CVE-Newgen-Software-Advisories

Newgen Software – CVE 概念验证 此仓库包含多个在 Newgen Software Technologies Limited 开发的产品中发现的 CVE 漏洞 的 概念验证（PoC） 材料和技术文档。 此处记录的漏洞已公开分配 CVE 编号，并被 MITRE 和 NVD 引用。 包含的 CVE CVE-2025-65742 – Newgen OmniDocs LDAP 管理员功能级别授权缺陷（BFLA） CVE-2025-69907 – Newgen OmniDocs 未授权信息泄露 CVE-2025-69908 – Newgen OmniApp 特权用户名泄露 研究...

CVE-2024-5685 Broken Function Level Authorization (BFLA) in snipe/snipe-it

Users with "User:edit" and "Self:api" permissions can promote or demote themselves or other users by performing changes to the group's memberships via API call.This issue affects snipe-it: from v4.6.17 through v6.4.1...

Navigating the Sea, Exploiting DigitalOcean APIs

Cloud service providers are now fundamental elements of internet infrastructure, granting organizations and individuals the ability to scale and efficiently store, manage, and process data. DigitalOcean is one such provider, well-regarded for its simplicity and developer-friendly platform, and...