CVE-2026-105206 ZITADEL before 4.17.3 Cross-Organization Authentication Method Enumeration via User Service

ZITADEL 3.0.0 through 3.4.15 and 4.x before 4.17.3 contains an incorrect authorization flaw in the User Service API, which verifies user.read against the caller's organization rather than the organization owning the target user. An authenticated member holding org-scoped user.read can query GET...

CVE-2026-105206 ZITADEL before 4.17.3 Cross-Organization Authentication Method Enumeration via User Service

ZITADEL 3.0.0 through 3.4.15 and 4.x before 4.17.3 contains an incorrect authorization flaw in the User Service API, which verifies user.read against the caller's organization rather than the organization owning the target user. An authenticated member holding org-scoped user.read can query GET...

CVE-2026-105206

ZITADEL versions 3.0.0 through 3.4.15 and 4.x before 4.17.3 are vulnerable to an incorrect authorization flaw in the User Service API . The vulnerability exists because the system verifies the user.read permission against the caller's organization rather than the organization that owns the target...

CVE-2026-105206 ZITADEL before 4.17.3 Cross-Organization Authentication Method Enumeration via User Service

ZITADEL 3.0.0 through 3.4.15 and 4.x before 4.17.3 contains an incorrect authorization flaw in the User Service API, which verifies user.read against the caller's organization rather than the organization owning the target user. An authenticated member holding org-scoped user.read can query GET...

EUVD-2026-92099

ZITADEL 3.0.0 through 3.4.15 and 4.x before 4.17.3 contains an incorrect authorization flaw in the User Service API, which verifies user.read against the caller's organization rather than the organization owning the target user. An authenticated member holding org-scoped user.read can query GET...

CVE-2023-1430

Update 2023-06-12: You no longer need the snippet. WPManageNinja patched the vulnerability two hours after public disclosure 93 days after reporting. Update 2024-01-27: The related issue with with everlasting hash values is now fully addressed. Responsible disclosure of unpatched vulnerability...

Exploit for CVE-2026-96451

CVE-2026-96451 WordPress Ultimate Member plugin = 2.13.1 -...

CVE-2026-8347

CVE-2026-8347 – Concrete CMS의 안전하지 않은 직접 객체 참조IDOR 개요 CVE-2026-8347 은 Concrete CMS 버전 9.5.0 및 이전 버전 에 영향을 미치는 안전하지 않은 직접 객체 참조IDOR 취약점입니다. 이 문제는 불충분한 권한 검사로 인해 Express Association Reorder 기능에 존재합니다. 사용자가 연관 항목을 재정렬할 때, 애플리케이션은 사용자가 Express 항목을 볼view 권한이 있는지 확인하지만 수정modify 권한이 있는지는 확인하지 않습니다. 그 결과...

cve-2021-38647

cve-2021-38647 https://github.com/corelight/CVE-2021-38647 without the bloat CVE-2021-38647 AKA "OMIGOD" A Zeek package which detects CVE-2021-38647 AKA OMIGOD exploit attempts. https://corelight.com/blog/detecting-cve-2021-38647-omigod...

POC-CVE-2018-25031

CVE-2018-25031 - Swagger UI before 4.1.3 A simple POC CVE-2018-25031 that tricks the victim into entering the authorization code, which is then sent to the attacker. You can use it with the XSS Vulnerability https://github.com/VictorNS69/swagger-ui-xss It is necessary to find the parameter and...

Burp_CVE-2025-31324

CVE-2025-31324 Burp Suite Extension Overview This Python-based Burp Suite extension is designed to detect the presence of CVE-2025-31324 , a critical vulnerability in SAP NetWeaver Visual Composer’s Metadata Uploader component. The vulnerability allows unauthenticated remote code execution via fi...

CVE-2024-43998

CVE-2024-43998 Description CVE-2024-43998 : Missing Authorization vulnerability in the Blogpoet theme allows access to functionality not properly constrained by ACLs. This issue affects Blogpoet versions from n/a through 1.0.3. Usage usage: CVE-2024-43998.py -h -u URL -p PLUGIN CVE-2024-43998...

CVE-2022-46169

Here is the transformed explanation document: CVE‑2022‑46169 – Explanation & Project Overview Cacti Unauthenticated Remote Code Execution What is this project? This project is a cybersecurity assignment demonstrating CVE‑2022‑46169 : a critical vulnerability in the open-source network monitoring...

CVE-2025-25257

🚨 CVE-2025-25257 – FortiWeb SQLi to RCE Critical SQL Injection → Webshell Execution Discovered and weaponized by 0xgh057r3c0n 🧠 Vulnerability Overview CVE-2025-25257 affects FortiWeb systems exposing the endpoint /api/fabric/device/status, which fails to properly sanitize Authorization header...

NextJS-CVE-2025-29927-Docker-Lab

🚨 NextJS-CVE-2025-29927-Docker-Lab This repository contains a Docker-based lab environment to explore and demonstrate the Next.js CVE-2025-29927 vulnerability in a controlled setting. ⚠️ DISCLAIMER: This lab is for educational and security research purposes only. Do not expose it to the public...

CVE-2026-8239

CVE-2026-8239 CVE-2026-8239는 Concrete CMS 9.5.0 및 이전 버전에 영향을 미치는 안전하지 않은 직접 객체 참조IDOR 취약점입니다. 이 취약점은 /ccm/frontend/conversations/getrating 엔드포인트에 존재하며, 공격자가 임의의 메시지 ID를 제공하여 대화 메시지의 존재 여부를 확인하고 평점 점수를 검색할 수 있게 합니다. 해당 엔드포인트는 요청된 정보를 반환하기 전에 적절한 권한 검사를 수행하지 않습니다. 영향받는 소프트웨어 제품: Concrete CMS 영향받는 버...

CVE-2026-8237

CVE-2026-8237 CVE-2026-8237은 Concrete CMS 9.5.0 및 이전 버전에서 권한 부여 검사 누락으로 인해 발생하는 IDORInsecure Direct Object Reference 취약점입니다. 이 결함은 /ccm/frontend/conversations/messagedetail 엔드포인트에 존재하며, 사용자가 제공한 메시지 식별자만으로 대화 메시지의 전체 내용을 반환합니다. 애플리케이션이 요청자가 해당 메시지에 접근할 권한이 있는지 확인하지 않기 때문에, 인증되지 않은 공격자가 메시지 ID를 열거...

CVE-2026-63435

A flaw was found in Mail, an internet library for Ruby. The library's decoding of RFC 2047 encoded-words in email headers was vulnerable to an overly greedy charset capture. A remote attacker could exploit this by crafting a malformed encoded-word in an address display name or local part. This...

cve-2026-16219-croogo-lab

CVE-2026-16219: Croogo FileManager defensive lab This repository documents and safely demonstrates the path-authorization flaw tracked as CVE-2026-16219 in Croogo CMS. It is intended for defenders, maintainers, students, and researchers testing systems they own or are explicitly authorized to...

bola-CVE-2023-27524

bola-CVE-2023-27524 📄 README.md — BOLA CVE-2023-27524 Demo Project 🔐 Broken Object Level Authorization BOLA Demonstration CVE-2023-27524 Security Analysis & Fix --- 📌 Project Overview This project demonstrates a real-world Broken Object Level Authorization BOLA vulnerability and its secure...