CVE-2024-11716: Improper Enforcement of a Single, Unique Action

While assignment of a user to a team bracket in CTFd should be possible only once, at the registration, a flaw in logic implementation allows an authenticated user to reset it's bracket and then pick a new one, joining another team while a competition is already ongoing. This issue impacts releas...

PT-2025-30791

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the DisplayPort Alt Mode functionality within the Linux kernel. A maliciously crafted port partner can report pin assignment capabilities exceeding the defined maximum...

CVE-2024-55955

An incorrect permissions assignment vulnerability in Trend Micro Deep Security 20.0 agents between versions 20.0.1-9400 and 20.0.1-23340 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged...

CVE-2024-56043

Incorrect Privilege Assignment vulnerability in VibeThemes WPLMS allows Privilege Escalation.This issue affects WPLMS: from n/a through 1.9.9...

CVE-2024-56043

CVE-2024-56043 concerns the WordPress plugin WPLMS by VibeThemes. The vulnerability is an Incorrect Privilege Assignment that allows unauthenticated privilege escalation in WPLMS versions up to 1.9.9. The root cause, as described in the sources, is a privilege assignment error. Impact is describe...

CVE-2024-56205

Incorrect Privilege Assignment vulnerability in SunnyKai AI Magic newsletter-page-redirects allows Privilege Escalation.This issue affects AI Magic: from n/a through = 1.0.4...

CVE-2024-56071

Incorrect Privilege Assignment vulnerability in mikeleembruggen Simple Dashboard simple-dashboard allows Privilege Escalation.This issue affects Simple Dashboard: from n/a through = 2.0...

CVE-2024-56205

Incorrect Privilege Assignment vulnerability in AI Magic allows Privilege Escalation.This issue affects AI Magic: from n/a through 1.0.4...

CVE-2024-56205 WordPress AI Magic – SEO Content Generator & Article Writer plugin <= 1.0.4 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in SunnyKai AI Magic newsletter-page-redirects allows Privilege Escalation.This issue affects AI Magic: from n/a through = 1.0.4...

CVE-2024-56220

Incorrect Privilege Assignment vulnerability in SSL Wireless SSL Wireless SMS Notification allows Privilege Escalation.This issue affects SSL Wireless SMS Notification: from n/a through 3.5.0...

CVE-2024-56220

CVE-2024-56220 covers an Incorrect Privilege Assignment vulnerability in the SSL Wireless SMS Notification WordPress plugin. The issue allows unauthenticated Privilege Escalation by exploiting faulty privilege handling in the plugin’s SMS notification feature, affecting SSL Wireless SMS Notificat...

CVE-2024-56071: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in mikeleembruggen Simple Dashboard simple-dashboard allows Privilege Escalation.This issue affects Simple Dashboard: from n/a through = 2.0...

CVE-2024-56043: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in VibeThemes WPLMS wplmsplugin allows Privilege Escalation.This issue affects WPLMS: from n/a through = 1.9.9...

WordPress plugin SSL Wireless SMS Notification has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

CVE-2024-56205: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in SunnyKai AI Magic newsletter-page-redirects allows Privilege Escalation.This issue affects AI Magic: from n/a through = 1.0.4...

PT-2024-36755 · Ssl Wireless · Ssl Wireless Sms Notification

Name of the Vulnerable Software and Affected Versions: SSL Wireless SMS Notification versions n/a through 3.5.0 Description: The issue is related to an Incorrect Privilege Assignment vulnerability in SSL Wireless SMS Notification, which allows Privilege Escalation. Recommendations: For versions n...

PT-2024-36705 · Unknown · Mike Leembruggen Simple Dashboard

Name of the Vulnerable Software and Affected Versions: Mike Leembruggen Simple Dashboard versions n/a through 2.0 Description: The issue is related to an Incorrect Privilege Assignment vulnerability, which allows for Privilege Escalation in Mike Leembruggen Simple Dashboard. Recommendations: For...

WordPress plugin WPLMS has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2024-50702: Incorrect Privilege Assignment

TeamPass before 3.1.3.1 does not properly check whether a mailme aka actionmail operation is on behalf of an administrator or manager...

CVE-2024-50701: Incorrect Privilege Assignment

TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user's allowed folders list that has been defined by an admin...