Syrotech SY-GPON-2010-WADONT 访问控制错误漏洞

The Syrotech SY-GPON-2010-WADONT is an optical network termination device from Syrotech India. An access control error vulnerability exists in the Syrotech SY-GPON-2010-WADONT that stems from improper access control of the FTP service, which could lead to unauthorized access...

ML-Logger 访问控制错误漏洞

ML-Logger is a logger, server and visualization dashboard for machine learning projects by Ge Yang Personal Developer. An access control error vulnerability exists in ML-Logger acf255bade5be6ad88d90735c8367b28cbe3a743 and prior versions, which stems from an incorrect manipulation of the parameter...

Horilla 访问控制错误漏洞

Horilla is a free and open source human resources software from Horilla, Inc. An access control error vulnerability exists in Horilla version 1.3.0 that originates from an unauthenticated user being able to access an uploaded resume file by guessing or predicting the file URL, which could result ...

Magnetism Studios Endurance 访问控制错误漏洞

Magnetism Studios Endurance is a battery management tool from Magnetism Studios, Inc. An access control error vulnerability exists in Magnetism Studios Endurance version 3.3.0 and earlier, which stems from a lack of authentication in the loadModuleNamedWithReply function in the NSXPC Interface...

WAGO Device Sphere和WAGO Solution Builder 访问控制错误漏洞

WAGO Device Sphere and WAGO Solution Builder are products of WAGO, a device management system, and WAGO Solution Builder, a project configuration and engineering platform. An Access Control Error vulnerability exists in WAGO Device Sphere and WAGO Solution Builder. The vulnerability arises from...

WAGO Device Sphere和WAGO Solution Builder 访问控制错误漏洞

WAGO Device Sphere and WAGO Solution Builder are products of WAGO, a device management system, and WAGO Solution Builder, a project configuration and engineering platform. An Access Control Error vulnerability exists in WAGO Device Sphere and WAGO Solution Builder, which stems from a lack of...

LibreChat 访问控制错误漏洞

LibreChat is an enhanced ChatGPT clone by Danny Avila Personal Developer. LibreChat suffers from an Access Control Error vulnerability that stems from the checkAccess function in api/server/middleware/roles/access.js that uses permissions.some for permission validation, resulting in improper acce...

i-Educar 访问控制错误漏洞

i-Educar is a free educational software from Portábilis Open Source. An access control error vulnerability exists in i-Educar version 2.10 and earlier, which stems from improper access control of unknown functions in the file /enrollment-history/, which could lead to a remote attack...

i-Educar 访问控制错误漏洞

i-Educar is a free educational software from Portábilis Open Source. An access control error vulnerability exists in i-Educar version 2.10 and earlier, which stems from improper manipulation of unknown functions in the file /module/Avaliacao/diarioApi, which could lead to information disclosure...

Dragonfly 访问控制错误漏洞

Dragonfly is an open source framework from DragonflyDB that allows dynamic processing of any content type. An access control error vulnerability exists in Dragonfly versions prior to 2.1.0, which stems from the /api/v1/jobs and /preheats endpoints being accessible without authentication,...

NVIDIA Triton Inference Server 访问控制错误漏洞

NVIDIA Triton Inference Server is an open source software from NVIDIA that helps standardize model deployment and deliver fast and scalable AI in production. An access control error vulnerability exists in NVIDIA Triton Inference Server, which can be exploited by attackers to cause memory...

Flowise Access Control Error Vulnerability

Flowise is a FlowiseAI open source tool for easily building LLM applications. An Access Control Error vulnerability exists in Flowise 3.0.5 and prior versions, which stems from the forgot-password endpoint returning a password reset token without authentication, and can be exploited by an attacke...

Wavlink WL-WN578W2 Access Control Error Vulnerability

The Wavlink WL-WN578W2 is a wireless repeater from China's Wavlink. An access control error vulnerability exists in the Wavlink WL-WN578W2 version 221110, which originates from an incorrect access control in the file /liveonline.shtml, which can be exploited by an attacker to cause information...

NewType Infortech NUP Portal 访问控制错误漏洞

NewType Infortech NUP Portal is a portal management and collaborative office software system from NewType Infortech Taiwan, China. An access control error vulnerability exists in NewType Infortech NUP Portal, which stems from a lack of authentication and could allow an unauthenticated remote...

Wavlink WL-WN578W2 访问控制错误漏洞

The Wavlink WL-WN578W2 is a wireless repeater from China's Wavlink. An access control error vulnerability exists in the Wavlink WL-WN578W2 version 221110, which originates from an incorrect access control in the file /liveonline.shtml, which can be exploited by an attacker to cause information...

Cisco IOS XR Access Control Error Vulnerability (CNVD-2025-21251)

Cisco IOS XR is a set of operating systems developed by the American company Cisco Cisco for its network equipment. Cisco IOS XR suffers from an Access Control Error vulnerability that stems from improper access control of the management interface ACL, which can be exploited by an attacker to cau...

Cisco IOS XR 访问控制错误漏洞

Cisco IOS XR is a set of operating systems developed by the American company Cisco Cisco for its network equipment. Cisco IOS XR suffers from an Access Control Error vulnerability that stems from improper access control of the management interface ACL, which can be exploited by an attacker to cau...

Calix GigaCenter ONT Series 访问控制错误漏洞

The Calix GigaCenter ONT Series is a series of optical network terminals from Calix USA. An access control error vulnerability exists in the Calix GigaCenter ONT Series that originates from unauthenticated Telnet access and could result in gaining root privileges...

Microsoft Azure 访问控制错误漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Azure. An attacker can exploit the vulnerability to elevate privileges...

The vulnerability of the Azure Networking component of Microsoft’s software platform allows attackers to enhance their privileges.

The vulnerability of the Azure Networking component of the Microsoft Azure software platform is related to access control errors. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...