CVE-2024-54679

CVE-2024-54679 CVE-2024-54679 - CyberPanel también conocido como Cyber Panel Denegación de Servicio Descripción Se descubrió una vulnerabilidad de denegación de servicio DoS en Cyber Panel que permite a cualquier usuario autenticado reiniciar la base de datos enviando solicitudes al endpoint...

CVE-2026-46552

CVE-2026-46552 Los enlaces de base compartida de NocoDB podrían invitar a miembros reales de la base y sobrevivir a la revocación del enlace Introducción Encontré este problema al revisar NocoDB con una simple pregunta de seguridad en mente: ¿Puede un enlace público de base compartida cruzar el...

CVE-2020-11890

Made by HK CVE-2020-11890: Improper input validations in the usergroup table class could lead to a broken ACL configuration to RCE Link https://developer.joomla.org/security-centre/810-20200402-core-missing-checks-for-the-root-usergroup-in-usergroup-table.html PoC Affected version: Joomla core...

CVE-2024-38473-Nuclei-Template

CVE-2024-38473 Nuclei Template Description Nuclei template designed to detect Apache servers vulnerable to CVE-2024-38473. It first identifies servers running Apache Running Nuclei this way may yield a higher detection rate. You can also include URLs in this format within the hosts file to run th...

Cisco ASA Authentication Bypass by Spoofing (CVE-2023-20256)

Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass a configured access control list ACL and allow traffic that should be denied to flo...

Cisco ASA Permissive List of Allowed Inputs (CVE-2021-34787)

A vulnerability in the identity-based firewall IDFW rule processing feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass security protections. This vulnerability is due to improper...

Cisco ASA Authentication Bypass by Spoofing (CVE-2023-20245)

Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass a configured access control list ACL and allow traffic that should be denied to flo...

Apache HTTP Server - ACL Bypass

Encoding problem in modproxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests. id: CVE-2024-38473 info: name: Apache HTTP Server - ACL Bypass author: pdteam severity: high...

Cisco ASA Improper Access Control (CVE-2018-15398)

A vulnerability in the per-user-override feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass an access control list ACL that is configured for an interface of an affected device. The...

CVE-2021-40346

CVE-2021-40346: Contrabando de Solicitudes HTTP en HAProxy - Bypass de ACL Resumen Este proyecto demuestra CVE-2021-40346 , una vulnerabilidad crítica de desbordamiento de enteros en HAProxy que permite ataques de contrabando de solicitudes HTTP para eludir los controles de seguridad. Puntaje...

SAPGateBreaker-Exploit

CVE-2022-22536: Contrabando HTTP a través de la puerta de entrada de SAP SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 y SAP Web Dispatcher son vulnerables a contrabando de solicitudes y concatenación de solicitudes. Un atacan...

CVE-2021-40346

CVE-2021-40346 — Desbordamiento de Enteros en HAProxy que conduce al Contrabando de Solicitudes HTTP Resumen de la vulnerabilidad HAProxy es un software de proxy inverso y balanceador de carga de código abierto, encargado de la distribución de carga y el manejo de ACL reglas de control de acceso,...

CVE-2026-103065

Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirki kirki allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Kirki: from n/a through 6.3.1...

CVE-2026-103065 WordPress Kirki plugin <= 6.3.1 - Arbitrary Code Execution vulnerability

Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirki kirki allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Kirki: from n/a through 6.3.1...

EUVD-2026-92027

Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirki kirki allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Kirki: from n/a through 6.3.1...

CVE-2026-103065

The Kirki WordPress plugin (versions

CVE-2022-33891

「💥」CVE-2022-33891 Descripción La interfaz de usuario de Apache Spark ofrece la posibilidad de habilitar las ACL a través de la opción de configuración spark.acls.enable. Con un filtro de autenticación, esto comprueba si un usuario tiene permisos de acceso para ver o modificar la aplicación. Si la...

CVE-2026-103065: Improper Validation of Specified Quantity in Input

Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirki kirki allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Kirki: from n/a through 6.3.1...

AlmaLinux 9.2 [TuxCare] Security Update: cyrus-imapd / cyrus-imapd-devel / cyrus-imapd-doc-extra / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1790974923)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1790974923 advisory. - An issue was discovered in Cyrus IMAP before 3.12.4. CalDAV/CardDAV multiget bypasses a per-href ACL. An authenticated DAV user wi...

EUVD-2026-91395

YesWiki before 4.6.7 contains a missing authorization vulnerability in the attachment download handler that allows unauthenticated attackers to bypass page read ACLs. Attackers can request the download handler with a known page tag and file parameter to retrieve confidential attachments from...