WebSecProbe

.png WebSecProbe is a security testing utility designed for web security researchers, penetration testers, and system administrators to analyze HTTP 403 Forbidden responses and access control behavior in web applications. The tool assists in identifying misconfigurations, inconsistent authorizati...

Apache OFBiz - Remote Code Execution

Apache OFBiz below 18.12.16 is vulnerable to unauthenticated remote code execution on Linux and Windows. An attacker with no valid credentials can exploit missing view authorization checks in the web application to execute arbitrary code on the server id: CVE-2024-45507 info: name: Apache OFBiz -...

EUVD-2026-116014

NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission level in the SlurmDBD that can be chained together in a way that would permit an Operator to make themselves an Administrator...

CVE-2026-65140: NVIDIA Slurm: NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission level in the SlurmDBD that…

NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission level in the SlurmDBD that can be chained together in a way that would permit an Operator to make themselves an Administrator...

CVE-2025-29927-Nextjs-Analysis

CVE-2025-29927 Next.js Analysis This repository contains a self-hosted Next.js lab environment created for analyzing CVE-2025-29927 in Docker. Overview CVE-2025-29927 is a vulnerability related to authorization checks implemented in Next.js middleware. This project was built as a local lab to...

PT-2026-132433

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, could have allowed an authenticated to read milestone metadata, including titles, descriptions, and full project paths, from arbitrary private projects...

WordPress HappyAddons for Elementor authorization issue vulnerability

WordPress HappyAddons for Elementor versions 3.50.1 and earlier contain an authorization issue vulnerability. This vulnerability stems from missing authorization checks, which may lead to exploitation of improperly configured access control security levels...

Mamunur Rashid ShopBuilder authorization issue vulnerability

Mamunur Rashid ShopBuilder versions 3.4.2 and earlier contain an authorization issue vulnerability. This vulnerability stems from missing authorization checks and may allow attackers to exploit improperly configured access control security levels...

WordPress WC Shop Sync authorization issue vulnerability

WordPress WC Shop Sync versions 4.7.5 and earlier contain an authorization issue vulnerability. This vulnerability stems from missing authorization checks, enabling exploitation of improperly configured access control levels...

WordPress Better Post & Filter Widgets for Elementor authorization issue vulnerability

WordPress Better Post & Filter Widgets for Elementor versions 1.9.1 and earlier contain an authorization issue vulnerability. This vulnerability stems from missing authorization checks, which may lead to exploitation of improperly configured access control security levels...

HTTP Authority Confusion

io.netty, netty-codec-http3 is vulnerable to HTTP authority confusion. The vulnerability is due to the codec prioritizing the Host header over the authority specified in the absolute-form request-target, which allows a remote attacker to manipulate virtual-host routing, authorization checks,...

EUVD-2026-107679

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, could have allowed an authenticated to read milestone metadata, including titles, descriptions, and full project paths, from arbitrary private projects...

Yoomoney YUKASSA for WooCommerce authorization issue vulnerability

Yoomoney’s YOOKAS for WooCommerce versions 2.17.3 and earlier contain an authorization issue vulnerability. This vulnerability stems from insufficient authorization checks, which may allow attackers to exploit improperly configured access control security levels...

WordPress Strong Testimonials authorization issue vulnerability

WordPress Strong Testimonials versions 3.3.14 and earlier contain an authorization issue vulnerability. This vulnerability stems from missing authorization checks, which may lead to exploitation of improperly configured access control levels...

UBUNTU-CVE-2026-90800

Missing authorisation checks in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any request to read the full contents of a prefixed user or replicator database via an unauthorised API endpoint. The use of prefixed system databases is very rare. Users are recommended to upgrade to...

Apache Answer information disclosure vulnerability

Apache Answer versions 2.0.2 and earlier contain an information disclosure vulnerability stemming from a lack of authorization checks. This may allow authenticated users to perform actions on non-public content they are not authorized to access...

Linux Distros Unpatched Vulnerability : CVE-2026-6567

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.8 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain...

Linux Distros Unpatched Vulnerability : CVE-2026-84284

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 19.2.8, 19.3 before 19.3.6, and 19.4 before 19.4.2 that, under certain...

Linux Distros Unpatched Vulnerability : CVE-2026-16275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.4 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain...

BIT-GITLAB-2026-6567 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.8 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with reporter role to access restricted CI artifact report content they were not...