users to bypass collection-level permissions by accessing the client-upload route directly. Attackers can upload files through the client-upload endpoint...

CVE-2026-67241

A flaw was found in rabbitmq-server. This vulnerability allows an authenticated user to bypass access controls and perform unauthorized message routing. When an exchange is declared via the Advanced Message Queuing Protocol AMQP 1.0 management interface, the application fails to verify write...

cve-2023-34034

cve-2023-34034 Demonstration of CVE-2023-34034 authorization bypass in Spring Security. See CVE-2023-34034 Spring Security Authorization Bypass on Don't Panic!...

confluence-cve-2023-22515

confluence-cve-2023-22515 Confluence Broken Access Control : CVE-2023-22515...

CVE-2021-41805

CVE-2021-41805 Hashicorp Consul RCE via API HashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has Incorrect Access Control. An ACL token with the default operator:write permissions in one namespace can be used for unintended privilege escalation in a differe...

packetfence

PacketFence What is PacketFence? PacketFence is a fully supported, trusted, Free and Open Source network access control NAC system. Boasting an impressive feature set including a captive-portal for registration and remediation, centralized wired and wireless management, 802.1X support, layer-2...

cve-2022-31813

CVE-2022-31813 Vulnerability Checker Author : Derek Odiorne GitHub : @dodiorne Version : 1.2 Last Updated : May 21, 2025 MITRE ATT &CK Technique: T1190 – Exploit Public-Facing Application 🧠 Description This tool is a black-box vulnerability scanner for detecting CVE-2022-31813 , a path traversal...

jailer

Jailer - eBPF Mandatory Access Control Warning : This project is under heavy development and is NOT ready for production use. APIs, policy formats, and behavior may change without notice. Use for testing and experimentation only. Acknowledgments Note : This is an independent implementation and is...

CVE-2024-8949-POC

Broken Access Control Vulnerability was discoverd in Sourcecodester Online Eyewear Shopping Website ID,Cart ID Manipulation Leads to Unwanted Item Addition and Deletion into User's Cart CVE-2024-8949 Vendor: Sourcecodester...

smart-contract-vulnerabilities

Smart Contract Vulnerabilities A collection of smart contract vulnerabilities along with prevention methods. See /references for LLM-optimized references. Access Control Authorization Through tx.origin Insufficient Access Control Delegatecall to Untrusted Callee Signature Malleability Missing...

casbin

Apache Casbin News : still worry about how to write the correct Apache Casbin policy? Apache Casbin online editor is coming to help! Try it at: https://casbin.apache.org/editor/ Apache Casbin is a powerful and efficient open-source access control library for Golang projects. It provides support f...

CVE-2022-24924

Improper access control vulnerability in LiveWallpaperService CVE-2022-24924SVE-2021-24089 Windows version tested: Windows 10 20H2 Build 19042.1348 64bit Live Wallpaper Version: 3.0.9.0 or earlier There is a LiveWallpaperService that works by default in Samsung laptops, but there was a...

Autorize

Autorize Autorize is an open-source automatic authorization and authentication enforcement detection extension for Burp Suite. It is designed to assist application security engineers and penetration testers in identifying authorization bypasses and authentication weaknesses in web applications—at...

kur

kur A code simply offers the ability to kernel-mode read / write memory from user-mode using vulnerable signed driver. It's simply utilizing MmCopyVirtualMemory, which is undocumented yet one of the most common API, in kernel mode so you can read / write any user-mode memory without having to wor...

CVE-2026-88421

Incorrect access control in the BlogPage.getentries component of APSL puput v1.2.1 through v2.2.0 allows unauthenticated attackers to view restricted blog entries via the blog index, the tag, category, author and date archives, the sidebar widgets, or the RSS feed...

CVE-2026-79153

Seclore FileSecure Desktop Client before 3.25.1.0 contains improper access control vulnerability in the kernel-mode driver component that allows an authenticated local user to gain elevated privileges to NT AUTHORITY\SYSTEM on affected systems...

403bypasser

403bypasser Türkçe 403bypasser , hedef sayfalardaki erişim kontrolü kısıtlamalarını aşmak için kullanılan teknikleri otomatikleştirir. Bu araç geliştirilmeye devam edecektir, katkılara açıktır. English 403bypasser automates the techniques used to circumvent access control restrictions on target...

WebSecProbe

.png WebSecProbe is a security testing utility designed for web security researchers, penetration testers, and system administrators to analyze HTTP 403 Forbidden responses and access control behavior in web applications. The tool assists in identifying misconfigurations, inconsistent authorizati...

nomore403

NoMore403 nomore403 es una herramienta de línea de comandos para probar bypass de control de acceso HTTP e inconsistencias en analizadores alrededor de respuestas 401, 403 y relacionadas. La herramienta está diseñada para trabajo práctico en seguridad web: bug bounty, pruebas de penetración,...

CVE-2024-31719----AMI-Aptio-5-Vulnerability

AMI-Aptio--NvLock-Vulnerability Information CVE ID: CVE-2024-31719 Link Vulnerability Type: Incorrect Access Control Vendoer of Product: American Megatrends International, LLC. Product: AMI Aptio - 5 Atack Type: Local Attack Vector The attacker can easily bypass the NvLock module's access...