CVE-2025-7355

Authorization Bypass Through User-Controlled Key vulnerability in Beefull Energy Technologies Beefull App allows Exploitation of Trusted Identifiers. This issue affects Beefull App: before 24.07.2025...

CVE-2025-7355

CVE-2025-7355 affects Beefull App (Beefull Energy Technologies) with an authorization bypass caused by exploitation of a user-controlled key. Affected versions are prior to 24.07.2025. The vulnerability enables bypass of trusted identifiers, as described across multiple feeds (Red Hat, NVD, CVE l...

CVE-2025-7355 IDOR in Beefull Energy Technologies' Beefull App

Authorization Bypass Through User-Controlled Key vulnerability in Beefull Energy Technologies Beefull App allows Exploitation of Trusted Identifiers. This issue affects Beefull App: before 24.07.2025...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key through improper handling of web content. An attacker can execute arbitrary code or compromise user data by enticing a user to visit a specially crafted web page. Remediation Upgrade...

CVE-2025-5518

The CVE-2025-5518 entry concerns ArgusTech BILGER prior to version 2.4.6, where an authorization bypass arises from a user-controlled key that enables exploitation of trusted identifiers. The vulnerability, affecting versions before 2.4.6, grants user-level privileges bypassing intended security ...

CVE-2025-5518

Authorization Bypass Through User-Controlled Key vulnerability with user privileges in ArgusTech BILGER allows Exploitation of Trusted Identifiers. This issue affects BILGER: before 2.4.6...

CVE-2025-5518 IDOR in ArgusTech's BILGER

Authorization Bypass Through User-Controlled Key vulnerability with user privileges in ArgusTech BILGER allows Exploitation of Trusted Identifiers. This issue affects BILGER: before 2.4.6...

CVE-2025-5518 IDOR in ArgusTech's BILGER

Authorization Bypass Through User-Controlled Key vulnerability with user privileges in ArgusTech BILGER allows Exploitation of Trusted Identifiers. This issue affects BILGER: before 2.4.6...

PT-2025-37910

Name of the Vulnerable Software and Affected Versions ArgusTech BILGER versions prior to 2.4.6 Description An authorization bypass exists in ArgusTech BILGER due to a vulnerability related to user-controlled keys and trusted identifiers. This allows for the exploitation of user privileges...

PT-2025-37991

Name of the Vulnerable Software and Affected Versions Patika Global Technologies HumanSuite versions prior to 53.21.0 Description HumanSuite contains an authorization issue related to user-controlled keys, externally controlled references to resources, and improper authorization. This allows for...

PT-2025-37949

Name of the Vulnerable Software and Affected Versions: Beefull App versions prior to 24.07.2025 Description: An authorization bypass exists in Beefull Energy Technologies Beefull App due to exploitation of trusted identifiers through a user-controlled key. Recommendations: Update Beefull App to...

DEBIAN-CVE-2023-53220

In the Linux kernel, the following vulnerability has been resolved: media: az6007: Fix null-ptr-deref in az6007i2cxfer In az6007i2cxfer, msg is controlled by user. When msgi.buf is null and msgi.len is zero, former checks on msgi.buf would be passed. Malicious data finally reach az6007i2cxfer. If...

Authorization Bypass Through User-Controlled SQL Primary Key

Overview intelliants/subrion is an open source php content management system. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled SQL Primary Key via the Run SQL Query process. An attacker can obtain unauthorized access to restricted data or functions ...

CVE-2025-10127

Daikin Europe N.V Security Gateway is vulnerable to an authorization bypass through a user-controlled key vulnerability that could allow an attacker to bypass authentication. An unauthorized attacker could access the system without prior credentials...

CVE-2025-10127 Daikin Europe N.V Security Gateway Weak Password Recovery Mechanism for Forgotten Password

Daikin Europe N.V Security Gateway is vulnerable to an authorization bypass through a user-controlled key vulnerability that could allow an attacker to bypass authentication. An unauthorized attacker could access the system without prior credentials...

CVE-2025-10127 Daikin Europe N.V Security Gateway Weak Password Recovery Mechanism for Forgotten Password

Daikin Europe N.V Security Gateway is vulnerable to an authorization bypass through a user-controlled key vulnerability that could allow an attacker to bypass authentication. An unauthorized attacker could access the system without prior credentials...

CVE-2025-10127

CVE-2025-10127 affects Daikin Europe N.V Security Gateway. The vulnerability is an authorization bypass caused by a user-controlled key, allowing an unauthenticated attacker to access the system. Documented across multiple vendors and advisories (e.g., Red Hat, NVD, CISA ICS), with high severity ...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via a permissive API. An attacker can retrieve unauthorized workflow definitions by specifying their names through crafted API requests. Remediation Upgrade...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via a permissive API. An attacker can retrieve unauthorized workflow definitions by specifying their names through crafted API requests. Remediation Upgrade...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via improper access control in the getValue for objects. An attacker can gain unauthorized access to, create, edit, or relate data and object entries or definitions across different virtu...