CVE-2026-34358 CtrlPanel: Missing Authorization on Admin Write Endpoints Allows RBAC Bypass

CtrlPanel is open-source billing software for hosting providers. Versions 1.1.1 and prior contains a broken access control vulnerability where multiple admin controllers enforce permission checks on form display methods but omit equivalent checks on the corresponding write methods, allowing any...

CVE-2025-10819

A security vulnerability has been detected in fuyanglipengjun platform 1.0. This issue affects the function UserCouponController of the file /usercoupon/queryAll. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed public...

PT-2025-39085

Name of the Vulnerable Software and Affected Versions fuyang lipengjun platform version 1.0 Description A security issue exists in the fuyang lipengjun platform that results in improper authorization. This affects the UserCouponController function within the /usercoupon/queryAll file. Remote...