19256 matches found
CVE-2025-46204
Description Unifiedtransform v2.0 is vulnerable to Incorrect Access Control. Any user students and teachers can access and modify course details via the /course/edit/id endpoints. This functionality intended exclusively for administrative use. Exploiting this flaw allows unauthorized manipulation...
CVE-2023-37599
CVE-2023-37599 — issabel-pbx 4.0.0-6: Directory Listing Broken Access Control Overview issabel-pbx version 4.0.0-6 contains a Broken Access Control vulnerability that manifests as unauthenticated Directory Listing on the web interface. Any remote, unauthenticated attacker can browse the...
CVE-2023-22515-check
Avertissement Ce script est uniquement à des fins éducatives et de test. Utilisez-le de manière responsable et assurez-vous d'avoir l'autorisation de tester l'instance Confluence cible. Les tests non autorisés sont illégaux et contraires à l'éthique. Script de détection de la vulnérabilité...
WordPress WP Full Stripe Free plugin <= 8.5.6 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Full Stripe Free versions = 8.5.6...
citrix-cve-2021-22941-lab
⚠️ Disclaimer This is a mock simulation of the CVE-2021-22941 vulnerability for testing purposes. The mock server replicates the actual vulnerable behavior where the Upload.aspx endpoint is accessible without authentication and returns LocalFile GUID responses, as documented in the official CVE an...
CVE-2026-103353
The FluentForm WordPress plugin (versions
CVE-2026-103353 WordPress FluentForm plugin <= 6.2.14 - Broken Access Control vulnerability
Incorrect Behavior Order vulnerability in WP ManageNinja LLC FluentForm fluentform allows Removing Important Client Functionality.This issue affects FluentForm: from n/a through 6.2.14...
CVE-2026-103353 WordPress FluentForm plugin <= 6.2.14 - Broken Access Control vulnerability
Incorrect Behavior Order vulnerability in WP ManageNinja LLC FluentForm fluentform allows Removing Important Client Functionality.This issue affects FluentForm: from n/a through 6.2.14...
WordPress FluentForm plugin <= 6.2.14 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by MYUNGYONG LEE in WordPress Plugin FluentForm versions = 6.2.14...
CVE-2026-66246: Execution with Unnecessary Privileges
iControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing authentication checks or insecure direct object references IDOR, enabling privilege escalation and the unauthorized modification or deletion of sensitive application data...
Rocky Linux 9 [CIQ] Security Update: varnish / varnish-devel / varnish-docs (crlsa-2024_1691)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20241691 advisory. varnish: HTTP/2 Broken Window Attack may result in denial of service CVE-2024-30156 Tenable has extracted the preceding description block directly from the CIQ...
PT-2026-103882
Name of the Vulnerable Software and Affected Versions WP Full Stripe Free versions prior to 8.5.7 Description An unauthenticated broken access control issue exists, allowing unauthorized users to bypass security restrictions. Recommendations Update to a version newer than 8.5.6...
CVE-2026-62073: Missing Authorization
Unauthenticated Broken Access Control in WP Full Stripe Free = 8.5.6 versions...
Rocky Linux 8 [CIQ] Security Update: aardvark-dns / buildah / buildah-debuginfo / buildah-debugsource / etc Multiple Vulnerabilities (crlsa-2026_3428)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20263428 advisory. golang: html/template: errors returned from MarshalJSON methods may break template escaping CVE-2024-24785 crypto/x509: golang: Denial of Service due to...
Rocky Linux 8 [CIQ] Security Update: poppler / poppler-cpp / poppler-cpp-debuginfo / poppler-cpp-devel / etc (crlsa-2024_5305)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20245305 advisory. poppler: pdfinfo: crash in broken documents when using -dests parameter CVE-2024-6239 Tenable has extracted the preceding description block directly from the CIQ...
PT-2026-103887
Name of the Vulnerable Software and Affected Versions Aruba Migration Tool versions prior to 1.0.5 Description Broken access control allows subscribers to bypass intended security restrictions. Recommendations Update Aruba Migration Tool to version 1.0.5 or later...
Rocky Linux 8 [CIQ] Security Update: varnish / varnish-devel / varnish-docs / varnish-modules / etc (crlsa-2024_1690)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20241690 advisory. varnish: HTTP/2 Broken Window Attack may result in denial of service CVE-2024-30156 Tenable has extracted the preceding description block directly from the CIQ...
CVE-2026-102397
Unauthenticated Broken Access Control in Ultimate Maps by Supsystic = 1.5.5 versions...