6632 matches found
CVE-2023-22518
CVE-2023-22518 Improper Authorization Vulnerability in Confluence Data Center and Server. Atlassian has warned administrators about a critical vulnerability in Confluence. Exploitation of this vulnerability could lead to data loss, therefore the developer recommends you install the patch...
CVE-2023-22518
CVE-2023-22518 An Exploitation tool to exploit the confluence server that are vulnerable to CVE-2023-22518 Improper Authorization Vulnerability Installation: root@kitploit: git clone https://github.com/sanjai-AK47/CVE-2023-22518 cd CVE-2023-22518 python3 exploit.py Usage: root@kitploit: python3...
CVE-2023-22515
CVE-2023-22515 CVE-2023-22515 の基本情報 影響を受ける製品: Atlassian Confluence Data Center & Confluence Server。 公開日: 2023年10月4日。 深刻度: Critical CVSS 10.0。 脆弱性の種類: Broken Access Control / Improper Authorization → 攻撃者がリモートから管理者アカウントを作成 できる。 脆弱性は Confluence setup mechanism に存在する。 影響: Confluence Data Center &...
CVE-2023-22518
CVE-2023-22518 Confluence Data Center および Server における不適切な認可の脆弱性。 Atlassian は、Confluence における重大な脆弱性について管理者に警告しました。この問題を悪用するとデータ損失につながる可能性があるため、開発者はできるだけ早くパッチを適用するよう促しています。 この脆弱性はデータ漏洩には利用できず、atlassian.net ドメイン経由でアクセスする Atlassian Cloud サイトには影響しないことに注意してください。...
CVE-2018-13382
CVE-2018-13382 CVE-2018-13382 https://devco.re/blog/2019/08/09/attacking-ssl-vpn-part-2-breaking-the-Fortigate-ssl-vpn/ An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 under SSL VPN web portal allows an unauthenticated attacker to...
Exploit-CVE-2023-22518
Exploit-CVE-2023-22518 CVE-2023-22518 in Confluence CVE-2023-22518 : 이 취약점은 "Confluence 데이터베이스 및 서버의 부적절한 권한 부여 취약점"으로 설명됩니다. 이 오류는 Atlassian 제품의 On-premises 버전에 영향을 미칩니다. 환경 설정 취약한 버전 8.0.4 사용 다운로드 URL :...
cloudpanel-2.4.2-CVE-2024-44765-recovery
CVE-2024-44765 is an Improper Authorization Access Control Misconfiguration vulnerability in MGT-COMMERCE GmbH CloudPanel versions 2.0.0 to 2.4.2 1. Follow instructions in every folder this should be done locally 2. Reset Passwords and Access root@kitploit: for root $ sudo passwd root while for...
CVE-2026-58231
CVE-2026-58231 検出スクリプト CVE-2026-58231 — SAP Commerce Cloud の Data Hub Adapter コンポーネントにおける不適切な認可（CVSS 10.0）のための検出・前提条件検証ツールです。 本スクリプトは非破壊的なチェックのみを実行します。コードインジェクションのペイロードを同梱・実行することはありません。 背景 CVE-2026-58231 は、認証されていないリモート攻撃者がデフォルト認証クライアントを悪用し、Data Hub Adapter...
bola-CVE-2023-27524
bola-CVE-2023-27524 📄 README.md — BOLA CVE-2023-27524 デモプロジェクト root@kitploit: 🔐 Broken Object Level Authorization BOLA デモンストレーション CVE-2023-27524 セキュリティ分析と修正 --- 📌 プロジェクト概要 このプロジェクトは、FlaskベースのAPIを使用して、実際の Broken Object Level Authorization BOLA 脆弱性とその安全な修正方法を示します。 この脆弱性は CVE-2023-27524...
CVE-2026-93961
A security flaw has been discovered in Dromara UJCMS up to 12.3.1. The affected element is the function usernameExist of the file ujcms-cms/src/main/java/com/ujcms/cms/core/web/api/UserController.java of the component UserController. Performing a manipulation of the argument Username results in...
EUVD-2026-83650
A security flaw has been discovered in Dromara UJCMS up to 12.3.1. The affected element is the function usernameExist of the file ujcms-cms/src/main/java/com/ujcms/cms/core/web/api/UserController.java of the component UserController. Performing a manipulation of the argument Username results in...
CVE-2026-93961 Dromara UJCMS UserController UserController.java usernameExist improper authorization
A security flaw has been discovered in Dromara UJCMS up to 12.3.1. The affected element is the function usernameExist of the file ujcms-cms/src/main/java/com/ujcms/cms/core/web/api/UserController.java of the component UserController. Performing a manipulation of the argument Username results in...
CVE-2026-93961
An improper authorization flaw exists in the usernameExist function of UserController.java in Dromara UJCMS up to version 12.3.1 . By manipulating the Username argument, a remote, unauthenticated attacker can obtain partial access to user information (CVSS 3.1 score: 5.3 MEDIUM , low confidential...
Modoboa < 2.1.0 - Improper Authorization
Improper Authorization in GitHub repository modoboa/modoboa prior to 2.1.0. id: CVE-2023-2227 info: name: Modoboa 2.1.0 - Improper Authorization author: ritikchaddha,princechaddha severity: critical description: | Improper Authorization in GitHub repository modoboa/modoboa prior to 2.1.0. impact:...
WordPress Easy Student Results <=2.2.8 - Improper Authorization
WordPress Easy Student Results plugin through 2.2.8 is susceptible to information disclosure. The plugin lacks authorization in its REST API, which can allow an attacker to retrieve sensitive information related to courses, exams, and departments, as well as student grades and information such as...
Jira - Incorrect Authorization
Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 is susceptible to an incorrect authorization check in the /rest/api/2/user/picker rest resource, enabling an attacker to enumerate usernames and gain improper access. id: CVE-2019-3403...
Tenda AC1200 V-W15Ev2 - Authentication Bypass
The Tenda AC1200 V-W15Ev2 router is affected by improper authorization/improper session management. The software does not perform or incorrectly perform an authorization check when a user attempts to access a resource or perform an action. This allows the router's login page to be bypassed. The...
CVE-2026-31309
CVE-2026-31309: Improper Access Control in Mysterium Node before v1.36.0 Improper authorization in the /tequilapi/config/user endpoint of Mysterium Node from v1.21.1-rc0 before v1.36.0 allows an unauthenticated attacker to arbitrarily overwrite the node's configuration and achieve a full node...
QNAP HBS 3 - Broken Access Control
An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 Hybrid Backup Sync. If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 versions prior to v16.0.0415 on QTS 4.5.2; versions prior to...