Nginx UI 安全漏洞

Nginx UI is a web interface for Nginx developed by Jacky. Versions of Nginx UI 2.3.3 and earlier have security vulnerabilities. These vulnerabilities stem from insecure direct object references, allowing any authenticated user to access, modify, and delete resources of other users...

CVE-2026-4064

Missing authorization checks on multiple gRPC service endpoints in PowerShell Universal before 2026.1.4 allows an authenticated user with any valid token to bypass role-based access controls and perform privileged operations — including reading sensitive data, creating or deleting resources, and...

EUVD-2025-37391

Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 suffers from insufficient server-side authorization. Authenticated attackers can call several endpoints and perform create/update/delete actions on resources owned by arbitrary users by manipulating request parameters e.g.,...

Improper Authorization

Overview smartproxysalt is a Saltstack plug-in for Foreman's Smart Proxy. Affected versions of this package are vulnerable to Improper Authorization by allowing foreman clients to execute actions that should be limited to the Foreman Server. This flaw allows an authenticated local attacker to...

CVE-2021-3456

An improper authorization handling flaw was found in Foreman. The Salt plugin for the smart-proxy allows foreman clients to execute actions that should be limited to the Foreman Server. This flaw allows an authenticated local attacker to access and delete limited resources and also causes a denia...

PT-2021-19210

Name of the Vulnerable Software and Affected Versions SES Evolution versions prior to 2.1.0 Description The issue allows an attacker with access to a computer having the administration console installed to delete certain resources not currently in use by any security policy. Recommendations For...

OpenSC 安全漏洞

OpenSC is an open source smart card tool and middleware. A security vulnerability exists in OpenSC that allows an authenticated, local attacker to access and delete limited resources...

IBM Jazz for Service Management Access Control Error Vulnerability

IBM Jazz for Service Management is an integrated service management product from IBM that provides visibility into the service management environment. An access control error vulnerability exists in IBM Jazz for Service Management. An attacker could exploit the vulnerability to delete authorized...

Unable to Delete Resources: There is currently an active background action

When attempting to delete hosting infrastructure either a Connection or Resources fromCitrix Studio, the following message appears: "Resources "Local storage" cannot be deleted because they are being used by the following Machine Catalogs and/or background actions:..." Background To avoid...