CVE-2026-54447 garminconnect: Insecure Permission Assignment for Garmin OAuth Token Store

garminconnect is a Python 3 API wrapper for Garmin Connect that retrieves statistics and manages activities. Prior to 0.3.5, garminconnect/client.py Client.dump creates the OAuth token directory and garmintokens.json without explicit owner-only modes, so a permissive umask such as 022 can leave t...

CVE-2026-54180

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.38, the Update, Delete, and Reorder operations resolve records from the unscoped model query inste...

EUVD-2026-77700

DotVVM is an open source MVVM framework for web applications. Prior to 4.2.11, 4.3.15, and 5.0.0-preview09-final, AuthorizeActionFilter performs no authorization because its explicit ICommandActionFilter.OnCommandExecutingAsync, IViewModelActionFilter.OnViewModelCreatedAsync, and...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start root@kitploit: Download the Repo = run npm i Afer Installing all dependency just run the application root@kitploit: node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4...

CVE-2026-57579

CVE-2026-57579 affects Alchemy CMS , an open-source Ruby on Rails content management system. The unauthenticated GET /api/pages/nested endpoint (in Api::PagesController#nested) performs no authorization and does not scope page descendants by the caller's ability, allowing anonymous callers to ret...

CVE-2026-57579 Alchemy: Unauthenticated nested page API leaks restricted & unpublished content

Alchemy is an open source content management system engine written in Ruby on Rails. Prior to 7.4.15, 8.0.15, 8.1.14, and 8.2.6, the unauthenticated GET /api/pages/nested endpoint implemented by Api::PagesControllernested in app/controllers/alchemy/api/pagescontroller.rb returns an unfiltered pag...

CVE-2025-25621

CVE-2025-25621 Unifiedtransform v2.0 存在不正确的访问控制漏洞，允许教师通过端点 /courses/teacher/index?teacherid=2&semesterid=1 对其他教师进行考勤。 厂商：Unifiedtransform PoC 步骤 1： 以教师身份登录应用程序。 步骤 2： 导航到端点 /courses/teacher/index?teacherid=2&semesterid=1（更改教师 ID）。 步骤 3： 点击“进行考勤”，然后点击“保存”。...

CVE-2025-25616

CVE-2025-25616 Unifiedtransform v2.0 存在不正确的访问控制漏洞，允许学生修改考试规则。受影响的端点为 /exams/edit-rule?examruleid=1。 厂商：Unifiedtransform PoC 步骤 1： 以学生身份登录应用程序。 步骤 2： 访问以下端点： /exams/edit-rule?examruleid=1 （修改 examruleid 参数以定位不同的考试规则。） 步骤 3： 更改考试规则并点击保存。 影响：...

CVE-2023-34965

CVE-2023-34965 SSPanel UIM 是一款专为 Shadowsocks / V2Ray / Trojan 协议设计的多用途代理服务销售管理系统。2023.3 之前版本的 SSPanel-Uim 未限制对 /link/ 接口的访问，可能导致用户订阅信息泄露。 详情见：https://github.com/AgentY0/CVE-2023-34965/blob/main/CVE-2023-34965.pdf...

CVE-2022-1329-WordPress-Elementor-3.6.0-3.6.1-3.6.2-Remote-Code-Execution-Exploit

Plugin de WordPress - Elementor 3.6.0 3.6.1 3.6.2 Ejecución Remota de Código root@kitploit: Google Dork: none Date: April 16 2022 Exploit Author: AkuCyberSec https://github.com/AkuCyberSec Vendor Homepage: https://elementor.com/ Software Link: https://wordpress.org/plugins/elementor/advanced/...

CVE-2023-22515-POC

CVE-2023-22515 CVE-2023-22515，一个影响Confluence Server和Confluence Data Center本地实例的严重漏洞，属于访问控制缺陷漏洞。Attlassian给出的CVSS基础评分为10.0。 利用 简要说明： 1- 由于Xwork拦截器解析参数的方式，/test.action?one=a 等同于 setOne='a'；而 /test.action?one.two=a 等同于 getOne.setTwo="a" 2-...

confluence-cve-2023-22515

confluence-cve-2023-22515 Confluence 不当访问控制：CVE-2023-22515...

route-detect

route-detect Find authentication authn and authorization authz security bugs in web application routes: Routes fromkoel streaming server Web application HTTP route authn and authz bugs are some of the most common security issues found today. These industry standard resources highlight the severit...

CVE-2023-22515-Scan

CVE-2023-22515-Scan 关于 这是一个简单的扫描器，用于检测 CVE-2023-22515，这是一个在 Atlassian Confluence Data Center 和 Server 中存在的严重漏洞，正被威胁行为者在野外积极利用，以“创建未授权的 Confluence 管理员账户并访问 Confluence 实例”。该漏洞最初被描述为“权限提升”问题，但 Atlassian 后来在其安全公告中将其分类更改为“访问控制失效”。 CVE-2023-22515 时间线 2023年10月4日：Atlassian 发布了关于 CVE-2023-22515...

CVE-2026-8821

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to validate channel member-management permission during playbook run creation, allowing an authenticated channel member to add an arbitrary user to a restricted channel via the run owner field...

CVE-2024-3656

Keycloak 24.0.5 is vulnerable to Broken Access Control vulnerability, where the attacker can use any authenticated user to perform some api action such as : Test LDAP connections via the testLDAPConnection endpoint. Retrieve unmanaged attributes of any user via the getUnmanagedAttributes endpoint...

EUVD-2026-77371

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to validate channel member-management permission during playbook run creation, allowing an authenticated channel member to add an arbitrary user to a restricted channel via the run owner field...

EUVD-2026-77359

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to enforce board creation permissions when importing archive files which allows an authenticated non-guest team member to create Open or Private boards despite administrator restrictions via importing a...

brokeCLAUDIA

🔓 brokeCLAUDIA - CVE-2025-41090 CVE-2025-41090 - microCLAUDIA 中的访问控制失效漏洞 📑 目录 什么是 microCLAUDIA？ 漏洞（CVE-2025-41090） 📂 公开披露 CWE 访问控制失效 修复措施 演示材料 漏洞利用 📂 概述 环境要求 安装 使用方法 备注 参考资料 🧠 什么是 microCLAUDIA microCLAUDIA 是一项基于 CLAUDIA 引擎的功能，可为组织的设备提供针对有害勒索软件代码的防护。它通过使用一个负责疫苗部署和执行的 Windows 系统轻量级代理来实现这一点。 代理连接到位于...

ASUS-SmartHome-Exploit

ASUS-SmartHome-Exploit CVE 编号 CVE-2019-11061 : HG100 中的访问控制失效 受影响产品 : ASUS SmartHome Gateway HG100 固件版本 受影响产品 : ASUS SmartHome Android 应用版本 : optional arguments: -h, --help show this help message and exit -u, --list-user list all user in device -l, --list-device list all device status -s deviceid...