CVE-2025-58310

Permission control vulnerability in the distributed component. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58310

Huawei HarmonyOS is affected by a privilege-control vulnerability in its distributed components. The issue stems from improper privilege control within the distribution framework, potentially enabling an attacker to affect service confidentiality. The CNVD entry and related sources describe Harmo...

CVE-2025-58309

CVE-2025-58309 is a privilege-control vulnerability in Huawei HarmonyOS related to the boot/recovery module. The root cause is improper privilege control of the startup recovery component, which can affect availability and confidentiality if exploited locally. Connected sources (CNVD) describe th...

EUVD-2025-199848

Permission control vulnerability in the startup recovery module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

EUVD-2025-199845

Permission control vulnerability in the memory management module. Impact: Successful exploitation of this vulnerability may affect confidentiality...

📄 Microsoft Windows 10.0.17763.5458 Kernel IOCTL Access Control

Microsoft Windows version 10.0.17763.5458 Kernel IOCTL access control proof of concept Metasploit module. ============================================================================================================================================= | Title : Windows 10.0.17763.5458 Kernel IOCTL...

PT-2025-48310

Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

PT-2025-48292

Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

PT-2025-48297

Permission control vulnerability in the App Lock module. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2025-48296

Name of the Vulnerable Software and Affected Versions versions prior to 2025-58310 Description A permission control issue exists in the distributed component. Successful exploitation could compromise service confidentiality. Recommendations At the moment, there is no information about a newer...

CVE-2025-66075

CVE-2025-66075 concerns the WordPress plugin “WP Cookie Notice for GDPR, CCPA & ePrivacy Consent” (gdpr-cookie-consent). The vulnerability is described as Missing Authorization / Broken Access Control and affects versions from n/a up to and including 4.0.3. The root issue is Incorrectly Configure...

WordPress plugin Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO 访问控制错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a suite of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress...

WordPress Payment Gateway bKash for WC plugin <= 3.1.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Payment Gateway bKash for WC versions = 3.1.0...

iCam365 P201和iCam365 QC021 访问控制错误漏洞

The iCam365 P201 and iCam365 QC021 are both a network surveillance camera from the Chinese company iCam365. An access control error vulnerability exists in the iCam365 P201 and iCam365 QC021 that stems from the product allowing unauthenticated access to the RTSP service, which could lead to...

iCam365 P201和iCam365 QC021 访问控制错误漏洞

The iCam365 P201 and iCam365 QC021 are both a network surveillance camera from the Chinese company iCam365. An access control error vulnerability exists in the iCam365 P201 and iCam365 QC021, which stems from unauthenticated access to the ONVIF service and could lead to unauthorized access to...

CVE-2025-54343

An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 exploitable remotely for Escalation of Privileges...

CVE-2025-54561

An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows remote access to content despite lack of the correct permission through a Broken Authorization Schema...

EUVD-2025-175358

Dell Alienware Command Center 6.x AWCC, versions prior to 6.10.15.0, contain a Process Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...

CVE-2025-53214 WordPress Sertifier Certificate & Badge Maker plugin <= 1.21 - Broken Access Control Vulnerability

Missing Authorization vulnerability in sertifier Sertifier Certificate & Badge Maker sertifier-certificates-open-badges allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sertifier Certificate & Badge Maker: from n/a through = 1.21...

PT-2025-45222

Missing Authorization vulnerability in Gaurav Aggarwal Backup and Move backup-and-move allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Backup and Move: from n/a through = 0.1...