Sotbit Platform Access Control Compromise

Sotbit platform vulnerability: B2B is related to access control flaws. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality and integrity of protected information...

Aquarius L311 Driver Access Control

The vulnerability of the Aquarius L311 device’s driver for the Avora operating system is related to access control errors. Exploiting this vulnerability can allow attackers to gain access to protected information and affect the system...

Shtab Project Access Control Unauthorized Access

The vulnerability of the Shtab project and task management service is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

MaxPatrol EDR DoS

The vulnerability of the control console of the MaxPatrol EDR detection and response system is related to access control errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CommuniGate Pro Access Control Unauthorized Modification

The vulnerability of the CommuniGate Pro mail server arises from insufficient access control checks when processing specially crafted requests. Exploiting this vulnerability allows a malicious actor to perform unauthorized modifications to the server’s data remotely...

Realtek RTL8762C Information Disclosure

The vulnerability of the embedded energy-independent single-write eFUSE memory in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to the fact that power is turned on before the access control mechanism is activated. Exploiting this vulnerability can allow a hacker to...

Directum RX Data Compromise

The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

ThrottleBlood.sys RCE

The vulnerability of the MmMapIoSpace function in the ThrottleBlood.sys driver, as part of the ThrottleStop utility, is related to open IOCTLs with insufficient access control. Exploiting this vulnerability could allow an attacker to enhance their privileges, execute arbitrary code, or cause...

CVE-2026-114466

A flaw in the Git git-fast-import(1) and git-fast-export(1) features allows for insufficient granularity of access control . Specifically, certain features within the fast-import utility do not properly restrict filesystem operations, enabling an attacker to supply crafted instructions to access ...

CVE-2026-114466 Insufficient Granularity of Access Control in Git

Arbitrary data can be read or written through git-fast-import1 and git-fast-export1 features not marked unsafe...

CVE-2026-125870 BookStack before 26.09.3 Broken Access Control via ImageController

BookStack before 26.09.3 contains a missing authorization vulnerability in ImageController::checkImagePermission that allows authenticated non-admin users to bypass page-level content restrictions for images whose owning page has been moved to the recycle bin, because the permission check relies ...

CVE-2026-125870

BookStack versions before 26.09.3 are vulnerable to a missing authorization flaw in ImageController::checkImagePermission(). The vulnerability occurs because the permission check relies on Page::getPage(), which returns null for soft-deleted pages in the recycle bin, causing the system to silentl...

CVE-2026-75867

Zohocorp ManageEngine DDI Central versions below 6301 are affected by an authorization bypass vulnerability (CWE-863). This flaw allows authenticated non-administrative users to modify Windows DHCP filter-list configurations across unauthorized clusters. No specific exploit details or proof-of-co...

CVE-2026-75864

Zohocorp ManageEngine DDI Central versions below 6301 are affected by an improper authorization vulnerability (CWE-862). This flaw allows authenticated non-administrative users to delete DNS zones that are outside of their assigned scope. The impact involves unauthorized modification and potentia...

CVE-2026-75864 Broken Access Control

Zohocorp ManageEngine DDI Central versions below 6301 is affected by an improper authorization vulnerability that allowed authenticated non-administrative users to delete DNS zones outside their assigned scope...

Webmin-CVE-2022-0824-revshell

Webmin-CVE-2022-0824-revshell Vulnerability Description Webmin 1.984 and below - File Manager privilege exploit CVE-2022-0824 and CVE-2022-0829 Less privileged Webmin users who do not have any File Manager module restrictions configured can access files with root privileges, if using the default...

WebSecProbe

.png WebSecProbe is a security testing utility designed for web security researchers, penetration testers, and system administrators to analyze HTTP 403 Forbidden responses and access control behavior in web applications. The tool assists in identifying misconfigurations, inconsistent authorizati...

adminer_CVE-2021-43008

CVE-2021-43008 — Adminer Vulnerability Arbitrary file reading via a malicious MySQL server 1. What is Adminer? Adminer is a web tool PHP for easily administering MySQL, PostgreSQL, SQLite or SQL Server databases. It is commonly deployed as a lightweight alternative to phpMyAdmin. Affected...

BlockGuard

🛡️ BlockGuard — Process-Based File Access Security Agent BlockGuard is a Windows Data Loss Prevention DLP agent that intercepts and controls file access at the process level. It ensures that only authorized processes — identified by executable path, cryptographic hash, Authenticode signature, and...

CVE-2025-30208-Series

CVE-2025-30208 & CVE-2025-31125 & CVE-2025-31486 1. Vulnerability Overview CVE-2025-30208, CVE-2025-31125 and CVE-2025-31486 are arbitrary file reading vulnerabilities in the Vite development server. These vulnerabilities allow an attacker to bypass access controls through specific URL parameters...