CVE-2026-78023

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-78023

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

EUVD-2026-95579

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-78023

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to an Authorization Bypass Through User-Controlled Key vulnerability (CWE-639). A low privileged attacker with remote access could exploit this flaw to achieve Elevation of privileges . No specific exploi...

next-CVE-2025-29927

CVE-2025-29927: Next.js 미들웨어의 인증 우회 Next.js에서 중요한 취약점CVE-2025-29927이 발견되어 미들웨어 로직을 우회하여 보호된 라우트에 무단 접근할 수 있습니다. 이 문제는 Next.js 버전 11.1.4부터 13.5.6, 그리고 14.x 14.2.25 또는 15.x 15.2.3에 영향을 미칩니다. 완화를 위해 최신 수정 버전14.2.25+ 또는 15.2.3+으로 업그레이드하거나, 방화벽 규칙을 적용하여 x-middleware-subrequest 헤더를 차단하세요...

API-Security-Checklist

English | 繁中版 | 简中版 | العربية | Azərbaycan | Български | বাংলা | Català | Čeština | Deutsch | Ελληνικά | Español | فارسی | Français | हिंदी | Indonesia | Italiano | 日本語 | ພາສາລາວ | Македонски | മലയാളം | Монгол | Nederlands | Polski | Português Brasil | Русский | ไทย | Türkçe | Українська | Tiếng...

CVE-2023-22518

CVE-2023-22518 CVE-2023-22518 부적절한 권한 부여 취약점에 취약한 Confluence 서버를 공격하기 위한 익스플로잇 도구 설치: git clone https://github.com/sanjai-AK47/CVE-2023-22518 cd CVE-2023-22518 python3 exploit.py 사용법: python3 exploit.py -h usage: exploit.py -h -d DOMAIN -dL DOMAINSLIST -o OUTPUT -to TIMEOUT -px PROXY -v 설명: Cisco...

CVE-2026-97075

Missing Authorization vulnerability in WP Media WP Rocket wp-rocket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Rocket: from n/a before 3.23.5...

EUVD-2026-95561

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-76769

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-76769

Dell Secure Connect Gateway (SCG) Policy Manager , versions prior to 5.34.00.16 , is impacted by a Missing Authorization vulnerability (CWE-862). A low privileged attacker with remote access could exploit this flaw to achieve Elevation of privileges . Remediation is available via security update ...

CVE-2026-76769

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

Vulnerabilities in Splunk Enterprise

Splunk has identified several vulnerabilities in Splunk Enterprise. These vulnerabilities apply to various versions of Splunk Enterprise and include insufficient authorization checks in REST API endpoints, allowing unauthorized users to access privileged functions or sensitive data. Some of these...

EUVD-2026-95541

Missing Authorization vulnerability in WP Media WP Rocket wp-rocket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Rocket: from n/a before 3.23.5...

cve-2025-29927-lab

CVE-2025-29927 실습 환경 CVE-2025-29927에 대한 최소 재현 실습 환경입니다. — Next.js 미들웨어 인증 우회 CVSS 9.1. 관련 자료: Medium의 N-Day 분석 글 이 실습 개요 취약한 Next.js 15.2.2 애플리케이션으로, 쿠키로 보호된 /dashboard 경로가 있습니다. 미들웨어 인증 검사는 단일 HTTP 헤더 하나를 보내는 것만으로 우회할 수 있습니다 — 자격 증명이 필요하지 않습니다. 요구 사항 Node.js 18+ 설정 git clone...

CVE-2025-2539

POC - CVE-2025-2539 File Away 면책 조항 : 이 개념 증명POC은 교육 및 윤리적 테스트 목적으로만 제작되었습니다. 사전 상호 동의 없이 대상을 공격하는 데 이 도구를 사용하는 것은 불법입니다. 모든 관련 지역, 주, 연방 법률을 준수하는 것은 최종 사용자의 책임입니다. 개발자는 어떠한 책임도 지지 않으며, 이 프로그램으로 인한 오용이나 피해에 대해 책임지지 않습니다. 전체 POC 시작하기 대상 찾기 잠재적 대상을 찾으려면 FofaShodan.io와 유사를 사용하세요: Fofa Dork :...

CVE-2026-101028

Incorrect Authorization vulnerability in ash-project ash allows an actor to infer data in related records they cannot read via Ash.count/2, Ash.exists/2 and Ash.aggregate/3. Ash.Actions.Aggregate.run/4 lib/ash/actions/aggregate.ex applied only the root resource's read policy before running the...

CVE-2026-101028 Ash.count, Ash.exists and Ash.aggregate skip related resources' read policies in filters and sorts

Incorrect Authorization vulnerability in ash-project ash allows an actor to infer data in related records they cannot read via Ash.count/2, Ash.exists/2 and Ash.aggregate/3. Ash.Actions.Aggregate.run/4 lib/ash/actions/aggregate.ex applied only the root resource's read policy before running the...

CVE-2026-101028

The ash-project ash framework (versions 2.6.0 to 3.34.6 ) contains an Incorrect Authorization vulnerability in the Ash.Actions.Aggregate.run/4 function. The root cause is that the aggregate path skips applying read policies for related resources, whereas the standard read path correctly applies t...

CVE-2026-101028

Incorrect Authorization vulnerability in ash-project ash allows an actor to infer data in related records they cannot read via Ash.count/2, Ash.exists/2 and Ash.aggregate/3. Ash.Actions.Aggregate.run/4 lib/ash/actions/aggregate.ex applied only the root resource's read policy before running the...