EUVD-2026-87361

Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - Translate Extension allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - Translate Extension: from before 1.46.1, 1.45.5, 1.43.10...

EUVD-2026-87327

Zoraxy versions 3.2.3 through 3.3.4 fail to properly parse IPv6 addresses in the RemoteAddr field when setting forwarded headers. Unauthenticated attackers connecting over IPv6 can supply arbitrary X-Forwarded-For values to spoof their source IP and bypass authorization provider IP-based access...

jsherp-user-info-idor

jshERP /user/info IDOR — Paquete de envío para VulDB Este repositorio contiene un aviso independiente estilo VulDB para una referencia directa a objetos insegura autenticada en jshERP. Producto: jshERP Commit probado: ad6cf886dd4e0676723060a25d361c703dc56bc0 3.6-SNAPSHOT, HEAD de master en GitHub...

EUVD-2026-87291

TDuck survey form through 6.0 lacks authorization checks on FormThemeController write endpoints for global form themes and categories. Authenticated non-admin users can add, modify, or delete themes and theme categories affecting forms owned by other users...

EUVD-2026-87273

GLPI is a free asset and IT management software package. From 11.0.0 until 11.0.8, a low-privileged authenticated user can use the new API v2 to perform update operations that the same user is normally forbidden to perform through the user interface. The API update flow does not consistently...

CVE-2026-56733

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2 and 7.1.0, this issue concerns a lack of discursive validation within the authorization cascade. It has been determined that the system-level enforcement of access restrictions during the initialization of new...

CVE-2026-56723

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, a customer who can view a ticket cannot see internal ticket articles through the article listing API. However, the same customer can directly request an attachment belonging to an internal article via the attachme...

My-CVEs

我发现的漏洞列表。 部分漏洞附有深入的技术分析、漏洞利用程序甚至模糊测试会话的详细解说。 部分漏洞未分配CVE编号，因为维护者不再回应，或维护者不认为这是安全问题，我决定将这些也公开。 CVE| 目标| 简要描述| 发现方法| 报告/文章/其他 ---|---|---|---|--- CVE-2025-58364| CUPS - Linux 打印堆栈| 通过伪造打印机响应实现远程拒绝服务| 对IPP数据包反序列化的模糊测试| 包含模糊测试与漏洞利用的分析 CVE-2025-61915| CUPS - Linux 打印堆栈| 解析配置时的栈下溢，并附带ROP链漏洞利用程序|...

EUVD-2026-87211

Bludit CMS through 3.22.0 contains an authorization bypass vulnerability that allows authenticated users with the Author role to enumerate and delete media files belonging to pages owned by other users, including administrators, by supplying arbitrary uuid parameters to unprotected AJAX endpoints...

DIR8xx_PoC

phpcgi phpcgi se encarga de procesar las solicitudes a páginas .php, .asp y .txt. Además, comprueba si un usuario está autorizado o no. No obstante, si una solicitud se elabora de la manera adecuada, un atacante puede eludir fácilmente la autorización y ejecutar un script que devuelve un nombre d...

EUVD-2026-87205

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, a customer who can view a ticket cannot see internal ticket articles through the article listing API. However, the same customer can directly request an attachment belonging to an internal article via the attachme...

cve-2023-34034

cve-2023-34034 Demostración del bypass de autorización CVE-2023-34034 en Spring Security. Ver CVE-2023-34034 Spring Security Authorization Bypass en Don't Panic!...

EUVD-2026-87160

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 4.3.3, 4.2.9 , 4.1.14, 4.0.24, and 3.13.18, Federation upstream in RabbitMQ skips vhost authorization allowing cross-vhost message access. what the bug lets you do. A policymaker on one vhost reads and drains messages out of another...

CVE-2026-85292

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane's UserController compares the session usertype value with the required role by using PHP's loose inequality operator. Under a non-standard session backend that returns...

CVE-2026-85292 InvoicePlane: Loose Type Comparison in Core Authentication Check (Defense-in-Depth)

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane's UserController compares the session usertype value with the required role by using PHP's loose inequality operator. Under a non-standard session backend that returns...

CVE-2026-85292

In InvoicePlane versions prior to 1.7.2 , a loose type comparison in the User_Controller allows for potential authentication or authorization bypass . The application uses PHP's loose inequality operator to compare the session user_type value against the required role. In specific configurations ...

NextSecureScan

NextSecureScan - Escáner de Vulnerabilidad de Middleware Next.js-CVE-2025-29927 NextSecureScan es un escáner de seguridad integral diseñado específicamente para identificar vulnerabilidades de omisión de autorización relacionadas con middleware CVE-2025-29927 en aplicaciones Next.js. Este escáner...

CVE-2022-22978

CVE 2022-22978: Bypass de autorización en RegexRequestMatcher 🥶 Resumen Según la información que he investigado, esta es una vulnerabilidad relacionada con la clase RegexRequestMatcher del framework Spring Security. En concreto, las aplicaciones que usan RegexRequestMatcher y que en su expresión...

Autorize

Autorize Autorize 是一款开源的 自动授权与身份验证实施检测 扩展，适用于 Burp Suite 。 它旨在帮助应用安全工程师和渗透测试人员，以 规模化 且 最小化手动操作 的方式，识别 Web 应用中的 授权绕过 和 身份验证漏洞 。 Autorize 会被动监控 高权限用户 产生的流量，自动使用 低权限 或 未认证 上下文重放请求，并分析服务器响应，以判断访问控制是否得到正确实施。 该扩展由应用安全研究员及实践者 Barak Tawily 使用 Jython 编写。 主要特性 自动授权实施测试 自动身份验证实施测试 透明请求修改与重放...

CVE-2024-50395

CVE-2024-50395 Información de CVE Se ha reportado una vulnerabilidad de omisión de autorización mediante una clave controlada por el usuario que afecta al complemento Media Streaming. Si se explota, la vulnerabilidad podría permitir a atacantes de la red local obtener privilegios. Ya hemos...