authcov

AuthCov Escaneo de cobertura de autorización de aplicaciones web. Introducción AuthCov rastrea su aplicación web utilizando un navegador Chrome sin interfaz gráfica mientras está conectado como un usuario predefinido. Intercepta y registra las solicitudes API, así como las páginas cargadas durant...

ROS-20261009-73-0221

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261009-73-0150

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261009-73-0382

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261009-73-0038

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261009-73-0226

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-108925

Name of the Vulnerable Software and Affected Versions openPDC affected versions not specified Description The published Docker image contains a fixed administrative credential that does not require a change upon first use. An attacker with network access to the management interface can use this...

CVE-2026-108156: External Control of File Name or Path

LobsterAI 2026.5.27 through 2026.9.23 contains an external control of file path vulnerability in the skills:delete IPC handler that trusts the openclawSourceDir value from a skill's meta.json during uninstall. Attackers who convince a user to install a crafted skill can make uninstallation...

PT-2026-108858

Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10...

ROS-20261009-73-0551

The vulnerability of the ipoptionsget function in the net/ipv4/ipoptions.c module of the Linux kernel’s IPv4 implementation is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

PT-2026-116489

Name of the Vulnerable Software and Affected Versions Vikunja version 2.6.0 Description A broken access control flaw exists in the getProjectAccessForUser function pkg/models/project access.go. The system calculates a user's effective project permission as the maximum permission across the projec...

PT-2026-108975

Name of the Vulnerable Software and Affected Versions LobsterAI versions 2026.5.27 through 2026.9.23 Description An external control of file path issue exists in the skills:delete IPC handler. The system trusts the openclawSourceDir value defined in a skill's meta.json file during the...

ROS-20261009-73-0043

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-62028: Missing Authorization

Missing Authorization vulnerability in bPlugins Before After Image Comparison – Image comparison for WP before-after-image-compare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Before After Image Comparison – Image comparison for WP: from n/a through...

PT-2026-108838

Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-payment-or-deposit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Deposits and Partial Payments for WooCommerce: from n...

CVE-2026-62042: Missing Authorization

Missing Authorization vulnerability in unFocus Projects Scripts n Styles scripts-n-styles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Scripts n Styles: from n/a through 3.5.8...

PT-2026-108874

Name of the Vulnerable Software and Affected Versions Asgaros Forum versions prior to 3.4.0 Description Asgaros Forum contains a missing authorization flaw that allows the exploitation of incorrectly configured access control security levels. Recommendations Update Asgaros Forum to version 3.4.0 ...

PT-2026-108869

Missing Authorization vulnerability in Cool Plugins AI Translation for Polylang automatic-translations-for-polylang allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Translation for Polylang: from n/a through 1.6.2...

PT-2026-108878

Name of the Vulnerable Software and Affected Versions WP Event Manager versions prior to 3.4.2 Description A missing authorization issue exists that allows the exploitation of incorrectly configured access control security levels. Recommendations Update to version 3.4.2 or later...

PT-2026-108889

Name of the Vulnerable Software and Affected Versions Before After Image Comparison – Image comparison for WP versions prior to 1.1.22 Description An issue exists where missing authorization allows for the exploitation of incorrectly configured access control security levels. Recommendations Upda...