CVE-2025-8463

The CVE-2025-8463 entry maps to an authorization bypass in Nebula Informatics SecHard (SecHard) prior to version 3.6.2-20250805, caused by user-controlled key manipulation that bypasses authorization controls (parameter injection risk noted in PT-2025-38148). Affected component appears to be the ...

CVE-2025-8463

Authorization Bypass Through User-Controlled Key vulnerability in SecHard Information Technologies SecHard allows Forceful Browsing. This issue affects SecHard: before 3.6.2-20250805...

CVE-2025-8057

Authorization Bypass Through User-Controlled Key, Externally Controlled Reference to a Resource in Another Sphere, Improper Authorization vulnerability in Patika Global Technologies HumanSuite allows Exploiting Trust in Client. This issue affects HumanSuite: before 53.21.0...

CVE-2025-8057

CVE-2025-8057 concerns an authorization bypass in Patika Global Technologies’ HumanSuite. The issue arises from a user‑controlled key that enables an externally controlled reference to a resource in another sphere, leading to improper authorization. Affected product/version: HumanSuite prior to 5...

CVE-2025-8057 IDOR in Patika Global Technologies' HumanSuite

Authorization Bypass Through User-Controlled Key, Externally Controlled Reference to a Resource in Another Sphere, Improper Authorization vulnerability in Patika Global Technologies HumanSuite allows Exploiting Trust in Client. This issue affects HumanSuite: before 53.21.0...

CVE-2025-8057

Authorization Bypass Through User-Controlled Key, Externally Controlled Reference to a Resource in Another Sphere, Improper Authorization vulnerability in Patika Global Technologies HumanSuite allows Exploiting Trust in Client. This issue affects HumanSuite: before 53.21.0...

CVE-2025-7355

Authorization Bypass Through User-Controlled Key vulnerability in Beefull Energy Technologies Beefull App allows Exploitation of Trusted Identifiers. This issue affects Beefull App: before 24.07.2025...

CVE-2025-7355

CVE-2025-7355 affects Beefull App (Beefull Energy Technologies) with an authorization bypass caused by exploitation of a user-controlled key. Affected versions are prior to 24.07.2025. The vulnerability enables bypass of trusted identifiers, as described across multiple feeds (Red Hat, NVD, CVE l...

CVE-2025-7355

Authorization Bypass Through User-Controlled Key vulnerability in Beefull Energy Technologies Beefull App allows Exploitation of Trusted Identifiers. This issue affects Beefull App: before 24.07.2025...

CVE-2025-7355 IDOR in Beefull Energy Technologies' Beefull App

Authorization Bypass Through User-Controlled Key vulnerability in Beefull Energy Technologies Beefull App allows Exploitation of Trusted Identifiers. This issue affects Beefull App: before 24.07.2025...

CVE-2025-7355 IDOR in Beefull Energy Technologies' Beefull App

Authorization Bypass Through User-Controlled Key vulnerability in Beefull Energy Technologies Beefull App allows Exploitation of Trusted Identifiers. This issue affects Beefull App: before 24.07.2025...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key through improper handling of web content. An attacker can execute arbitrary code or compromise user data by enticing a user to visit a specially crafted web page. Remediation Upgrade...

CVE-2025-5518 IDOR in ArgusTech's BILGER

Authorization Bypass Through User-Controlled Key vulnerability with user privileges in ArgusTech BILGER allows Exploitation of Trusted Identifiers. This issue affects BILGER: before 2.4.6...

CVE-2025-5518 IDOR in ArgusTech's BILGER

Authorization Bypass Through User-Controlled Key vulnerability with user privileges in ArgusTech BILGER allows Exploitation of Trusted Identifiers. This issue affects BILGER: before 2.4.6...

CVE-2025-5518

Authorization Bypass Through User-Controlled Key vulnerability with user privileges in ArgusTech BILGER allows Exploitation of Trusted Identifiers. This issue affects BILGER: before 2.4.6...

CVE-2025-5518

The CVE-2025-5518 entry concerns ArgusTech BILGER prior to version 2.4.6, where an authorization bypass arises from a user-controlled key that enables exploitation of trusted identifiers. The vulnerability, affecting versions before 2.4.6, grants user-level privileges bypassing intended security ...

PT-2025-37991

Name of the Vulnerable Software and Affected Versions Patika Global Technologies HumanSuite versions prior to 53.21.0 Description HumanSuite contains an authorization issue related to user-controlled keys, externally controlled references to resources, and improper authorization. This allows for...

PT-2025-37910

Name of the Vulnerable Software and Affected Versions ArgusTech BILGER versions prior to 2.4.6 Description An authorization bypass exists in ArgusTech BILGER due to a vulnerability related to user-controlled keys and trusted identifiers. This allows for the exploitation of user privileges...

PT-2025-37949

Name of the Vulnerable Software and Affected Versions: Beefull App versions prior to 24.07.2025 Description: An authorization bypass exists in Beefull Energy Technologies Beefull App due to exploitation of trusted identifiers through a user-controlled key. Recommendations: Update Beefull App to...

DEBIAN-CVE-2023-53220

In the Linux kernel, the following vulnerability has been resolved: media: az6007: Fix null-ptr-deref in az6007i2cxfer In az6007i2cxfer, msg is controlled by user. When msgi.buf is null and msgi.len is zero, former checks on msgi.buf would be passed. Malicious data finally reach az6007i2cxfer. If...