CVE-2025-54501

Improper access control on an internal debug interface could allow a high privileged attacker to bypass memory access controls potentially resulting in a loss of SEV-SNP guest memory integrity...

CVE-2025-54501

A vulnerability exists due to improper access control on an internal debug interface, as identified in CVE-2025-54501 . This flaw could allow a high privileged attacker to bypass memory access controls, potentially leading to a loss of SEV-SNP guest memory integrity . The issue is associated with...

CVE-2025-54501

Improper access control on an internal debug interface could allow a high privileged attacker to bypass memory access controls potentially resulting in a loss of SEV-SNP guest memory integrity...

EUVD-2025-211317

Improper access control on an internal debug interface could allow a high privileged attacker to bypass memory access controls potentially resulting in a loss of SEV-SNP guest memory integrity...

tailsnitch

Tailsnitch A security auditor for Tailscale configurations. Tailsnitch scans your tailnet for 57 misconfigurations, overly permissive access controls, and security best practice violations. Quick Start 1. Set your Tailscale API credentials export TSAPIKEY="tskey-api-..." 2. Run audit tailsnitch 3...

CVE-2019-7238

CVE-2019-7238 Nexus Repository Manager 3 Remote Code Execution without authentication 3.15.0 found by Rico Tencent Security Yunding Lab and @voidfyoo Detailed analysis english: https://chybeta.github.io/2019/02/18/Nexus-Repository-Manager-3-RCE-%E5%88%86%E6%9E%90-%E3%80%90CVE-2019-7238%E3%80%91/...

CVE-2026-0325

An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely on source IP filtering. Cloud NGFW is...

CVE-2026-0325 PAN-OS: GlobalProtect Authorization Bypass Vulnerability

An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely on source IP filtering. Cloud NGFW is...

CVE-2026-0325

A vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software allows an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions . This authorization bypass enables the circumvention of network access controls that rely on source IP filte...

EUVD-2026-123797

An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely on source IP filtering. Cloud NGFW is...

CVE-2020-36730

CVE-2020-36730 CMP - Coming Soon & Maintenance 3.8.2 - Improper Access Controls on AJAX Calls Subscriber+ Description: Some of the AJAX calls from the plugin do not properly check for capabilities and CSRF tokens, leading to issues such as arbitrary post read, subscribers list export and plugin...

PAN-OS: GlobalProtect Authorization Bypass Vulnerability

An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely on source IP filtering. Cloud NGFW is...

EUVD-2026-123512

Missing Authorization vulnerability in Brainstorm Force SureForms sureforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureForms: from n/a through 2.13.0...

gitoops

GitOops! 😱 all paths lead to clouds GitOops is a tool to help attackers and defenders identify lateral movement and privilege escalation paths in GitHub organizations by abusing CI/CD pipelines and GitHub access controls. It works by mapping relationships between a GitHub organization and its CI/...

PT-2026-145441

An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely on source IP filtering. Cloud NGFW is...

Palo Alto Networks PAN-OS 11.1.x < 11.1.16-h5 / 11.2.x < 11.2.16-h2 / 12.1.x < 12.1.10-h4 / 12.2.x < 12.2.4-h2 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 11.1.x prior to 11.1.16-h5, 11.2.x prior to 11.2.16-h2, 12.1.x prior to 12.1.10-h4, or 12.2.x prior to 12.2.4-h2. It is, therefore, affected by a vulnerability. An authorization bypass vulnerability in the GlobalProtect gatewa...

CVE-2026-0325: Palo Alto Networks: An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an…

An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely on source IP filtering. Cloud NGFW is...

Action Pack: Possible IP spoofing in Action Dispatch RemoteIp

Impact Since Rails 8.1.0, ActionDispatch::RemoteIp derives request.remoteip from Rack::Requestforwardedfor, which under Rack 3 reads the RFC 7239 Forwarded header in preference to X-Forwarded-For. When a reverse proxy appends the client address to X-Forwarded-For but passes a client-supplied...

CVE-2026-66751-Insufficient-Access-Controls-Allow-for-Unauthorized-Room-Deletion-Let-s-Chat-

Security Advisory: Insufficient Access Controls Allow for Unauthorized Room Deletion Let's Chat Assigned CVE ID: CVE-2026-66751 Summary DELETE /rooms/:room performs no authorization check beyond requiring a login. Any account can archive any room on the server, including private, password protect...

Improper Access Control in Debug Interface May Allow Compromise of RMP-Protected Memory

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Score ---|---|--- CVE-2025-54501| Improper access control on an internal debug interface could allow a high privileged attacker to bypass memory access controls, potentially resulting in a loss of SEV-SNP guest memo...