CVE-2026-81294

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-81294 CVE-2026-81294 Authorizer 3.15.1 - Paul Ryan I am @abraxasnull. Loopback lab. The client is CVE-2026-81294-Abraxas-Labs.py. Unverified email is enough. 3.15.1 maps GitHub emails to entry.email without...

CVE-2026-103752-Authorizer-Privilege-Escalation

This repository does not have a README...

Exploit for CVE-2026-103752

CVE-2026-103752: Unauthenticated Privilege Escalation in WordP...

WordPress Authorizer 3.15.3 Privilege Escalation Scanner

WordPress Authorizer versions through 3.15.3 contain an unauthenticated privilege escalation vulnerability. The supplied Python tool passively detects installed versions and optionally inspects Azure OAuth2 configuration...

CVE-2026-103752

Unauthenticated Privilege Escalation in Authorizer = 3.15.3 versions...

CVE-2026-103752

The WordPress Authorizer plugin versions

CVE-2026-103752 WordPress Authorizer plugin <= 3.15.3 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Authorizer = 3.15.3 versions...

CVE-2026-103752 WordPress Authorizer plugin <= 3.15.3 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Authorizer = 3.15.3 versions...

EUVD-2026-90851

Unauthenticated Privilege Escalation in Authorizer = 3.15.3 versions...

WordPress Authorizer plugin <= 3.15.3 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Raphael P. Cigana in WordPress Plugin Authorizer versions = 3.15.3...

PT-2026-103880

Name of the Vulnerable Software and Affected Versions Authorizer versions prior to 3.16.0 Description An unauthenticated privilege escalation issue exists in the Authorizer plugin, allowing an attacker to gain elevated privileges without providing credentials. Recommendations Update to version...

CVE-2026-103752: Incorrect Privilege Assignment

Unauthenticated Privilege Escalation in Authorizer = 3.15.3 versions...

Exploit for CVE-2026-81294

abraxaslabs.tech · github.com/abraxas ·&...

PT-2026-94224

Name of the Vulnerable Software and Affected Versions Eclipse Ankaios versions 0.6.0 through 1.0.3 Description In the agent control-interface authorizer, the LogRule::matches function stops processing at the first wildcard pattern encountered within a single rule instead of evaluating subsequent...

CVE-2026-50157

Auth0 Symfony is a Symfony SDK for Auth0 Authentication and Management APIs. From 5.0.0-BETA0 until 5.9.0, the Authorizer::authenticate and Authorizer::supports paths in the Authorizer security authenticator may accept OAuth 2.0 bearer access tokens from the token URL query parameter as well as t...

CVE-2026-50157: Use of GET Request Method With Sensitive Query Strings

Auth0 Symfony is a Symfony SDK for Auth0 Authentication and Management APIs. From 5.0.0-BETA0 until 5.9.0, the Authorizer::authenticate and Authorizer::supports paths in the Authorizer security authenticator may accept OAuth 2.0 bearer access tokens from the token URL query parameter as well as t...

CVE-2026-54072

Authorizer is an open-source, self-hostable authentication and authorization server. Prior to version 2.2.1, the /authorize endpoint accepts any redirecturi without validating it against AllowedOrigins. When responsetype=token or responsetype=idtoken, the server appends accesstoken, idtoken, and...

CVE-2026-54072

Authorizer , an open-source self-hostable authentication and authorization server, is affected by an unvalidated redirect_uri in its /authorize endpoint prior to version 2.2.1 . When response_type=token or response_type=id_token, the server appends access_token , id_token , and refresh_token as q...

EUVD-2026-76187

Authorizer is an open-source, self-hostable authentication and authorization server. Prior to version 2.2.1, the /authorize endpoint accepts any redirecturi without validating it against AllowedOrigins. When responsetype=token or responsetype=idtoken, the server appends accesstoken, idtoken, and...

CVE-2026-54072 Authorizer: Unvalidated redirect_uri in /authorize leaks OAuth2 tokens to attacker-controlled URL

Authorizer is an open-source, self-hostable authentication and authorization server. Prior to version 2.2.1, the /authorize endpoint accepts any redirecturi without validating it against AllowedOrigins. When responsetype=token or responsetype=idtoken, the server appends accesstoken, idtoken, and...