169690 matches found
CVE-2026-111364
MinDoc through 2.2-beta.2 contains an insecure direct object reference vulnerability in DocumentController.Content that allows authenticated users to read documents from unauthorized books. Attackers holding a non-observer role on any book can name that book and iterate sequential document ids to...
CVE-2026-111353
Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any authenticated user to create time entries and attachments as other users by supplying a user id in the request body. Attackers can send POST requests to /api/v1/time/new or...
CVE-2026-111351
metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestController that allows authenticated low-privilege users to bypass role and organization access checks. Attackers can call the getBoard, getCard, addCard, removeCard and patchCard handlers to read...
CVE-2026-111313
JobOps through 0.13.1 contains a server-side request forgery vulnerability in the POST /api/manual-jobs/fetch handler that allows authenticated users, or unauthenticated clients in demo mode, to make the server fetch internal destinations. Attackers can supply loopback, private, or cloud metadata...
CVE-2026-111321
TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make the backend send arbitrary HTTP requests by supplying an unvalidated OpenAPI servers0.url in a user-defined action. Attackers holding a project API key or console admin login c...
CVE-2026-111363 BISHENG through 3.0.0-beta4 IDOR via /api/v1/knowledge/file_bbox
BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' parsed documents by supplying arbitrary fileid values. Attackers can enumerate sequential file ids against GET /api/v1/knowledge/filebbox to...
CVE-2026-111355
The zhontai Admin.Core software, through version 10.1.0 , is affected by an authorization bypass vulnerability (CWE-635). The root cause allows authenticated users to bypass department DataScope restrictions by providing record IDs that are outside of their designated scope. Specifically, attacke...
CVE-2026-111353 Peppermint through 0.5.5 Missing Authorization via Time-Tracking and Attachment Upload Endpoints
Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any authenticated user to create time entries and attachments as other users by supplying a user id in the request body. Attackers can send POST requests to /api/v1/time/new or...
CVE-2026-111353
Versions of Peppermint through 0.5.5 are vulnerable to a missing authorization flaw (CWE-862). This issue allows any authenticated user to create time entries and file attachments as different users by providing a specific user ID in the request body. Vulnerable endpoints include /api/v1/time/new...
CVE-2026-111350 Papermark through 0.22.0 Missing Authorization in Data Room Viewer Group API
Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to delete other teams' viewer groups and share links. Attackers who know a victim team's data room and group identifiers can send DELETE requests, read group...
CVE-2026-111344 APITable through 1.14.0-beta Authorization Bypass via GET /node/{nodeId}/description
APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows authenticated users to read node descriptions from other spaces by supplying a user-controlled nodeId. Attackers can request GET /node/nodeId/description, which skips space membership and node permission check...
CVE-2026-111331
Dokploy versions through 0.30.8 are vulnerable to a cross-organization authorization bypass within the port tRPC router . The root cause is a failure to verify the target application's organization during specific requests. Authenticated owners or admins can exploit this by supplying a known port...
CVE-2026-105039
EnergizeLab station-middleware NestJS Docker images 1.6.5 through 1.8.2 do not check user roles on administrative APIs. Any authenticated low-privilege user can retrieve AI provider keys and change configuration and object-store contents...
POC-CVE-2026-10134
Description PoC exploit code for CVE-2026-10134 Usage python3 poc.py -u -name -pwd -c...
CVE-2026-33910_SqlInjectionVulnerabilityOpenEMR8.0.0.2
CVE-2026-33910 - SQL Injection Vulnerability in OpenEMR Weakness CWE-89 Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize ...
-CVE-2023-33177-
Xibo CMS CVE-2023-33177 Vulnerability Tester Automated security testing tool for CVE-2023-33177 - Zip Slip Path Traversal vulnerability in Xibo CMS that leads to Remote Code Execution RCE. ⚠️ Disclaimer This tool is for educational and authorized testing purposes only. Only use on systems you own...
CVE-2025-68613
CVE-2025-68613 — n8n RCE via Expression Injection For educational and authorized security research purposes only. Overview Critical RCE vulnerability CVSS 9.9 in n8n workflow automation platform. Authenticated users can execute arbitrary OS commands via the executeCommand node, bypassing sandbox...
CVE-2025-53640
CVE-2025-53640 – Authenticated User Enumeration in CERN's Indico BOLA Vulnerability PoC and technical analysis of CVE-2025-53640: a Broken Object Level Authorization BOLA vulnerability in Indico enables authenticated user enumeration via endpoint, exposing names, emails, and affiliations. Include...
Backstage: Improper access control in backend action invocation
Impact An authenticated user could invoke actions that an operator had excluded through action configuration. Existing action permissions and downstream authorization remain enforced. Patches Patched in @backstage/backend-defaults version 0.17.8 Workarounds Limit access to action invocation...
