CVE-2026-111929 Coder 2.30.0 before 2.34.8 Cross-Organization File Disclosure via DownloadFile RPC

Coder from 2.30.0 before 2.34.8 contains an authorization bypass vulnerability in the provisioner daemon DownloadFile gRPC handler that allows authenticated provisioner daemons to download other organizations' cached Terraform module archives. Attackers with an org-scoped provisioner key and a...

CVE-2026-111929

Coder versions 2.30.0 before 2.34.8 are vulnerable to a cross-organization file disclosure flaw in the provisioner daemon's DownloadFile gRPC handler . An authorization bypass allows authenticated provisioner daemons to download cached Terraform module archives belonging to other organizations. B...

CVE-2026-111929 Coder 2.30.0 before 2.34.8 Cross-Organization File Disclosure via DownloadFile RPC

Coder from 2.30.0 before 2.34.8 contains an authorization bypass vulnerability in the provisioner daemon DownloadFile gRPC handler that allows authenticated provisioner daemons to download other organizations' cached Terraform module archives. Attackers with an org-scoped provisioner key and a...

KwsPHP Module Archives (id) Remote SQL Injection Vulnerability

No description provided by source. KwsPHP v1.3.456 archivesSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=archives" EXPLOiT 1:...

KwsPHP 1.3.456 Module Archives - id SQL Injection

KwsPHP 1.3.456 Module Archives - id SQL Injection KwsPHP v1.3.456 archivesSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=archives" EXPLOiT 1:...

KwsPHP 1.3.456 Module Archives - 'id' SQL Injection

KwsPHP v1.3.456 archivesSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=archives" EXPLOiT 1:...