CVE-2025-1881

A vulnerability was found in i-Drive i11 and i12 up to 20250227. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Video Footage/Live Video Stream. The manipulation leads to improper access controls. The attack can be launched remotel...

CVE-2024-53011

Information disclosure may occur due to improper permission and access controls to Video Analytics engine...

Improper Authorization

mautic/core is vulnerable to Improper Authorization. The vulnerability is due to improper enforcement of access controls, allowing any authenticated user to bypass reporting permissions and access all reports via the API...

Linux Distros Unpatched Vulnerability : CVE-2022-31022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bleve is a text indexing library for go. Bleve includes HTTP utilities under bleve/http package, that are used by its sample application. These HTTP methods pav...

CVE-2025-1881

CVE-2025-1881 affects i-Drive i11 and i12 (up to 20250227). Vulnerability lies in Video Footage/Live Video Stream, leading to improper access controls that enable remote exploitation. Attack surface is network-based with low attack complexity and no user interaction required; attacker needs at le...

CVE-2025-1881 i-Drive i11/i12 Video Footage/Live Video Stream access control

A vulnerability was found in i-Drive i11 and i12 up to 20250227. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Video Footage/Live Video Stream. The manipulation leads to improper access controls. The attack can be launched remotel...

CVE-2024-8261 IDOR in Proliz Software's OBS

Authorization Bypass Through User-Controlled Key vulnerability in Proliz Software OBS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects OBS: before 24.0927...

CVE-2024-53011

Information disclosure may occur due to improper permission and access controls to Video Analytics engine...

CVE-2024-53011

CVE-2024-53011 is a permissions/Access-Controls information-disclosure issue affecting the Video Analytics engine. The CVSS 3.1 vector (AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N) yields a base score of 7.9 (High) with LOCAL attack vector and HIGH privileges required, implying local access is needed and...

CVE-2024-53011 Permissions, Privileges, and Access Controls in Video Analytics and Processing

Information disclosure may occur due to improper permission and access controls to Video Analytics engine...

CVE-2024-53011: Exposure of Sensitive Information to an Unauthorized Actor

Information disclosure may occur due to improper permission and access controls to Video Analytics engine...

PT-2025-9300 · Qualcomm · Snapdragon +70

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Information disclosure may occur due to improper permission and access controls to the Video Analytics engine. Recommendations: At the moment, there is no information about a newer version...

PT-2025-9566

Name of the Vulnerable Software and Affected Versions i-Drive versions i11 and i12 up to 20250227 Description A vulnerability was found in the Video Footage/Live Video Stream component, leading to improper access controls. The issue can be exploited remotely, affecting an unknown functionality of...

CVE-2024-9193

Summary: CVE-2024-9193 affects the WordPress WHMpress plugin (versions

CVE-2025-21796 nfsd: clear acl_access/acl_default after releasing them

In the Linux kernel, the following vulnerability has been resolved: nfsd: clear aclaccess/acldefault after releasing them If getting acldefault fails, aclaccess and acldefault will be released simultaneously. However, aclaccess will still retain a pointer pointing to the released posixacl, which...

CVE-2024-47053

CVE-2024-47053 concerns an authorization flaw in Mautic’s API. Any authenticated user can access all reports and their data via the API, bypassing permissions intended to restrict access to non-system reports (e.g., View Own/View Others). The vulnerability arises from Mautic’s HTTP Basic Authenti...

Defense Lessons From the Black Basta Ransomware Playbook

The cybersecurity world was rocked last week by a massive leak of Black Basta’s internal communications that emerged from the group’s chat logs. Triggered by internal conflicts and a retaliatory data dump following attacks on Russian banks, the exposed records offer a rare glimpse into Black...

Incorrect Authorization

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Incorrect Authorization due to improper enforcement of access controls in the feedback response handling process. An attacker can view or delete feedback responses by exploiting the lack of proper...

U.S. Dept Of Defense: Exposed Sensitive PDF: Misconfigured Access Controls Leading to Information Disclosure

A sensitive PDF document marked "UNCLASSIFIED // NOT APPROVED FOR PUBLIC RELEASE // FOR OFFICIAL USE ONLY" was found to be publicly accessible on the ACC website due to a misconfigured access control. This resulted in an unintended disclosure of internal information...

CVE-2024-6696

The product implements access controls via a policy or other feature with the intention to disable or restrict accesses reads and/or writes to assets in a system from untrusted agents. However, implemented access controls lack required granularity, which renders the control policy too broad becau...