CVE-2026-109165 TDuck survey form through 6.0 Authorization Bypass via User-Controlled Form Key in POST /user/form/item/batch/create

TDuck survey form through 6.0 contains a broken access control vulnerability that allows authenticated users to add fields to other users' forms via POST /user/form/item/batch/create. Attackers can submit an array whose first element references their own form and later elements reference a victim...

CVE-2026-109165

The TDuck survey form (through version 6.0 ) is vulnerable to a broken access control issue (CWE-639) in the POST /user/form/item/batch/create endpoint. This flaw allows authenticated users to inject arbitrary fields into other users' forms by submitting an array where the first element reference...

EUVD-2026-97371

TDuck survey form through 6.0 contains a broken access control vulnerability that allows authenticated users to add fields to other users' forms via POST /user/form/item/batch/create. Attackers can submit an array whose first element references their own form and later elements reference a victim...

CVE-2024-24409

CVE-2024-24409 - ADManager Plus Build 7210 Elevation of Privilege Vulnerability Description The Modify Computers is a predefined role in ADManager for managing computers. If a technician user has the Modify Computers privilege over a computer, they can change the userAccountControl and...

CVE-2026-108889

A flaw exists in Yungengxin Cloud Billing 2024.11.28.11 affecting the IOCTL Process Termination component. Specifically, the function sub_14000443C within the LWBilling64.sys library is vulnerable due to insufficient access control when the Pid argument is manipulated. This vulnerability can be e...

EUVD-2026-97368

A flaw has been found in Yungengxin Cloud Billing 2024.11.28.11. Affected by this vulnerability is the function sub14000443C in the library LWBilling64.sys of the component IOCTL Process Termination. Executing a manipulation of the argument Pid can lead to exposed ioctl with insufficient access...

WordPress Push Notification for Post and BuddyPress plugin <= 3.23 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin Push Notification for Post and BuddyPress versions = 3.23...

http2-bomb-analysis-paper

HTTP/2 Bomb: HPACK Indexed-Reference Amplification Chain Attack A high school student's independent technical deep-dive June 2026 TL;DR This repository contains my complete analysis of the HTTP/2 Bomb vulnerability CVE-2026-49975 / CVE-2026-47774, which chains two decades-old HTTP/2 primitives:...

WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin Paid Videochat Turnkey Site versions = 7.5.12...

CVE-2025-69727

CVE-2025-69727 Vendor of Product INDEX-EDUCATION Affected Product Code Base PRONOTE - 202X.X.X 2025.2.8 Description An Incorrect Access Control vulnerability exists in INDEX-EDUCATION PRONOTE prior to 2025.2.8. The affected components composeUrlImgPhotoIndividu allow the construction of direct UR...

WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin Bus Ticket Booking with Seat Reservation versions = 5.9.7...

POC-CVE-2026-19681

CVE-2026-19681 — command injection in file upload processing authenticated Status: CONFIRMED on a 6.7.2-14.el9 lab 2026-08-20. Staged filename p;sleep$IFS20;-EvvfJk via POST /rest/file/upload context prefix carries the metachars, then POST /rest/auditFile type=scapLinux, version=1.2 stalled exact...

WordPress WP OAuth Server plugin <= 6.4.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nguyen Viet Tin in WordPress Plugin WP OAuth Server versions = 6.4.0...

WordPress JetFormBuilder plugin <= 3.6.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Intrudify in WordPress Plugin JetFormBuilder versions = 3.6.6...

CVE-2023-43318

CVE-2023-43318 JetStream Smart Switch - TL-SG2210P v5.0/ Improper Access Control / CVE-2023-43318 + Credits: Shahnawaz Shaikh, Security Researcher at Cybergate Defense LLC + Twitter Vendor: Tp-Link http://tp-link.com Product: JetStream Smart Switch - TL-SG2210P Vulnerability Type: Incorrect Acces...

Digisol-DG-GR1321-s-Improper-Access-Control-CVE-2024-4231

Digisol-DG-GR1321-s-Improper-Access-Control-CVE-2024-4231...

CVE-2025-25618

CVE-2025-25618 Unifiedtransform v2.0 is vulnerable to Incorrect Access Control, allowing teachers to change the Section Name and Room Number — permissions that should be restricted to administrators. Vendor: Unifiedtransform PoC Step 1: Log in to the application as a Teacher. Step 2: Browse to th...

brokeCLAUDIA

🔓 brokeCLAUDIA - CVE-2025-41090 CVE-2025-41090 - Broken access control vulnerability in microCLAUDIA 📑 Table of Contents What is microCLAUDIA? Vulnerability CVE-2025-41090 📂 Public Disclosure CWE Broken Access Control Remediation Presentation Exploit 📂 Overview Requirements Installation Usage Not...

CVE-2026-1907

A SQL Injection SQLi affects the Kong Gateway Enterprise and Open Source clustering communication logic when operating in Hybrid Mode. The issue can be triggered by sending specially crafted RPC requests to the Control Plane CP, leading to potential unauthorized database access. Leveraging the...

CVE-2026-107863

Missing Authorization vulnerability in Codection Products Restricted Users for WooCommerce woo-products-restricted-users allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Products Restricted Users for WooCommerce: from n/a through 0.7...