NEC Aterm多款产品 访问控制错误漏洞

The NEC Aterm WF1200C and others are a wireless router from Nippon Electric NEC. An access control error vulnerability exists in various NEC Aterm products that stems from a lack of authentication for critical functions, allowing an attacker to obtain Wi-Fi passwords over the Internet. The...

CVE-2024-39280

An external config control vulnerability exists in the nas.cgi setsmbcfg functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

CVE-2024-46310

Incorrect Access Control in Cfx.re FXServer v9601 and earlier allows unauthenticated users to modify and read arbitrary user data via exposed API endpoint...

CVE-2025-22800

CVE-2025-22800 affects the WordPress Post SMTP plugin (versions 2.9.11 and earlier). The issue is described as a Missing Authorization vulnerability caused by incorrectly configured access control security levels, enabling unauthorized access with high impact to confidentiality, integrity, and av...

CVE-2024-13256

Insufficient Granularity of Access Control vulnerability in Drupal Email Contact allows Forceful Browsing.This issue affects Email Contact: from 0.0.0 before 2.0.4...

CVE-2025-22561 WordPress Title Experiments Free plugin <= 9.0.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Jason Funk Title Experiments Free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Title Experiments Free: from n/a through 9.0.4...

CVE-2024-13200 wander-chu SpringBoot-Blog HTTP POST Request BaseInterceptor.java preHandle access control

A vulnerability, which was classified as critical, was found in wander-chu SpringBoot-Blog 1.0. This affects the function preHandle of the file src/main/java/com/my/blog/website/interceptor/BaseInterceptor.java of the component HTTP POST Request Handler. The manipulation leads to improper access...

CVE-2024-54121

Startup control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2024-54121

Startup control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2024-56448

Vulnerability of improper access control in the home screen widget module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-54121

Startup control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2024-56439

Access control vulnerability in the identity authentication module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-56440

Permission control vulnerability in the Connectivity module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2024-56439

Access control vulnerability in the identity authentication module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-56439

Access control vulnerability in the identity authentication module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is a new-generation intelligent terminal operating system that provides a unified language for the intelligence, interconnection and collaboration of different devices, and brings simple, smooth, continuous, safe and reliable interaction experience in the whole scene. An access...

PT-2025-3018 · Unknown · Ability Module

Name of the Vulnerable Software and Affected Versions: Ability module affected versions not specified Description: The issue is related to a startup control vulnerability in the ability module. Successful exploitation of this vulnerability may cause features to perform abnormally. There is no...

CVE-2025-22541 WordPress WP Delete Post Copies plugin <= 5.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Etruel Developments LLC WP Delete Post Copies allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Delete Post Copies: from n/a through 5.5...

CVE-2025-22541 WordPress WP Delete Post Copies plugin <= 5.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in etruel WP Delete Post Copies etruel-del-post-copies allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Delete Post Copies: from n/a through = 5.5...

CVE-2025-22543

CVE-2025-22543 is a Missing Authorization vulnerability affecting the WordPress plugin/theme combo ST Gallery WP. Red Hat’s entry and the Wordfence vulnerability report describe an issue where access control is incorrectly configured, enabling unauthorized actions by authenticated users to modify...