Все уязвимости

Unauthorized Access to Tracing and Assessment Endpoints in mlflow/mlflow

Org.keycloak.keycloak-services: improper access control on keycloak server when the account account api feature is disabled

OpenFlagr <= 1.1.18 Authentication Bypass via Prefix Whitelist Path Normalization

satya-vinay Events-Management-System project.sql file access

Io.quarkus:quarkus-hibernate-orm-rest-data-panache: missing authorization in quarkus rest data panache via dropped security annotations

code-projects Matrimonial System matrimony.sql file access

Kentico Xperience 13 before 13.0.216 lacks object-level authorization checks for administration API

Comelit 1456B gateway allows low priviledge user to overwrite installer password via unauthorized endpoint

Moodle: missing capability check allows unauthorised grade penalty recalculation

Moodle: manual enrolment page accessible when plugin disabled

Moodle: incorrect capability check in ai generate image web service

A direct request ('forced browsing') vulnerability in Wallpaper Path in Synology DiskStation Manager

Rhymix before 2.1.31 allows insecure direct object reference, aka RVE-2026-1. Arbitrary files can be

LiteLLM affected by privilege escalation via unrestricted proxy configuration endpoint

NATS allows MQTT clients to bypass ACL checks

alexta69 MeTube Cookie File cookies.txt file access

code-projects Login Registration System SQL Database Backup login_registration_system.sql file access

Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is Missing Authorization due to improper enforcement of role-based access control

SourceCodester Online Clothing Store SQL Database Backup shopping.sql file access

Keycloak-rest-admin-ui-ext: authorization bypass vulnerability in the admin-ui-ext bulk role-mapping-delete endpoints of keycloak

Sharp and Toshiba Tec MFPs (multifunction printers) fail to properly authorize requests to directly

Unauthorized Access to Admin Functionality via Forced Browsing

HCL Aftermarket EPC is vulnerable to attack since the Application is vulnerable to Lucky 13. that ma

Argo Workflows Is Missing Authorization in Sync ConfigMap Provider

A vulnerability exists in the Aptsys POS Platform Web Services module thru 2025-05-28, which exposes

agentejo Cockpit CMS htaccess config.yaml YAMLLoad file access

Authenticated unintended access to critical program parameters

Multiple Vulnerabilities in IBM Datacap

Direct Request ('Forced Browsing') in GitLab

Unauthenticated direct access to web data in Wertheim SafeController Software exposes files