16836 matches found
CVE-2026-107431
Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetFormBuilder: from n/a through 3.6.6...
CVE-2023-22515
CVE-2023-22515: Confluence Data Center & Server Privilege Escalation Vulnerability Analysis Report 1. Overview CVE-2023-22515 is a critical Broken Access Control vulnerability discovered in Atlassian Confluence Data Center and Server products. An unauthenticated attacker can remotely reactivate...
route-detect
route-detect Find authentication authn and authorization authz security bugs in web application routes: Routes fromkoel streaming server Web application HTTP route authn and authz bugs are some of the most common security issues found today. These industry standard resources highlight the severit...
CVE-2026-110227
The WordPress Restricted Site Access plugin (versions
ASUS-SmartHome-Exploit
ASUS-SmartHome-Exploit CVE IDs CVE-2019-11061 : Broken access control in HG100 Affected products : ASUS SmartHome Gateway HG100 Firmware version Affected products : ASUS SmartHome Android APP version 3.0.45190701 Description If the attacker is on the same internal network as the HG100 or a mobile...
CVE-2025-69459
CVE-2025-69459 β Movie Rating System 1.0 Broken Access Control Admin Account Creation Unauthenticated WriteUp CVE-2025-69459 β ExploitDB 50621...
CVE-2023-22515-Scan
CVE-2023-22515-Scan About This is simple scanner for CVE-2023-22515, a critical vulnerability in Atlassian Confluence Data Center and Server that is actively being exploited in the wild by threat actors in order "to create unauthorized Confluence administrator accounts and access Confluence...
confluence-cve-2023-22515
confluence-cve-2023-22515 Confluence Broken Access Control : CVE-2023-22515...
CVE-2024-8949-POC
Broken Access Control Vulnerability was discoverd in Sourcecodester Online Eyewear Shopping Website ID,Cart ID Manipulation Leads to Unwanted Item Addition and Deletion into User's Cart CVE-2024-8949 Vendor: Sourcecodester...
cve-2023-22515-1
π‘οΈ CVE-2023-22515: In-Depth Analysis of Confluence Privilege Escalation Vulnerability !IMPORTANT Urgent Security Alert : This vulnerability has a CVSS score of 10.0 Critical , the highest risk level. If you are using an affected version, immediate patching is required. 1. Overview CVE-2023-22515...
CVE-2025-22828
CVE-2025-22828 π Description Apache CloudStack 4.16.0 and later versions have a broken access control issue that allows users with knowledge of resource UUIDs to read or add comments annotations on resources they are not authorized to access. UUIDs can be exposed in various parts of the...
CVE-2026-63174
Omnispace Agora Project versions prior to 26.10.0 are vulnerable to a broken access control vulnerability. The issue stems from a missing readRight() check within the import flow's join INSERT, which allows the spaceAffectList affectation to occur without verifying the caller's rights to the targ...
CVE-2026-63153
The Omnispace Agora Project versions prior to 26.10.0 are susceptible to a broken access control vulnerability within the setAffectations() function. This flaw allows authenticated attackers to insert access-right records for a target space provided by the caller without the system verifying if t...
CVE-2026-63163
The Omnispace Agora Project before version 26.10.0 is vulnerable to a broken access control flaw in the MobileFileDownload route. The root cause is that the system relies on a predictable md5(filename) token for access rather than performing a proper authorization check. This allows unauthenticat...
CVE-2026-109898
The WP Event Solution plugin for WordPress (versions up to and including 4.1.25 ) is vulnerable to a Broken Access Control issue. The root cause is a Missing Authorization flaw (CWE-862), which allows for the exploitation of incorrectly configured access control security levels . This vulnerabili...
CVE-2026-109896
The Download Monitor integration for WooCommerce plugin (versions n/a through 1.0.3 ) contains a Broken Access Control vulnerability due to Missing Authorization . Specifically, the flaw allows for Exploiting Incorrectly Configured Access Control Security Levels . The impact is categorized as Med...
CVE-2026-109890
The Premium Addons for Elementor WordPress plugin (versions up to and including 4.11.110 ) is vulnerable to a Broken Access Control issue (CWE-862). The root cause is Missing Authorization , which allows for exploiting incorrectly configured access control security levels. This vulnerability carr...
CVE-2023-22515-POC
CVE-2023-22515 CVE-2023-22515, a critical vulnerability affecting on-premises instances of Confluence Server and Confluence Data Center, a Broken Access Control vulnerability. Attlassian has provided a CVSS base score of 10.0 Exploit Brief explanation: 1- Due to how Xwork interceptors parses...
ninjasworkout
Damn Vulnerable NodeJS Application Quick Start Download the Repo = run npm i Afer Installing all dependency just run the application node app.js or nodemon app.js ADDED BUGS Prototype Pollution β 1 No SQL Injection β 2 Cross site Scripting β 3 Broken Access Control β 4 Broken Session Management β 5 We...
CVE-2024-3656
Keycloak 24.0.5 is vulnerable to Broken Access Control vulnerability, where the attacker can use any authenticated user to perform some api action such as : Test LDAP connections via the testLDAPConnection endpoint. Retrieve unmanaged attributes of any user via the getUnmanagedAttributes endpoint...