PT-2025-17454 · Flaskblog · Flaskblog

Name of the Vulnerable Software and Affected Versions: laskBlog version 2.6.1 Description: The issue is related to incorrect access control, allowing attackers to delete user accounts arbitrarily via a crafted request. Recommendations: For laskBlog version 2.6.1, consider restricting access to th...

CVE-2025-28103

Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request...

Huawei HarmonyOS and EMUI Access Control Vulnerability

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. An access control vulnerability exists in Huawei HarmonyOS and EMUI.The vulnerability stems from improper access...

PT-2025-17323 · Bw Broadcast · Tx1000 +5

Name of the Vulnerable Software and Affected Versions: BW Broadcast TX600 versions 1.6.0 BW Broadcast TX300 versions 1.6.0 BW Broadcast TX150 versions 1.6.0 BW Broadcast TX1000 versions 1.6.0 BW Broadcast TX30 versions 1.6.0 BW Broadcast TX50 versions 1.6.0 Description: The issue is related to...

PT-2025-17299 · Orban · Orban Optimod 5950

Name of the Vulnerable Software and Affected Versions: Orban OPTIMOD 5950 Firmware version 1.0.0.2 Orban OPTIMOD 5950 System version 2.2.15 Description: The issue is related to incorrect access control, allowing attackers to bypass authentication and gain Administrator privileges. Recommendations...

PT-2025-17304 · Jmbroadcast · Jmbroadcast Jmb0150 Firmware

Name of the Vulnerable Software and Affected Versions: JMBroadcast JMB0150 Firmware version 1.0 Description: The issue is related to incorrect access control in the "HOME.php" endpoint, allowing attackers to access the Admin panel without authentication. Recommendations: For JMBroadcast JMB0150...

Huawei HarmonyOS and EMUI Access Control Vulnerability (CNVD-2025-10515)

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. An access control vulnerability exists in Huawei HarmonyOS and EMUI.The vulnerability stems from improper access...

Adobe ColdFusion Improper Access Control Vulnerability (CNVD-2025-07806)

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion has a security vulnerability that can be exploited by attackers to cause a security...

CVE-2025-3124 Missing Authorization vulnerability was identified in GitHub Enterprise Server that allowed unauthorized access to private repository names

A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a user to see the names of private repositories that they wouldn't otherwise have access to in the Security Overview in GitHub Advanced Security. The Security Overview was required to be filtered only...

CVE-2025-39580

Missing Authorization vulnerability in jidaikobo Dashi dashi allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Dashi: from n/a through = 3.1.8...

CVE-2025-32620

Missing Authorization vulnerability in fromdoppler Doppler Forms doppler-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Doppler Forms: from n/a through = 2.4.6...

CVE-2025-23906

CVE-2025-23906 affects the wpseek WordPress Dashboard Tweeter plugin (versions 1.3.2 and earlier). The root cause is a Missing Authorization vulnerability due to incorrectly configured access control, allowing insufficient authorization checks. Impact is limited to information loss or modificatio...

CVE-2025-24577

The CVE-2025-24577 entry concerns the WordPress Poll Maker plugin (versions through 5.5.0) with a Missing Authorization vulnerability that leads to Broken Access Control. Affected component is the plugin’s access control logic; root cause described as misconfigured access control/security levels....

CVE-2025-27310 WordPress Page and Post Lister plugin <= 1.2.1 - Arbitrary Content Deletion vulnerability

Missing Authorization vulnerability in Radius of Thought Page and Post Lister page-and-post-lister allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Page and Post Lister: from n/a through = 1.2.1...

CVE-2025-27310

CVE-2025-27310 affects the WordPress plugin Page and Post Lister (

CVE-2025-29705

code-gen =2.0.6 is vulnerable to Incorrect Access Control. The project does not have permission control allowing anyone to access such projects...

PT-2025-16996 · Földesi · Széchenyi 2020 Logo

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Földesi, Mihály Széchenyi 2020 Logo allows PHP Local File Inclusion. This issue affects Széchenyi 2020 Logo: from n/a through 1.1...

PT-2025-17017

Name of the Vulnerable Software and Affected Versions Docket Cache versions through 24.07.02 Description The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This vulnerability allows PHP Loc...

CVE-2025-39545 WordPress WordPress REST API Authentication <= 3.6.3 - Settings Change Vulnerability

Missing Authorization vulnerability in miniOrange WordPress REST API Authentication allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WordPress REST API Authentication: from n/a through 3.6.3...

CVE-2025-39545

CVE-2025-39545 describes a Missing Authorization vulnerability in the WordPress REST API Authentication plugin. Affected product: WordPress REST API Authentication, versions from unknown up to and including 3.6.3. Root cause: misconfigured access control enabling unauthorized actions or settings ...