Skip to content
OpenAdvisories

Vendor

rocboss

1 known vulnerabilities.

Products

paopao-ce 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-111649

    Rocboss paopao-ce through 0.6.0-alpha.3 IDOR via DownloadAttachment Endpoint

    Rocboss paopao-ce through 0.6.0-alpha.3 contains an insecure direct object reference vulnerability in DownloadAttachment that allows authenticated users to access private media by supplying arbitrary content IDs. Attackers can enumerate sequential post_conten…

    rocboss paopao-ce