WordPress plugin Miraculous Core Plugin 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Ubiquiti UISP Application 安全漏洞

Ubiquiti UISP Application is an application used by Ubiquiti USA to manage and configure its network devices. A security vulnerability exists in the Ubiquiti UISP Application that stems from improper assignment of critical resource privileges, which could result in elevated privileges...

CVE-2025-8309 User privilege escalation vulnerability

There is an improper privilege management vulnerability identified in ManageEngine's Asset Explorer, ServiceDesk Plus, ServiceDesk Plus MSP, and SupportCenter Plus products by Zohocorp. This vulnerability impacts Asset Explorer versions before 7710, ServiceDesk Plus versions before 15110,...

CVE-2025-8453

CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation and arbitrary code execution when a privileged engineer user with console access modifies a configuration file used by a root-level daemon to execute custom scripts...

CVE-2025-8453

CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation and arbitrary code execution when a privileged engineer user with console access modifies a configuration file used by a root-level daemon to execute custom scripts...

CVE-2025-8453

CVE-2025-8453 describes a CWE-269 vulnerability in Schneider Electric Saitel DR RTU (and related RTU products) where a privileged engineer with console access can modify a configuration file used by a root‑level daemon to execute scripts, enabling privilege escalation and potential arbitrary code...

DELL Data Lakehouse Improper Privilege Control Vulnerability

DELL Data Lakehouse is an all-in-one solution from Dell Technologies that combines the advantages of Data Warehouse and Data Lake to provide a unified, flexible and high-performance data storage and processing platform. DELL Data Lakehouse suffers from an improper privilege control vulnerability...

PT-2025-34135 · Manageengine · Assetexplorer +3

Name of the Vulnerable Software and Affected Versions: Asset Explorer versions prior to 7710 ServiceDesk Plus versions prior to 15110 ServiceDesk Plus MSP versions prior to 14940 SupportCenter Plus versions prior to 14940 Description: An improper privilege management issue exists in ManageEngine'...

PT-2025-34053 · Unknown · Root-Level Daemon

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A CWE-269: Improper Privilege Management issue exists that may lead to privilege escalation and arbitrary code execution. This occurs when a privileged engineer user with console access modifies a...

WordPress plugin DELUCKS SEO 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Schneider Electric Saitel DR RTU 安全漏洞

The Schneider Electric Saitel DR RTU is a remote terminal device from Schneider Electric France. A security vulnerability exists in the Schneider Electric Saitel DR RTU that stems from improper privilege management and could lead to elevation of privilege and arbitrary code execution...

Intel AI Playground Improper Privilege Vulnerability

Intel AI Playground is an open source application based on AI acceleration technology launched by Intel, which is mainly used to simplify the threshold of AI development, supporting features such as image generation, enhancement and chatbots. Intel AI Playground suffers from a privilege improprie...

Exploit for Improper Privilege Management in Najeebmedia Simple_User_Registration

CVE-2025-4334 - Simple User Registration --form Argum...

Security Bulletin: Kafka client library upgraded to kafka-clients-3.9.1

Summary Kafka client library upgraded to kafka-clients-3.9.1. Vulnerability Details CVEID:CVE-2024-31141 DESCRIPTION: Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients. Apache Kafka Clients accept configuration data for...

CVE-2025-21010

Improper privilege management in SamsungAccount prior to SMR Aug-2025 Release 1 allows local privileged attackers to deactivate Samsung account...

XORUX LPAR2RRD 安全漏洞

XORUX LPAR2RRD is a server performance monitoring platform from the Czech company XORUX. A security vulnerability exists in XORUX LPAR2RRD that stems from improper privilege management and could lead to process termination...

Security Bulletin: IBM® Db2® is affected by a vulnerability in the hadoop-common library (CVE-2024-23454).

Summary IBM® Db2® is vulnerable to an issue in Apache Hadoop which could allow a local authenticated attacker to access sensitive information. Vulnerability Details CVEID:CVE-2024-23454 DESCRIPTION: Apache Hadoop could allow a local authenticated attacker to obtain sensitive information, caused b...

WordPress The E-Commerce ERP Elevation of Privilege Vulnerability

WordPress The E-Commerce ERP is a comprehensive management system designed for small and medium-sized enterprises, integrating financial management, human resources management, procurement management, sales management, inventory management and production management, helping enterprises to optimiz...

The vulnerability of Palo Alto Networks Cortex, a cloud-based security platform, allows attackers to elevate their privileges to the root level.

The vulnerability of the virtual machine on Palo Alto Networks Cortex XDR Broker VM in cloud security platforms is related to improper privilege assignment. Exploiting this vulnerability can allow attackers to elevate their privileges to a root level...

WordPress plugin The E-Commerce ERP 安全漏洞

WordPress The E-Commerce ERP is a comprehensive management system designed for small and medium-sized enterprises, integrating financial management, human resources management, procurement management, sales management, inventory management and production management, helping enterprises to optimiz...