CVE-2026-105096

A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /customer/ of the component Customer Profile API. Executing a manipulation of the argument ID can lead to authorization bypass. The attack may be launched remotely. The exploit has be...

CVE-2026-105097 Omega Solution CoinEx Crypto Customer Information API customer-currency authorization

A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the file /customer-currency/ of the component Customer Information API. The manipulation of the argument ID leads to authorization bypass. Remote exploitation of the attack is possible. The...

CVE-2026-105097

A vulnerability exists in the Customer Information API of Omega Solution CoinEx Crypto 2025 . The issue resides in an unknown function within the /customer-currency/ file, where manipulating the ID argument results in an authorization bypass . Remote exploitation is possible, and a public exploit...

EUVD-2026-92063

A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the file /customer-currency/ of the component Customer Information API. The manipulation of the argument ID leads to authorization bypass. Remote exploitation of the attack is possible. The...

CVE-2026-105096 Omega Solution CoinEx Crypto Customer Profile API customer authorization

A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /customer/ of the component Customer Profile API. Executing a manipulation of the argument ID can lead to authorization bypass. The attack may be launched remotely. The exploit has be...

EUVD-2026-92059

A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /customer/ of the component Customer Profile API. Executing a manipulation of the argument ID can lead to authorization bypass. The attack may be launched remotely. The exploit has be...

CVE-2026-105096

A vulnerability exists in the Customer Profile API component of Omega Solution CoinEx Crypto 2025 . The flaw resides in an unknown function within the /customer/ file, where a manipulation of the ID argument can lead to an authorization bypass . This vulnerability can be exploited remotely . Whil...

LibreSSL -- Multiple vulnerabilities

The LibreSSL project reports: Ensure verify callbacks always returning 1 can see a hostname mismatch Correct botched size check in dtls1preprocessfragment Limit size of buffered DTLS handshake messages Avoid potential overread on interrupted retransmission in DTLS Fix OCSP responder authorization...

CVE-2026-88877-PoC-pwnVader

CVE-2026-88877 — Traefik v3.7.0–v3.7.11 — Omisión de autenticación mediante from-to-www-redirect Autor: pwnVader · Licencia: MIT raíz del repositorio | ---|--- Componente| Traefik proveedor de ingress-nginx de Kubernetes, providers.kubernetesingressnginx Tipo| CWE-639 — Omisión de autorización...

CVE-2025-29927-PoC

CVE-2025-29927 — Bypass de autorización de middleware de Next.js — PoC verificado Un pequeño proyecto de GitHub para verificar CVE-2025-29927 Bypass de autorización de middleware de Next.js en un laboratorio de autorización local VMware: máquina objetivo Ubuntu + máquina atacante Kali. ⚠️ Aviso...

PrintNightmare-CVE-2021-34527

PrintNightmare - Windows 打印后台处理程序 RCE/LPE 漏洞（CVE-2021-34527、CVE-2021-1675） 概述 这是一种远程代码执行漏洞，经过身份验证的远程用户可借此在运行打印后台处理程序服务的 Windows 机器上获取 SYSTEM 级权限。攻击者随后可利用该访问权限创建新帐户、尝试安装程序；查看、更改或删除数据；或创建具有完全用户权限的新帐户。 该漏洞源于 Windows 系统上打印后台处理程序服务 spoolsv.exe 中的一个授权绕过缺陷，该缺陷允许经过身份验证的远程用户使用 RPC 调用 RpcAddPrinterDriver...

CVE-2026-102975

CVE-2026-102975: Omisión de autorización en la anulación de supresión de la API RevisionDelete Reportero: Marco Paciaroni BomboBombone. El action=revisiondelete de MediaWiki aceptaba suppress=no sin comprobar suppressrevision. Un solicitante con viewsuppressed y un derecho de gestión específico d...

CVE-2026-102973

CVE-2026-102973: omisión del hook de autorización de correo electrónico en la API Reportero: Marco Paciaroni BomboBombone. La ruta de la API action=emailuser de MediaWiki no invocaba el hook EmailUserAuthorizeSend. Cuando una extensión o una política del sitio utilizaba ese hook para denegar a un...

CVE-2026-102261

CVE-2026-102261 Este proyecto contiene un verificador no destructivo para confirmar si una instancia autorizada de Camaleon CMS aplica la autorización introducida en la versión 2.9.3. Alcance El problema afecta a POST /admin/media/crop en Camaleon CMS hasta 2.9.2. Un usuario con :manage, :media,...

NextJS_CVE-2025-29927

Next.js 授权绕过演示 此应用程序演示了 Next.js 13.4.19 中的 x-middleware-subrequest 漏洞，该漏洞可导致中间件保护被绕过。 设置 1. 安装依赖： npm install 2. 启动开发服务器： npm run dev 漏洞演示 该应用程序在 /admin 有一个管理页面，本应受到中间件保护。然而，使用 x-middleware-subrequest 请求头即可在未认证的情况下访问它。 正常流程 1. 访问 /admin - 您将被重定向到 /login 2. 使用任意凭据登录 - 您将被重定向到 /admin 绕过方法...

CVE-2022-22978

CVE-2022-22978: Spring Security 授权绕过 摘要 Spring Security 框架是一个为基于 Spring 的应用程序提供身份验证和授权功能的安全框架。 当使用 Spring Security 5.5.6、5.6.3 及更早版本中通过正则表达式授权请求的 RegexRequestMatcher 时，如果请求 URL 包含换行符，可能导致权限绕过。 攻击者可以使用 %0a、%0d 等编码的换行符绕过管理页面 /admin 的访问权限。 环境配置与运行 运行 docker compose up -d 准备测试环境。 访问...

CVE-2026-96451

Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through 2.13.1...

CVE-2026-96451 WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through 2.13.1...

CVE-2026-96451 WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through 2.13.1...

CVE-2026-96451

The Ultimate Member WordPress plugin, versions through 2.13.1 , is vulnerable to a Privilege Escalation issue due to an Authorization Bypass Through User-Controlled Key (CWE-639). This vulnerability allows an attacker to escalate privileges within the system. While specific exploit code and a dir...