CVE-2025-53939 Kiteworks Core is vulnerable to Improper Input Validation

Kiteworks is a private data network PDN. Prior to version 9.1.0, improper input validation when managing roles of a shared folder could lead to unexpectedly elevate another user's permissions on the share. This issue has been patched in version 9.1.0...

CVE-2025-53939

Kiteworks Core (PDN) prior to version 9.1.0 contains an input validation flaw when managing roles on a shared folder, which could allow elevation of another user’s permissions on that share. The issue is fixed in version 9.1.0. Exploitation details are not provided in the available documents.

CVE-2025-53939 Kiteworks Core is vulnerable to Improper Input Validation

Kiteworks is a private data network PDN. Prior to version 9.1.0, improper input validation when managing roles of a shared folder could lead to unexpectedly elevate another user's permissions on the share. This issue has been patched in version 9.1.0...

CVE-2025-53939 Kiteworks Core is vulnerable to Improper Input Validation

Kiteworks is a private data network PDN. Prior to version 9.1.0, improper input validation when managing roles of a shared folder could lead to unexpectedly elevate another user's permissions on the share. This issue has been patched in version 9.1.0...

EUVD-2025-199894

Kiteworks is a private data network PDN. Prior to version 9.1.0, improper input validation when managing roles of a shared folder could lead to unexpectedly elevate another user's permissions on the share. This issue has been patched in version 9.1.0...

PubNet 安全漏洞

PubNet is a self-hosted package repository for the individual developer Ricardo Boss. A security vulnerability exists in PubNet versions prior to 1.1.3, which stems from an unauthenticated /api/storage/upload endpoint that could lead to identity spoofing and elevation of privilege...

PT-2025-48362

Kiteworks is a private data network PDN. Prior to version 9.1.0, improper input validation when managing roles of a shared folder could lead to unexpectedly elevate another user's permissions on the share. This issue has been patched in version 9.1.0...

AMD Xilinx Run Time Elevation of Privilege Vulnerability

AMD Xilinx Run Time is a standardized runtime environment developed by AMD for Xilinx FPGAs that provides a unified software interface to optimize FPGA arithmetic. An elevation of privilege vulnerability exists in AMD Xilinx Run Time that stems from insufficient authentication and can be exploite...

WordPress EduKart Pro plugin elevation of privilege vulnerability

WordPress EduKart Pro plugin is an e-commerce plugin for the WordPress platform that is primarily used to build and manage online stores. WordPress EduKart Pro plugin has an elevation of privilege vulnerability that stems from the edukartproregisteruserfrontend function not restricting user...

CVE-2025-64657 Azure Application Gateway Elevation of Privilege Vulnerability

...

CVE-2025-64657

Azure Application Gateway Elevation of Privilege (CVE-2025-64657) is described as a stack-based overflow that allows an unauthenticated, network-based attacker to escalate privileges. Affected component: Azure App Gateway. Root cause: stack-based overflow. CVSSv3.1: 9.8 (CRITICAL), Network vector...

CVE-2025-64657 Azure Application Gateway Elevation of Privilege Vulnerability

...

CVE-2025-64656 Azure Application Gateway Elevation of Privilege Vulnerability

...

CVE-2025-64656 Azure Application Gateway Elevation of Privilege Vulnerability

...

CVE-2025-64656

CVE-2025-64656 affects Microsoft Azure Application Gateway. An out-of-bounds read allows an unauthenticated attacker to elevate privileges over the network. Affected versions for Application Gateway are 9.4–9.8; the provided sources recommend updating to a fixed version, but no specific patched v...

OneUptime 访问控制错误漏洞

OneUptime is a comprehensive solution from OneUptime Open Source. for monitoring and managing your online services. An Access Control Error vulnerability exists in versions prior to OneUptime 8.0.5567 that stems from login response manipulation and could lead to elevation of privilege...

Ruoyi 安全漏洞

Ruoyi is a backend management system for Ruoyi Individual Developers. A security vulnerability exists in Ruoyi version 4.8.1, which stems from a departmental privilege being higher than an active user's privilege, which may result in elevated privileges...

youlai-boot 安全漏洞

youlai-boot is a privilege management system open-sourced by China youlaiorg. A security vulnerability exists in youlai-boot version v2.21.1, which stems from improper access control and may result in elevation of privilege...

MegaTec ClientMate 安全漏洞

MegaTec ClientMate is a power management software from MegaTec Taiwan, China. A security vulnerability exists in MegaTec ClientMate that stems from an unquoted service path that could lead to elevation of privilege...

MegaTec UPSilon2000 安全漏洞

MegaTec UPSilon2000 is an uninterruptible power supply UPS monitoring and control software from Taiwan, China-based MegaTec. A security vulnerability exists in MegaTec UPSilon2000 that stems from an unquoted service path that could lead to elevation of privilege...