Vulnerabilities
Craft CMS Critical Flaw Lets Tokens Alter Multi-Site Content
A severe authorization bypass in Craft CMS versions before 5.11.0 allows attackers to modify or delete content across different sites using a single token.
Authorization Bypass
Everything Patch Herald has reported about Authorization Bypass: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
CVSS 9.6 ColdFusion Flaw Lets Low-Priv Users Write Data Without Interaction
Adobe ColdFusion versions up to 2025.0.13 and 2023.0.25 face a critical authorization bypass that requires no user action to exploit.