Forbidden-Buster

Forbidden Buster is a tool designed to automate various techniques in order to bypass HTTP 401 and 403 response codes and gain access to unauthorized areas in the system. This code is made for security enthusiasts and professionals only. Use it at your own risk. Features Probes HTTP 401 and 403...

Pegasus---Forbidden-Buster

Pegasus - Forbidden Buster Author: Letda Kes dr. Sobri, S.Kom. A penetration testing tool for bypassing HTTP 401/403 responses using various header manipulation techniques and path fuzzing. Features Tests various header manipulations X-Forwarded-For, X-Original-URL, X-Rewrite-URL, etc. Unicode pa...

CVE-2026-121823

A vulnerability exists in armeria versions prior to 1.43.0 due to inconsistent request path normalization . This flaw allows unauthenticated attackers to bypass path-based access controls to reach protected resources . No specific exploitation details or remediation steps are provided in the docu...

CVE-2026-113368

A flaw was found in Sonatype Nexus Repository. This vulnerability allows an authenticated attacker with privileges to add or edit group repositories to bypass access controls, leading to information disclosure. Because the application does not verify whether an account is authorized to access an...

CVE-2026-108500

A flaw was found in Apache ActiveMQ when configured to use the LDAP authorization plugin LDAPAuthorizationMapPlugin. An authenticated attacker can bypass access control restrictions by creating or addressing a destination with a specially crafted name containing Lightweight Directory Access...

CVE-2026-118654

A flaw was found in Echo. This vulnerability allows an unauthenticated remote attacker to bypass access controls and view protected files. When requests containing dot segments are sent to public static file handlers, the application normalizes the path after route matching has occurred, enabling...

CVE-2026-118651

A flaw was found in Echo. When the proxy middleware is used without an explicit IP extractor configured, it retains and forwards attacker-supplied X-Real-IP headers to upstream services. A remote attacker can exploit this vulnerability to spoof their client Internet Protocol IP address. This flaw...

h2csmuggler

h2cSmuggler Description h2cSmuggler smuggles HTTP traffic past insecure edge-server proxypass configurations by establishing HTTP/2 cleartext h2c communications with h2c-compatible back-end servers, allowing a bypass of proxy rules and access controls. See my detailed write-up below for: Technica...

LolLMS <= 2.2.0 - Unauthenticated File Upload

A vulnerability in parisneo/lollms up to and including version 2.2.0 allows unauthenticated users to upload and process files through the /api/files/extract-text endpoint. The endpoint lacks the Dependsgetcurrentactiveuser dependency used by other file-related APIs. id: CVE-2026-0558 info: name:...

N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing

A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4 id: CVE-2026-86206 info: name: N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing author:...

Symfony HttpFoundation - Access Control Bypass via PATH_INFO

Symfony HttpFoundation component = 2.0.0 and prior to versions 5.4.50, 6.4.29, and 7.3.7 contains an access control bypass vulnerability. The Request class improperly interprets some PATHINFO values, producing URL paths without a leading /. This allows bypassing access control rules that are buil...

CVE-2026-109856

A flaw was found in Apache OFBiz. An authenticated user with low-level privileges can bypass access controls by sending direct requests to restricted financial account services. This vulnerability allows an attacker to escalate privileges and create, modify, or cancel financial account balances a...

CVE-2026-18661

A flaw was found in Eclipse Jetty. This vulnerability allows a remote, unauthenticated attacker to bypass access controls, leading to unauthorized information disclosure and potential data modification. When an application combines servlet security annotations with deployment descriptor...

CVE-2026-114636

A flaw was found in Traefik. This vulnerability allows an unauthenticated remote attacker to bypass access control restrictions. When handling Kubernetes Ingress resources configured for SSL Secure Sockets Layer passthrough, the HTTP router generated on non-TLS Transport Layer Security entry poin...

@payloadcms/storage-vercel-blob has access control bypass of uploads in Vercel Storage adapter

Impact In affected configurations, client upload access does not consistently align with the associated collection’s access configuration. You are affected if: - You use client uploads with @payloadcms/storage-vercel-blob. - Authenticated users can access the client-upload route. Applications tha...

GHSA-MC8M-RR6C-R5QR @payloadcms/storage-vercel-blob has access control bypass of uploads in Vercel Storage adapter

Impact In affected configurations, client upload access does not consistently align with the associated collection’s access configuration. You are affected if: - You use client uploads with @payloadcms/storage-vercel-blob. - Authenticated users can access the client-upload route. Applications tha...

CVE-2026-116542

A flaw was found in netty-tcnative. A remote, unauthenticated attacker can exploit this issue by sending a specially crafted Server Name Indication SNI hostname with overlong character encodings during a Transport Layer Security TLS handshake. This causes the application to decode the hostname...

CVE-2026-115298

A flaw was found in Elasticsearch. An authenticated user can bypass access controls to view restricted data, leading to information disclosure. Certain search and query operations fail to enforce field-level security—which restricts access to specific data fields within an index—on constant keywo...

CVE-2026-115361

A flaw was found in OpenBao. When evaluating access control list ACL policies that combine broad wildcard permissions with specific identity-based denial rules, the application improperly drops explicit deny rules if the identity metadata includes wildcard or path segments. An authenticated user...

tomcat security update

An update is available for tomcat. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages...