CVE-2026-55881: Authorization Bypass Through User-Controlled Key

OpenReplay is a self-hosted session replay suite. From 1.22.0 before 1.27.0, getFirstMob returned 15-second presigned S3 download URLs for a session's DOM-replay recording based solely on the session path parameter, while validateProjectAccess checked only that the project belonged to the...

Papenmeier WiFi Baby Monitor Free & Lite < 2.02.2 - Remote Audio Record

Papenmeier WiFi Baby Monitor Free & Lite 2.02.2 - Remote Audio Record. CVE-2018-7661. Remote exploit for Android platform Whilst analysing a number of free communication based applications on the Google Play Store, I took a look at WiFi Baby Monitor: Free & Lite the free version of WiFi Baby...