168760 matches found
PT-2026-86533
MISP's UiBeta theme collection view app/View/Themed/UiBeta/Collections/view.ctp performed a secondary query of member events by UUID without applying the caller's access control list ACL. The CollectionsController::view action correctly resolved collection element UUIDs through...
CVE-2026-45332-PoC
CVE-2026-45332: Broken Access Control in Automad CMS Proof of concept for CVE-2026-45332 , a Broken Access Control vulnerability in Automad CMS that allows any unauthenticated attacker to dump the bcrypt password hash and TOTP secret of every administrator account through the setup endpoint, whic...
CVE-2025-67246
CVE-2025-67246 Vulnerability Title :LuDaShi Incorrect Access Control Affected versions :Less than 6.1026.4505.112 Discovery time :December 2, 2025 Discoverer :ZhouRui Analysis Report : LuDaShi is a well-known free system utility software that provides free hardware authentication, computer mobile...
CVE-2026-86206
A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4...
CVE-2026-86206 Access control filter bypass allows unauthorised access to APIs
A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4...
EUVD-2026-72023
A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4...
CVE-2026-86206
N-central (N-able) is affected by a vulnerability in its internal API access control filter that allows unauthorised access to internal APIs when the filter is bypassed. The flaw requires no privileges and no user interaction , is exploitable over the network with low complexity, and results in l...
CVE-2026-86206 Access control filter bypass allows unauthorised access to APIs
A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4...
CVE-2025-67070-Intelbras-CFTV-MFA-Bypass
Intelbras NVD 9032 R Ftd – Critical Password Reset Vulnerability Discovered by: Theo Cia CVE: CVE-2025-67070 Status: Reported to vendor Date Discovered: November 2025 Impact: Full administrative access via MFA bypass Firmware: V2.800.00IB00C.0.T Build Date: 2022-08-17 Summary A critical...
CVE-2021-42562
CVE-2021-42562: Improper Access Control in MITRE Caldera Caldera versions =2.8.1 does not properly segregate user privileges, resulting in non-admin users having access to read and modify configuration or other components which should only be accessible by admin users. Vendor Disclosure: The...
HAProxy-CVE-2023-45539-PoC
HAProxy-CVE-2023-45539-PoC HAProxy before 2.8.2 accepts as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a pathend rule, such as routing index.html.png to a static server. What gets misroute...
CVE-2026-48908
CVE-2026-48908 — SP Page Builder RCE no autenticado SP Page Builder comsppagebuilder para Joomla ≤ 6.6.1 permite a atacantes no autenticados subir archivos arbitrarios y lograr Ejecución Remota de Código. Campo| Valor ---|--- CVE| CVE-2026-48908 CWE| CWE-284 Control de Acceso Inadecuado Component...
CVE-2025-65731
CVE-2025-65731 CWE-1191: On-Chip Debug and Test Interface With Improper Access Control UART Root Shell Access on D-Link DIR-605L Hardware F1, Firmware V6.02CN02 Summary A critical hardware security vulnerability has been identified in the D-Link DIR-605L router, Hardware Version F1, Firmware...
CVE-2023-27350
CVE-2023-27350 This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper...
CVE-2024-25169-Mezzanine-v6.0.0
Product: Mezzanine CMS Version: v6.0.0 Date found: 10.01.2024. Date reported: 10.01.2024. Vulnerability type: Incorrect Access Control. CVE ID: CVE-2024-25169 Description: An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via crafted request. POC...
apache__jspwiki_CVE-2019-10076_2-11-0-M3
Apache JSPWiki 2.11 - Documentation root@kitploit: Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the...
CVE-2024-30973
CVE-2024-30973 - V-SOL G/EPON ONU - HG323AC-B Description Item: root@kitploit: Item: G/EPON ONU Specification: HG323AC-B Device model XPON+2GE+1POTS+2WIFI+USB Device SN 70B64F-1234570B64F0C2C0C Hardware Version V1.0 Firmware Version V2.0.08-210715 PON S/N GPON000C2C0C Vulnerability...
CVE-2024-48955_Overview
CVE-2024-48955Overview Description: Netadmin 4 IAM with access control flaws. Affected version: V4.030319 NetAdmin system returns data with functionalities in the endpoint that "builds" the functionality menus; the response of this call is not encrypted, and as the system does not validate sessio...