Broken access control.

Missing authorization in Octopus Deploy Octopus Server

• Octopus Deploy Octopus Server
• Broken access control

Unauthenticated IDOR Enables Disclosure of Other Users’ last-known details

• Apereo Foundation openEQUELLA
• Broken access control

TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in get_agent_execution_configuration in superagi/controllers/agent_execution_config.py.

• Broken access control

SuperAGI v0.0.14 contains an improper access control vulnerability in get_agent_by_latest_execution in superagi/controllers/agent_execution.py.

• Broken access control

SuperAGI up to v0.0.14 contains an improper access control vulnerability.

• Broken access control

Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN configurations and preferences.

• Broken access control

Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows unauthorized attackers to inject crafted tracking data into the victim's location database…

• Broken access control

Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to write arbitrary files.

• Broken access control

Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside of the sandbox via providing an absolute…

• Broken access control

An issue in Forkyz versionCode 8500000 allows attackers to arbitrarily change another user's storage settings via supplying a crafted URI string.

• Broken access control

Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the app's logging mechanism and log data.

• Broken access control

Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 (versionCode 62) allows unauthorized attackers to arbitrarily read another's Nostr event database.

• Broken access control

Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily manipulate the app's MAXS command/transport mechanism.

• Broken access control

Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows unauthorized attackers to move or overwrite files in another user's private storage via supplying a crafted conte…

• Broken access control

Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGuard no-root firewall versionCode 2026080101/versionName 2.337 allows unauthorized attackers to arbitrarily force a devi…

• Broken access control

Insecure permissions in the NotificationHelper component of NoNonsense Notes versionCode 72600 allows unauthorized attackers to write in another user's notes via supplying a note id.

• Broken access control

Insecure permissions in the object/Page.java component of MBasov OMN Outline notes Markdown versionCode 3400 allows unauthorized attackers to arbitrarily write content into another user's private sto…

• Broken access control

Insecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) allows unauthorized attackers to arbitrarily read another user's note data.

• Broken access control

Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting.

• Broken access control

Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an exported component, leading to manipulation of the shopping-list data.

• Broken access control

Insecure permissions in Share to Clipboard v1.14.1 (versionCode 32) allows unauthorized attackers to arbitrarily overwrite another user's clipboard content.

• Broken access control

Insecure permissions in Share 2 Archive Today versionCode 61 allows unauthorized attackers to arbitrarily overwrite another user's clipboard content via supplying a crafted URL.

• Broken access control

Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrarily read another user's private notes/tasks/diary content.

• Broken access control

Insecure permissions in Ghost Commander File Manager versionCode 479 allows unauthorized attackers to arbitrarily read and write files inside the commander's private storage.

• Broken access control

Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 allows unauthorized attackers to arbitrarily trigger another user's configured automated actions.

• Broken access control

Insecure permissions in Fossify v1.3.0 allows unauthorized attackers to access and read another user's stored contacts.

• Broken access control

Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's' note database.

• Broken access control

maotoumao MusicFreeDesktop Request Forwarder information disclosure

• maotoumao MusicFreeDesktop
• Information disclosure
• Broken access control

Objects API: Cross-object-type authorization bypass on the object history-detail endpoint

• maykinmedia open-object
• Broken access control

MailWatch: IDOR lets any authenticated user release or delete another tenant's quarantined mail

• MailWatch
• Broken access control
• CWE-566

InvoicePlane: Guest user IDOR in quote approval and rejection

• InvoicePlane
• Broken access control

Domoticz: Missing authorization and path traversal in the udevices Lua parser handler

• domoticz
• Path traversal
• Broken access control

a2ui-project a2ui Renderer root.js Root.renderComponentTree dynamically-determined object attributes

• a2ui
• Broken access control
• CWE-913

AVideo-Encoder: missing authentication on control and status endpoints

• WWBN AVideo-Encoder
• Authentication bypass
• Broken access control

Bricks Broken Access Control via query_result Endpoint

• Bricks Builder
• Broken access control

Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)

• Information disclosure
• Broken access control

<3.1.6 · fixed in 3.1.6

PiWeb Disable payment method / Partial payment for WooCommerce before 1.1.10.9 Missing Authorization via update_fees

• PI Websolution PiWeb Disable payment method / Partial payment for WooCommerce
• Broken access control

Dolibarr ERP CRM before 24.0.2 Missing Authorization via public recruitment view.php

• Dolibarr ERP/CRM
• Broken access control

LangGraph JavaScript custom authentication may permit cross-user Store access

• Broken access control

>=0.1.2, <0.15.0 · fixed in 0.15.0

filelock: StrictSoftFileLock creates its claim directories without the lock mode, so another local user with a write bit on them can end a live hold

• Broken access control

>=3.30.0, <4.2.1 · fixed in 4.2.1

filelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACL

• Broken access control

>=3.10.0, <4.2.1 · fixed in 4.2.1

Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection from client-controlled url path with no in-process authorization

• Red Hat OpenShift AI (RHOAI)
• Broken access control

Echo's middleware.Static: `%2F`-encoded path bypasses route/group middleware guarding a statically-served path

• Broken access control
• CWE-177

<4.16.0 · fixed in 4.16.0

rucio has an Authorization Bypass on REST API endpoint for signing URLs

• Broken access control

>=1.16.1, <35.9.0 || >=36.0.0rc1, <38.6.0 || >=39.0.0rc1, <41.0.0rc1 · fixed in 35.9.0, 38.6.0, 41.0.0rc1

ToolJet 3.20.2-lts before 3.20.242-lts Signup Bypass via SignupDisableGuard

• ToolJet
• Broken access control

n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass

• n8n
• Broken access control

n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Guard Bypass via Execute Sub-workflow

• n8n
• Broken access control

n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass via Inline Sub-Workflows

• n8n
• Broken access control

n8n before 1.123.85, 2.43.5, and 2.44.1 Chat Hub Authorization Bypass

• n8n
• Broken access control

Improper access control in Google chrome-devtools-mcp

• Google chrome-devtools-mcp
• Broken access control

PostgreSQL Anonymizer: A masked role reads the authentic data of masked tables through a masking rule with a sub-query

• DALIBO PostgreSQL Anonymizer
• Broken access control

PostgreSQL Anonymizer: Masking rules of the tables are not applied through security_invoker views

• DALIBO PostgreSQL Anonymizer
• Broken access control

PostgreSQL Anonymizer: Masked partitions and child tables are not masked when they are queried through their parent

• DALIBO PostgreSQL Anonymizer
• Broken access control

PostgreSQL Anonymizer: Data-modifying CTEs bypass the read-only restriction of masked roles

• DALIBO PostgreSQL Anonymizer
• Broken access control

SSO settings authorization bypass

• Grafana Enterprise
• Grafana OSS
• Broken access control

Alerting contact point authorization bypass via schema downgrade

• Grafana Enterprise
• Grafana OSS
• Broken access control

Missing authorization in Jenkins

• Jenkins
• Broken access control

Missing authorization in Jenkins

• Jenkins
• Broken access control

Apache Kafka: Unauthorized principal can read arbitrary broker files via IncrementalAlterConfigs

• Apache Software Foundation Apache Kafka
• Broken access control

Session Smart Conductor: Insecure file permissions cause unauthorized access to sensitive routing credentials

• Juniper Networks Session Smart Conductor
• Broken access control