Lucene search
+L

64270 matches found

Cvelist
Cvelist
added 2026/01/05 4:47 p.m.36 views

CVE-2026-21635

An Improper Access Control could allow a malicious actor in Wi-Fi range to the EV Station Lite v1.5.2 and earlier to use WiFi AutoLink feature on a device that was only adopted via Ethernet...

5.3CVSS0.00146EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/05 4:47 p.m.5 views

CVE-2026-21635

An Improper Access Control could allow a malicious actor in Wi-Fi range to the EV Station Lite v1.5.2 and earlier to use WiFi AutoLink feature on a device that was only adopted via Ethernet...

5.3CVSS6.4AI score0.00146EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/01/05 4:47 p.m.14 views

EUVD-2026-0830

An Improper Access Control could allow a malicious actor in Wi-Fi range to the EV Station Lite v1.5.2 and earlier to use WiFi AutoLink feature on a device that was only adopted via Ethernet...

5.3CVSS6.3AI score0.00146EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/05 12:00 a.m.12 views

Ubiquiti EV Station Lite 安全漏洞

Ubiquiti EV Station Lite is a series of smart electric vehicle charging stations from Ubiquiti USA. A security vulnerability exists in Ubiquiti EV Station Lite v1.5.2 and prior versions, which stems from improper access control and could allow a malicious actor to exploit the WiFi AutoLink featur...

6.5CVSS6.6AI score0.00146EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/05 12:00 a.m.16 views

PT-2026-1310

Name of the Vulnerable Software and Affected Versions EV Station Lite versions prior to 1.5.3 Description An improper access control issue exists in EV Station Lite. A malicious actor within Wi-Fi range could potentially utilize the WiFi AutoLink feature on a device that was initially adopted via...

6.5CVSS6.5AI score0.00146EPSS
SaveExploits0References5
CVE
CVE
added 2026/01/03 11:33 p.m.27 views

CVE-2025-3653

Summary of CVE-2025-3653 : Petlibro Smart Pet Feeder Platform (versions up to 1.7.31) suffers improper access control via device-control APIs. The vulnerability allows unauthorized manipulation by accepting arbitrary serial numbers without ownership verification, enabling an attacker to control a...

9.8CVSS6.4AI score0.00247EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/01/03 11:33 p.m.35 views

CVE-2025-3653 Petlibro Smart Pet Feeder through 1.7.31 Platform Improper Access Control via API endpoint

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an improper access control vulnerability that allows unauthorized device manipulation by accepting arbitrary serial numbers without ownership verification. Attackers can control any device by sending serial numbers to device contro...

7.3CVSS0.00247EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/01/03 11:33 p.m.6 views

CVE-2025-3653 Petlibro Smart Pet Feeder through 1.7.31 Platform Improper Access Control via API endpoint

Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an improper access control vulnerability that allows unauthorized device manipulation by accepting arbitrary serial numbers without ownership verification. Attackers can control any device by sending serial numbers to device contro...

7.3CVSS6.4AI score0.00247EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/03 12:00 a.m.15 views

PT-2026-1181

Name of the Vulnerable Software and Affected Versions Petlibro Smart Pet Feeder Platform versions up to 1.7.31 Description The Petlibro Smart Pet Feeder Platform is affected by an improper access control issue. The platform allows unauthorized device manipulation by accepting arbitrary serial...

9.8CVSS6.5AI score0.00247EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.15 views

PT-2026-29060

A security vulnerability has been detected in osrg GoBGP up to 4.3.0. Affected is the function BGPHeader.DecodeFromBytes of the file pkg/packet/bgp/bgp.go of the component BGP Header Handler. The manipulation leads to improper access controls. Remote exploitation of the attack is possible. The...

6.3CVSS5.2AI score0.00287EPSS
SaveExploits0References11
EUVD
EUVD
added 2025/12/31 12:31 a.m.11 views

EUVD-2024-55371

Akuvox Smart Intercom S539 contains an improper access control vulnerability that allows users with 'User' privileges to modify API access settings and configurations. Attackers can exploit this vulnerability to escalate privileges and gain unauthorized access to administrative functionalities...

8.7CVSS6.7AI score0.00239EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/31 12:00 a.m.13 views

WordPress plugin Add Custom Codes 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.4CVSS6.6AI score0.00197EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/31 12:00 a.m.9 views

WordPress plugin Wiremo 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.3CVSS6.5AI score0.00204EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/31 12:00 a.m.36 views

WordPress plugin Vireo 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

8.8CVSS6.4AI score0.00206EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/31 12:00 a.m.12 views

WordPress plugin Live Shopping & Shoppable Videos For WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.6AI score0.00249EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/30 11:15 p.m.24 views

CVE-2024-58337

Akuvox Smart Intercom S539 contains an improper access control vulnerability that allows users with 'User' privileges to modify API access settings and configurations. Attackers can exploit this vulnerability to escalate privileges and gain unauthorized access to administrative functionalities...

8.7CVSS0.00239EPSS
SaveExploits1References4
OSV
OSV
added 2025/12/30 11:15 p.m.14 views

CVE-2024-58337

Akuvox Smart Intercom S539 contains an improper access control vulnerability that allows users with 'User' privileges to modify API access settings and configurations. Attackers can exploit this vulnerability to escalate privileges and gain unauthorized access to administrative functionalities...

4.3CVSS5.8AI score0.00239EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/12/30 10:41 p.m.4 views

CVE-2024-58337 Akuvox Smart Intercom S539 Improper Access Control via ServicesHTTPAPI

Akuvox Smart Intercom S539 contains an improper access control vulnerability that allows users with 'User' privileges to modify API access settings and configurations. Attackers can exploit this vulnerability to escalate privileges and gain unauthorized access to administrative functionalities...

8.7CVSS6.8AI score0.00239EPSS
SaveExploits1References4
CVE
CVE
added 2025/12/30 10:41 p.m.42 views

CVE-2024-58337

CVE-2024-58337 affects the Akuvox Smart Intercom S539. The vulnerability is an improper access control in the ServicesHTTPAPI that lets users with 'User' privileges modify API access settings and configurations, enabling privilege escalation to administrative functionalities. The CVSS details ind...

8.7CVSS6.8AI score0.00239EPSS
SaveExploits1References4Affected Software1
GithubExploit
GithubExploit
added 2025/12/30 9:54 a.m.288 views

Exploit for Improper Access Control in Microsoft

CVE-2025-47962-POC Reproduction process: i686-w64-mingw32-gcc...

7.8CVSS7.1AI score0.01565EPSS
SaveExploits1
Rows per page
Query Builder