66 matches found
CVE-2026-35045-PoC
CVE-2026-35045 โ Broken Object-Level Authorization in Tandoor Recipes Summary The PUT /api/recipe/batchupdate/ endpoint in Tandoor Recipes v2.6.1 allows any authenticated user within a Space to modify any recipe in that Space โ including private recipes owned by other users. This completely...
bola-CVE-2023-27524
bola-CVE-2023-27524 ๐ README.md โ BOLA CVE-2023-27524 Demo Project root@kitploit: ๐ Broken Object Level Authorization BOLA Demonstration CVE-2023-27524 Security Analysis & Fix --- ๐ Project Overview This project demonstrates a real-world Broken Object Level Authorization BOLA vulnerability and it...
CVE-2026-86283
MISP's UiBeta theme collection view app/View/Themed/UiBeta/Collections/view.ctp performed a secondary query of member events by UUID without applying the caller's access control list ACL. The CollectionsController::view action correctly resolved collection element UUIDs through...
EUVD-2026-72137
MISP's UiBeta theme collection view app/View/Themed/UiBeta/Collections/view.ctp performed a secondary query of member events by UUID without applying the caller's access control list ACL. The CollectionsController::view action correctly resolved collection element UUIDs through...
PT-2026-86533
Name of the Vulnerable Software and Affected Versions MISP affected versions not specified Description An authorization bypass exists in the UiBeta theme collection view at the presentation layer. The view template app/View/Themed/UiBeta/Collections/view.ctp performs a secondary query of member...
EUVD-2026-69851
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify ownership of a curriculum object before acting on it, allowing authenticated users with the instructor role to delete or modify curriculum sections and materials belonging to courses owned by other...
EUVD-2026-66387
TarsWeb enforces its per-application roles by calling AuthService from individual controller methods, and four methods in app/controller/patch/PatchController.js make no such call. uploadAndPublish accepts a package upload and then builds and dispatches a deployment task to every server matching...
CVE-2026-38568
HireFlow v1.2 is vulnerable to Incorrect Access Control. The application does not enforce object-level authorization on the /candidate/ and /interview/ endpoints. The route handlers retrieve records by the user-supplied ID without verifying that the requesting user is the owner or has an authoriz...
EUVD-2026-29116
HireFlow v1.2 is vulnerable to Incorrect Access Control. The application does not enforce object-level authorization on the /candidate/ and /interview/ endpoints. The route handlers retrieve records by the user-supplied ID without verifying that the requesting user is the owner or has an authoriz...
CVE-2026-38568
HireFlow v1.2 is vulnerable to Incorrect Access Control. The application does not enforce object-level authorization on the /candidate/ and /interview/ endpoints. The route handlers retrieve records by the user-supplied ID without verifying that the requesting user is the owner or has an authoriz...
CVE-2026-38568
HireFlow v1.2 is vulnerable to Incorrect Access Control. The application does not enforce object-level authorization on the /candidate/ and /interview/ endpoints. The route handlers retrieve records by the user-supplied ID without verifying that the requesting user is the owner or has an authoriz...
CVE-2026-38568
HireFlow v1.2 is vulnerable to Incorrect Access Control. The application does not enforce object-level authorization on the /candidate/ and /interview/ endpoints. The route handlers retrieve records by the user-supplied ID without verifying that the requesting user is the owner or has an authoriz...
CVE-2026-3999
A broken access control may allow an authenticated user to perform a horizontal privilege escalation. The vulnerability only impacts specific configurations...
EUVD-2026-11772
A broken access control may allow an authenticated user to perform a horizontal privilege escalation. The vulnerability only impacts specific configurations...
CVE-2026-3999
A broken access control may allow an authenticated user to perform a horizontal privilege escalation. The vulnerability only impacts specific configurations...
CVE-2026-3999
CVE-2026-3999 describes a broken access control vulnerability that can enable an authenticated user to perform horizontal privilege escalation in certain configurations of the ID Server. The CVSS 4.0 metrics indicate high impact on confidentiality and integrity, with privilege level Low and no us...
CVE-2026-3999
A broken access control may allow an authenticated user to perform a horizontal privilege escalation. The vulnerability only impacts specific configurations...
CVE-2026-3999 Broken access control vulnerability affecting ID Server
A broken access control may allow an authenticated user to perform a horizontal privilege escalation. The vulnerability only impacts specific configurations...
PT-2026-25162
Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description A broken access control may allow an authenticated user to perform a horizontal privilege escalation. The issue only impacts specific configurations. Recommendations At the moment,...
Pointsharp ID Server ๅฎๅ จๆผๆด
Pointsharp ID Server is an identity and access management server provided by the Swedish company Pointsharp. There is a security vulnerability present in Pointsharp ID Server, which stems from improper access control mechanisms. This vulnerability may lead to the escalation of permissions...