706038 matches found
EUVD-2026-105084
Stirling-PDF 3.0.0 through 3.2.0 contains an authorization bypass vulnerability that allows authenticated users to access other users' stored files by pointing a processing folder at the server storage directory. Attackers can create a folder via POST /api/v1/processing-folders targeting storage/...
CVE-2026-113606
Stirling-PDF versions 3.0.0 through 3.2.0 are vulnerable to an authorization bypass (CWE-639) within the processing folders functionality. Authenticated users can access files belonging to other users by pointing a processing folder at the server storage directory via a POST /api/v1/processing-fo...
CVE-2023-22906
CVE-2023-22906 CVE-2023-22906 is a critical vulnerability that affects the Hero Qubo Smart Doorbell device running version HCD0102V1.3820220125. This particular device allows Telnet access with root privileges by default, without requiring a password. This vulnerability poses a significant securi...
IBM-Security-Verify-oAuth_Token_Steal-CVE-2024-35133
IBM Security Verify Access - Open Redirect during OAuth Flow CVE-2024-35133 Table of Contents 1. Overview 2. Detailed Description 3. Proof of Concept 4. Solution 5. Disclosure Timeline 6. References 7. Credits 8. Legal Notices Overview Revision : 1.0 Impact : By persuading a victim to visit a...
CVE-2026-112937
filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, ReadWriteLock can remove a randomized .filelock- private-hard-link directory during cleanup, allowing another local user with rename access in a non-sticky parent to observe a live name or forge a dead-owner sweep na...
CVE-2026-112834
Missing Authorization vulnerability in Castos Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through 3.17.0...
CVE-2026-112823 WordPress WP User Manager plugin <= 2.9.25 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Manipulating User State.This issue affects WP User Manager: from n/a through 2.9.25...
CVE-2026-112823
The WP User Manager WordPress plugin (versions n/a through 2.9.25 ) is vulnerable to a Broken Access Control issue. This Missing Authorization vulnerability (CWE-862) allows an attacker to manipulate user states . While the vulnerability is reachable over the network with low complexity, it requi...
CVE-2026-33032-nginx-ui-vuln-lab
CVE-2026-27944 + CVE-2026-33032 — nginx-ui Zero-Credential RCE Lab Disclaimer: This repository is intended for educational and authorised security research purposes only. All techniques demonstrated here should only be used against systems you own or have explicit written permission to test. The...
Vulnerability-CVE-2025-64446-CVE-2025-58034
FortiWeb Exploitation Simulation CVE-2025-64446 & CVE-2025-58034 Note: This document is for educational and security research purposes only. Do not use to attack systems without permission. 1. Overview FortiWeb is a Web Application Firewall WAF device used to protect web applications. In 2025, tw...
WordPress WP User Manager plugin <= 2.9.25 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by ssophiz in WordPress Plugin WP User Manager versions = 2.9.25...
EUVD-2026-105141
Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through 5.9.7...
CVE-2026-112824 WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through 5.9.7...
CVE-2026-112824 WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through 5.9.7...
CVE-2026-112824
The Bus Ticket Booking with Seat Reservation WordPress plugin, developed by Magepeople inc., is affected by a Broken Access Control vulnerability (CWE-862) in versions up to and including 5.9.7 . The flaw stems from Incorrectly Configured Access Control Security Levels , which allows for unauthor...
WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Bus Ticket Booking with Seat Reservation versions = 5.9.7...
EUVD-2026-105138
Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.30...
CVE-2026-112829
The Booktics WordPress plugin (versions n/a through 1.0.30 ) is susceptible to a Missing Authorization vulnerability (CWE-862 ). The issue stems from Incorrectly Configured Access Control Security Levels , which could allow an attacker to exploit improper authorization checks. No specific exploit...
CVE-2026-112829 WordPress Booktics plugin <= 1.0.30 - Broken Access Control vulnerability
Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.30...