CVE-2023-3786 Aures Komet Kiosk Mode access control

A vulnerability classified as problematic has been found in Aures Komet up to 20230509. This affects an unknown part of the component Kiosk Mode. The manipulation leads to improper access controls. It is possible to launch the attack on the physical device. The exploit has been disclosed to the...

PT-2023-26147 · Aures · Aures Komet

Name of the Vulnerable Software and Affected Versions: Aures Komet up to 20230509 Description: A problematic issue has been found in Aures Komet, affecting the Kiosk Mode component. This leads to improper access controls. The attack can be launched on the physical device. Recommendations: For Aur...

Defend Against Insider Threats: Join this Webinar on SaaS Security Posture Management

As security practices continue to evolve, one primary concern persists in the minds of security professionals—the risk of employees unintentionally or deliberately exposing vital information. Insider threats, whether originating from deliberate actions or accidental incidents, pose a significant...

Unrestricted Name and Symbol Modification in LSP7 and LSP8 Digital Assets

Lines of code Vulnerability details I HAVE ALREADY SUBMITTED THIS ISSUE HOWEVER I MESSED UP THE LINKS FOR IT. CAN YOU PLEASE DISREGARD THE PREVIOUS SUBMISSION? Impact The owner of a contract in LSP8IdentifiableDigitalAsset and LSP7DigitalAsset can arbitrarily change the name and symbol of a token...

Unrestricted Name and Symbol Modification in LSP7 and LSP8 Digital Assets

Lines of code Vulnerability details Impact The owner of a contract in LSP8IdentifiableDigitalAsset and LSP7DigitalAsset can arbitrarily change the name and symbol of a token after its deployment. This ability is due to the inheritance of the setData function from ERC725YCore.sol implemented in...

CVE-2023-29130

A vulnerability has been identified in SIMATIC CN 4100 All versions V2.5. Affected device consists of improper access controls in the configuration files that leads to privilege escalation. An attacker could gain admin access with this vulnerability leading to complete device control...

Improper access control

A vulnerability has been identified in SIMATIC CN 4100 All versions V2.5. Affected device consists of improper access controls in the configuration files that leads to privilege escalation. An attacker could gain admin access with this vulnerability leading to complete device control...

PT-2023-3496 · Microsoft · Active Template Library +1

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the Active Template Library ATL and is associated with insufficient access restrictions in Windows operating systems. It allows an attacker to potentially elevate...

PT-2023-3816 · Microsoft · Windows Server Update Services +1

Name of the Vulnerable Software and Affected Versions: Windows Server Update Services WSUS affected versions not specified Description: The issue is related to insufficient access restrictions in Windows Server Update Services WSUS, which can be exploited to elevate privileges. This could allow a...

CVE-2023-30765

​Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contain improper access controls that could allow an attacker to alter privilege management configurations, resulting in privilege escalation...

CVE-2023-30765

​Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contain improper access controls that could allow an attacker to alter privilege management configurations, resulting in privilege escalation...

Privilege escalation

?Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contain improper access controls that could allow an attacker to alter privilege management configurations, resulting in privilege escalation...

CVE-2023-30765

CVE-2023-30765 concerns Delta Electronics InfraSuite Device Master, prior to version 1.0.7, with improper access controls that could allow an attacker to alter privilege management configurations and escalate privileges. Connected sources confirm the affected product and root cause (improper acce...

CVE-2023-3599

SourceCodester Best Fee Management System 1.0 is affected by CVE-2023-3599 in the function save_user of admin_class.php (Add User Handler). The issue enables improper access controls and can be exploited remotely; multiple sources indicate the exploit has been disclosed publicly. Constraints vary...

CVE-2023-21641 Permissions, Privileges, and Access Controls in Display

An app with non-privileged access can change global system brightness and cause undesired system behavior...

PT-2023-9188

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A flaw was found in the 9p passthrough filesystem 9pfs implementation. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape...

Security Bulletin: A vulnerability in the IBM Spectrum Protect Backup-Archive Client on Microsoft Windows Workstation operating systems can lead to local user escalated privileges (CVE-2023-28956)

Summary A vulnerability in the IBM Spectrum Protect Backup-Archive Client on Microsoft Windows workstation operating systems Microsoft Windows 8.1, 10, and 11 may allow a local user to escalate their privileges due to improper access controls. This problem does not affect Microsoft Windows server...

Subscribe2 – Form, Email Subscribers & Newsletters < 10.41 - Missing Access Controls

The vulnerability allows any Author leveled users to perform actions that only an administrator should be allowed to do e.g., sending unsolicited e-mail to users...

CVE-2023-28956

IBM Spectrum Protect Backup-Archive Client 8.1.0.0 through 8.1.17.2 may allow a local user to escalate their privileges due to improper access controls...

CVE-2023-28956

IBM Spectrum Protect Backup-Archive Client (8.1.0.0–8.1.17.2) may allow a local user to escalate privileges due to improper access controls on Windows workstation OSes (Windows 8.1/10/11 per IBM bulletin). The issue is a local-privilege-escalation vulnerability arising from insufficient access co...