UBUNTU-CVE-2023-53554

In the Linux kernel, the following vulnerability has been resolved: staging: ks7010: potential buffer overflow in kswlansetencodeext The "exc-keylen" is a u16 that comes from the user. If it's over IWENCODINGTOKENMAX 64 that could lead to memory corruption...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not verifying the length of a user-entered key, which could lead to memory corruption...

EUVD-2025-30660

Malicious code in bioql PyPI...

EUVD-2025-14242

Malicious code in bioql PyPI...

EUVD-2025-28646

Malicious code in bioql PyPI...

CVE-2025-0642

PosCube Assist (PosCube Hardware Software and Consulting Ltd. Co.) is affected up to version 10.02.2025. The issue combines hard-coded credentials with an authorization bypass via user‑controlled keys, enabling authentication bypass and potentially arbitrary access (described as exploitation/ Exc...

CVE-2025-9342

Authorization Bypass Through User-Controlled Key vulnerability in Anadolu Hayat Emeklilik Inc. AHE Mobile allows Privilege Abuse. This issue affects AHE Mobile: from 1.9.7 before 1.9.9...

CVE-2025-9342 IDOR in Anadolu Hayat Emeklilik's AHE Mobile

Authorization Bypass Through User-Controlled Key vulnerability in Anadolu Hayat Emeklilik Inc. AHE Mobile allows Privilege Abuse. This issue affects AHE Mobile: from 1.9.7 before 1.9.9...

CVE-2025-9342

CVE-2025-9342 affects Anadolu Hayat Emeklilik AHE Mobile (versions 1.9.7–1.9.8). A user-controlled key allows an authorization bypass, enabling privilege abuse. Public descriptions across multiple feeds confirm the issue and list 1.9.9 as the required fix. Impact details state privilege elevation...

CVE-2025-57994

Technical details are not publicly available in the provided documents for CVE-2025-57994 (Upcoming Events Lists). Monitor for updates and rely on official advisories for affected versions, impact, and fixes.

CVE-2025-58012 WordPress Content Mask Plugin <= 1.8.5.2 - Insecure Direct Object References (IDOR) Vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Alex Content Mask allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Content Mask: from n/a through 1.8.5.2...

CVE-2025-0875 IDOR in Proliz Software's OBS

Authorization Bypass Through User-Controlled Key vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS Student Affairs Information System allows Parameter Injection. This issue affects OBS Student Affairs Information System: before v26.0328...

WordPress plugin Content Mask 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

CVE-2025-8057 IDOR in Patika Global Technologies' HumanSuite

Authorization Bypass Through User-Controlled Key, Externally Controlled Reference to a Resource in Another Sphere, Improper Authorization vulnerability in Patika Global Technologies HumanSuite allows Exploiting Trust in Client. This issue affects HumanSuite: before 53.21.0...

CVE-2025-10127

Daikin Europe N.V Security Gateway is vulnerable to an authorization bypass through a user-controlled key vulnerability that could allow an attacker to bypass authentication. An unauthorized attacker could access the system without prior credentials...

The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE lies in the ability to bypass authentication using a user-controlled key. This allows unauthorized users to gain unauthorized access to the data of those users.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE relates to the bypassing of authentication using a key controlled by the user. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to user dat...

CVE-2025-7049

CVE-2025-7049 affects the WordPress plugin WPGYM - Wordpress Gym Management System up to version 67.7.0 . The vulnerability is a Privilege Escalation via a missing validation on a user-controlled key in the function MJ_gmgt_gmgt_add_user , allowing authenticated users with Subscriber+ privileges ...

CVE-2024-13063

Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft MyRezzta allows Forceful Browsing. This issue affects MyRezzta: from s2.02.02 before v2.05.01...

CVE-2025-0640

Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft OctoCloud allows Resource Leak Exposure. This issue affects OctoCloud: from s1.09.02 before v1.11.01...

PT-2025-35550

Name of the Vulnerable Software and Affected Versions: Akinsoft OctoCloud versions s1.09.02 through v1.11.00 Description: An authorization bypass exists due to a user-controlled key, potentially leading to resource leak exposure in Akinsoft OctoCloud. Recommendations: Update Akinsoft OctoCloud to...