CVE-2024-8949-POC

Уязвимость нарушения контроля доступа обнаружена в интернет-магазине очков Sourcecodester: манипуляция ID корзины и ID товара приводит к нежелательному добавлению и удалению товаров из корзины пользователя CVE-2024-8949 Поставщик: Sourcecodester...

CVE-2025-65670

CVE-2025-65670 Небезопасная прямая ссылка на объект Insecure Direct Object Reference, IDOR в classroomio 0.1.13 позволяет студентам получать доступ к конфиденциальным конечным точкам администратора/учителя путём манипуляции ID курсов в URL, что приводит к несанкционированному раскрытию...

CVE-2026-88024

A flaw was found in the GridFS component of the MongoDB Rust Driver. An authenticated user can exploit this vulnerability by manipulating a file identifier, causing it to be misinterpreted as a query condition. This improper handling of special elements in data query logic can lead to unauthorize...

CVE-2025-32432

CraftCMS CVE-2025-32432 취약점 익스플로잇 도구 세트 SensePost 연구 기반 CraftCMS 원격 코드 실행 취약점 익스플로잇 도구. 📁 파일 설명 🎯 주요 도구 1. finalpoc.py - 최종 최적화된 POC 정보 유출 및 원격 코드 실행 지원 자동 asset ID 발견 다양한 세션 주입 방법 상세한 디버그 모드 2. test.py - 원본 SensePost 기반 단순화 버전 자동 asset ID 획득 기능 포함 yii\rbac\PhpManager 메서드 사용 3...

CVE-2026-22014-GraphQL-Persisted-Queries-Injection-via-ID-Manipulation

CVE-2026-22014 – ID 조작을 통한 GraphQL Persisted Queries 인젝션 프로그램 코드Node.js root@kitploit: // graphqlpersisted.js - Accepts persisted query IDs const express = require'express'; const graphqlHTTP = require'express-graphql'; const queries = "abc": "query user name " ; app.post'/graphql', graphqlHTTP...

EUVD-2026-72366

The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.1.7 via the 'watchcheckout' function due to missing validation on a user controlled key. This makes it possib...

CVE-2026-86293

A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this vulnerability is an unknown functionality of the file delete-user.php of the component Deletion Endpoint. Executing a manipulation of the argument ID can lead to missing authentication. The attack may be...

CVE-2026-86293

A missing authentication flaw exists in the Deletion Endpoint (file delete-user.php) of SourceCodester Simple Traffic Offense System 1.0 . By manipulating the ID argument remotely without authentication, an attacker can perform unauthorized deletion operations, resulting in low integrity and low ...

CVE-2026-86293 SourceCodester Simple Traffic Offense System Deletion Endpoint delete-user.php missing authentication

A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this vulnerability is an unknown functionality of the file delete-user.php of the component Deletion Endpoint. Executing a manipulation of the argument ID can lead to missing authentication. The attack may be...

CVE-2026-86285

BookStack versions up to 26.05.2 are affected by an improper access control vulnerability in the Attachment Edit Endpoint , specifically the AttachmentController::getUpdateForm function in app/Uploads/Controllers/AttachmentController.php. The ID argument can be manipulated to bypass permission ch...

CVE-2026-86285 BookStack Attachment Edit Endpoint AttachmentController.php getUpdateForm access control

A vulnerability was detected in BookStack up to 26.05.2. Affected by this issue is the function AttachmentController::getUpdateForm of the file app/Uploads/Controllers/AttachmentController.php of the component Attachment Edit Endpoint. The manipulation of the argument ID results in improper acces...

CVE-2026-86263

A vulnerability was detected in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. This impacts the function orderRecordsService.cancelOrder of the file ssmpro/src/main/java/cn/sfturing/web/OrderController.java of the component Order Cancellation. The manipulation of the argument ...

CVE-2026-86263

sfturing hosp_order is a Java-based hospital order management application. The vulnerability affects the Order Cancellation component, specifically the orderRecordsService.cancelOrder function in ssm_pro/src/main/java/cn/sfturing/web/OrderController.java. Manipulation of the ID argument enables a...

EUVD-2026-72180

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/supdel.php?type=supplier. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. Th...

bola-CVE-2023-27524

bola-CVE-2023-27524 📄 README.md — BOLA CVE-2023-27524 데모 프로젝트 root@kitploit: 🔐 객체 수준 인증 위반BOLA 데모 CVE-2023-27524 보안 분석 및 수정 --- 📌 프로젝트 개요 이 프로젝트는 Flask 기반 API를 사용하여 실제 객체 수준 인증 위반BOLA 취약점과 그에 대한 안전한 수정 방법을 보여줍니다. 이 취약점은 CVE-2023-27524를 모델로 하며, 공격자가 API 요청에서 객체 식별자ID를 수정하여 승인되지 않은 객체에 접근하거나 조작할 수...

CVE-2026-85512 SourceCodester Class and Exam Timetabling System session.php authorization

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /admin/session.php. The manipulation of the argument ID results in missing authorization. The attack can be executed remotely. The exploit has been...

EUVD-2026-70995

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /admin/session.php. The manipulation of the argument ID results in missing authorization. The attack can be executed remotely. The exploit has been...

PT-2026-84360

Name of the Vulnerable Software and Affected Versions Grashjs Atlas CMMS versions prior to 1.6.0 Description A Broken Object Level Authorization issue allows an authenticated user from one tenant to read and modify the company record of another tenant. This occurs because the application fails to...

EUVD-2026-69390

A Broken Object Level Authorization vulnerability exists in Grashjs Atlas CMMS prior to v1.6.0. An authenticated user from one tenant can read and modify another tenant's company record by changing only the numeric ID in the /company/id endpoint. The application does not enforce tenant-level...

CVE-2026-78160

A vulnerability has been found in Dolibarr ERP up to 18.0.10/22.0.5/23.0.3. This issue affects some unknown processing of the file /user/note.php of the component User Notes Handler. The manipulation of the argument ID leads to authorization bypass. The attack can be initiated remotely. Upgrading...