Exploit for Improper Privilege Management in Supermicro X11Ssm-F_Firmware

CVE-2023-40289 ============== This is an exploit for CVE-2023-...

CVE-2025-5494

ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13...

CVE-2025-5494

ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13...

CVE-2025-9966 Execution with Unnecessary Privileges

Improper privilege management vulnerability in Novakon P series allows attackers to gain root privileges if one service is compromized.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 commit d0f97fd9...

CVE-2025-9038

Improper Privilege Management vulnerability in GE Vernova S1 Agile Configuration Software on Windows allows Privilege Escalation.This issue affects S1 Agile Configuration Software: 3.1 and previous version...

CVE-2025-9038 S1 Agile Privilege Escalation

Improper Privilege Management vulnerability in GE Vernova S1 Agile Configuration Software on Windows allows Privilege Escalation.This issue affects S1 Agile Configuration Software: 3.1 and previous version...

CVE-2025-9038 S1 Agile Privilege Escalation

Improper Privilege Management vulnerability in GE Vernova S1 Agile Configuration Software on Windows allows Privilege Escalation.This issue affects S1 Agile Configuration Software: 3.1 and previous version...

CVE-2025-9038

CVE-2025-9038 affects GE Vernova S1 Agile Configuration Software on Windows (version 3.1 and earlier). The issue is described as improper privilege management that enables privilege escalation. The vulnerability targets the configuration software’s handling of privileges, with a local attack vect...

CVE-2025-40594

A vulnerability has been identified in SINAMICS G220 V6.4 All versions V6.4 HF2, SINAMICS S200 V6.4 All versions V6.4 HF7, SINAMICS S210 V6.4 All versions V6.4 HF2. The affected devices allow a factory reset to be executed without the required privileges due to improper privilege management as we...

CVE-2025-40594

A vulnerability has been identified in SINAMICS G220 V6.4 All versions V6.4 HF2, SINAMICS S200 V6.4 All versions V6.4 HF7, SINAMICS S210 V6.4 All versions V6.4 HF2. The affected devices allow a factory reset to be executed without the required privileges due to improper privilege management as we...

CVE-2025-43722

CVE-2025-43722 affects Dell PowerScale OneFS versions prior to 9.12.0.0 and is due to improper privilege management. A high-privilege attacker with local access could potentially escalate privileges. The issue is documented across multiple sources: affected product is Dell PowerScale OneFS; root ...

PT-2025-36497

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions prior to 9.12.0.0 Description: Dell PowerScale OneFS contains an improper privilege management issue. A high-privileged attacker with local access could potentially exploit this issue, leading to privilege...

CVE-2025-21028

Improper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local privileged attackers to reuse trial items...

WordPress plugin Media Author 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

CVE-2025-58323

NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM by executing arbitrary files due to improper privilege checks...

PT-2025-35173

Name of the Vulnerable Software and Affected Versions: NAVER MYBOX Explorer for Windows versions prior to 3.0.8.133 Description: NAVER MYBOX Explorer for Windows is susceptible to a local privilege escalation issue. A local attacker can elevate privileges to NT AUTHORITYSYSTEM by executing...

NAVER MYBOX Explorer for Windows 安全漏洞

NAVER MYBOX Explorer for Windows is a software for managing cloud storage from NAVER MYBOX Korea. A security vulnerability exists in NAVER MYBOX Explorer for Windows prior to version 3.0.8.133, which stems from improper privilege checking and could result in elevation of privileges to NT...

CVE-2025-58322

NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM by invoking arbitrary DLLs due to improper privilege checks...

PT-2025-34971

Name of the Vulnerable Software and Affected Versions: NAVER MYBOX Explorer for Windows versions prior to 3.0.8.133 Description: NAVER MYBOX Explorer for Windows is susceptible to local privilege escalation. A local attacker can execute arbitrary commands and escalate privileges to NT...

JetBrains IDE Services 安全漏洞

JetBrains IDE Services is a software from the Czech company JetBrains for managing JetBrains' development tools and AI features. A security vulnerability exists in JetBrains IDE Services versions prior to 2025.5.0.1086 and prior to 2025.4.2.2164, which stems from an improper assignment of...