16364 matches found
CVE-2026-54415-PoC
CVE-2026-54415 — Azuriom CMS Broken Access Control → Account Takeover Missing authorization on the admin server-management routes in Azuriom CMS This PoC is published for defensive and educational purposes against a patched version. Only run it against systems you own or are explicitly authorized...
PT-2026-106029
Name of the Vulnerable Software and Affected Versions Plane versions prior to 1.4.0 Description WorkspaceOwnerPermission does not verify if the is active variable is set to True when validating if a user is a workspace owner. This allows a deactivated user to maintain authorization and retain...
PT-2026-106035
Plane is an open-source project management tool. Prior to 1.4.0, BulkDeleteIssuesEndpoint and SubIssuesEndpoint in apps/api/plane/app/views/issue/ accept body- or URL-supplied issue IDs and operate on them without checking that the IDs belong to the caller's workspace and project. The permission...
PT-2026-106044
Velociraptor's WatchEvent gRPC API can specify the OrgId of the org from which events should be streamed. The server checks the API permissions against the caller's Org instead of the requested Org. This allows a user with API access in one org to read events from another org for which they have ...
CVE-2024-3400-Check
Descripción 1. Realiza una solicitud POST al endpoint /ssl-vpn/hipreport.esp. 2. Realiza una solicitud GET a /global-protect/portal/images/sxy.txt para comprobar si la explotación permite el acceso al archivo, lo que normalmente estaría prohibido estado 403 Forbidden. Requisitos previos Necesitas...
CVE-2025-68723
CVE-2025-68723: XSS Almacenado en Axigen WebAdmin Resumen de la Vulnerabilidad Múltiples campos de entrada en la interfaz de Axigen WebAdmin carecen de la adecuada sanitización, lo que permite la ejecución de JavaScript malicioso. Estas vulnerabilidades permiten que un administrador con pocos...
CVE-2021-42671
CVE-2021-42671 CVE-2021-42671 - Vulnerabilidad de control de acceso roto en el sistema de portal en línea de ingenieros. Descripción técnica: Existe una vulnerabilidad de control de acceso roto en el Portal en línea de ingenieros. Un atacante puede aprovechar esta vulnerabilidad para eludir los...
CVE-2025-68721
CVE-2025-68721: Control de Acceso Roto en Axigen WebAdmin Resumen de la Vulnerabilidad Un fallo en la lógica de permisos permite que una cuenta de administrador con cero permisos acceda a la página de "Seguridad y Filtrado", específicamente al endpoint de Certificados SSL. Mientras que otras...
CVE-2025-52289
CVE-2025-52289: Broken Access Control in MagnusBilling v7.8.5.3 Description A Broken Access Control vulnerability exists in MagnusBilling versions prior to v7.8.5.3. Newly registered users can escalate their account status from pending to active without administrator approval by modifying a reque...
CVE
CVE Writeups for CVE-2025-67586, CVE-2025-67985, CVE-2025-67986 -------------- CVE-2025-67586 Exploit PoC -------------- Exploit Title: WordPress Plugin 5.2.0 - Broken Access Control Software Link: https://wordpress.org/plugins/highlight-and-share/ Version: Description A broken access control...
CVE-2023-22515
CVE-2023-22515 CVE-2023-22515 Exploit de Control de Acceso Roto en Confluence Descripción de la vulnerabilidad Confluence permite agregar usuarios administradores sin autorización USO Compilar Compilar desde el código fuente go mod init CVE-2023-22515 go mod tidy go build -ldflags="-s -w" -trimpa...
CVE-2025-27520-PoC
CVE-2025-27520 — Safe Educational Simulation / PoC Demo Stand ⚠️ Important: This is a safe educational simulation of the CVE-2025-27520 vulnerability. The project includes a simulation service Flask and a safe PoC scanner Python. On receiving a test marker, the simulation creates an evidence file...
WordPress Sermon'e plugin <= 1.0.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Sermon'e versions = 1.0.2...
WordPress ECPay Ecommerce for WooCommerce plugin <= 1.1.2606090 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Tran The Long in WordPress Plugin ECPay Ecommerce for WooCommerce versions = 1.1.2606090...
WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin User Registration versions = 5.2.7...
WordPress Progress Planner plugin <= 1.10.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Asim Alshaya in WordPress Plugin Progress Planner versions = 1.10.0...
WordPress Deposits and Partial Payments for WooCommerce plugin <= 4.0.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by sungbyeongchan in WordPress Plugin Deposits and Partial Payments for WooCommerce versions = 4.0.1...
WordPress BEAR plugin <= 1.2.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Sakri Koskimies in WordPress Plugin BEAR versions = 1.2.2...
CVE-2021-40375
CVE-2021-40375 - Control de Acceso Roto en OpenEyes 3.5.1 Descripción Se identificó una vulnerabilidad de control de acceso inadecuado en OpenEyes 3.5.1, desarrollado por la Fundación Apperta. Un usuario con pocos privilegios podría cargar el perfil de un paciente en su navegador y acceder a...
CVE-2023-49980
CVE-2023-49980 Sistema de Gestión de Resultados de Estudiantes 1.0 - Listado de Directorios Descripción : Best Student Result Management System 1.0 es vulnerable a Control de Acceso Roto. La vulnerabilidad de Listado de Directorios permite a cualquier atacante remoto ver los archivos sensibles de...