Webmin-CVE-2022-0824-revshell

Webmin-CVE-2022-0824-revshell Schwachstellenbeschreibung Webmin 1.984 und darunter - Dateimanager Privilegienausnutzung CVE-2022-0824 und CVE-2022-0829 Weniger privilegierte Webmin-Benutzer, die keine Einschränkungen für das Dateimanager-Modul konfiguriert haben, können mit Root-Rechten auf Datei...

CVE-2021-24006-Fortimanager-Exploit

CVE-2021-24006 – FortiManager Improper Access Control Exploit PoC PoC Proof of Concept – Nur für Bildungszwecke Exploit für unbefugten Zugriff auf den SD-WAN Orchestrator in FortiManager, der eine Schwachstelle in der Zugriffskontrolle CWE-284 ausnutzt. Beschreibung Die Schwachstelle CVE-2021-240...

CVE-2022-24693

CVE-2022-24693 Descrizione I dispositivi Baicells Nova436Q e Neutrino 430 con firmware fino a QRTB 2.7.8 hanno credenziali hardcoded facilmente individuabili, che possono essere utilizzate da attaccanti remoti per autenticarsi via ssh. Le credenziali sono memorizzate nel firmware, cifrate con la...

CVE-2023-23752

CVE-2023-23752 Vulnerabilità di accesso non autorizzato in Joomla CVE-2023-23752 Descrizione della vulnerabilità Joomla è un sistema di gestione dei contenuti CMS open source scritto in PHP, che supporta diversi database come MySQL, MSSQL e PostgreSQL. A causa di una gestione inadeguata delle...

CVE-2026-48907

🚨 CVE-2026-48907 - JCE Joomla Content Editor अनधिकृत दूरस्थ कोड निष्पादन ⚠️ JCE Joomla Content Editor में महत्वपूर्ण अनधिकृत RCE एक महत्वपूर्ण अभिगम नियंत्रण भेद्यता जो अनधिकृत हमलावरों को JCE चला रहे असुरक्षित Joomla इंस्टॉलेशन से समझौता करने की अनुमति देती है। 📖 अवलोकन CVE-2026-48907 Joomla...

CVE-2026-79940

Dell iDRAC9, 14G versions prior to 7.00.00.182 and 15G/16G versions prior to 7.20.30.50, contains an Improper Access Control vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to gaining access to unauthorized data...

CVE-2026-79940

Dell iDRAC9 14G (prior to 7.00.00.182 ) and 15G/16G (prior to 7.20.30.50 ) contains an Improper Access Control vulnerability. An unauthenticated attacker with remote network access could exploit this to gain access to unauthorized data. The CVSS v3.1 score is 5.9 (MEDIUM) with a high attack compl...

EUVD-2026-66655

Dell iDRAC9, 14G versions prior to 7.00.00.182 and 15G/16G versions prior to 7.20.30.50, contains an Improper Access Control vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to gaining access to unauthorized data...

CVE-2026-79940

Dell iDRAC9, 14G versions prior to 7.00.00.182 and 15G/16G versions prior to 7.20.30.50, contains an Improper Access Control vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to gaining access to unauthorized data...

CVE-2026-70481

CVE-2026-70481 Open WebUI, interessato nelle versioni dalla 0.5.0 alla 0.10.2, corretto nella 0.11.0. Gravità moderata, CVSS 5.4, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L, CWE-284 e CWE-862. In backend/openwebui/routers/channels.py i gestori di aggiornamento ed eliminazione dei messaggi si...

CVE-2023-51119

CVE-2023-51119 Controllo di accesso improprio sul router D-Link DIR-605L Spiegazione dello sfruttamento: A causa di un controllo di accesso errato, è possibile eseguire un takeover dell'account amministratore senza alcun tipo di autenticazione inviando una richiesta in circostanze speciali è...

EUVD-2026-66404

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalate privileges on the device...

CVE-2026-77557

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalate privileges on the device...

CVE-2026-77557

CVE-2026-77557 is a critical (CVSS 9.8) Improper Access Control vulnerability in UniFi Protect AI Key . A malicious actor with network access can exploit it to escalate privileges on the device, with no prior authentication required (PR:N). The attack vector is network-based with low complexity, ...

DEBIAN-CVE-2026-65182

Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from...

EUVD-2026-66402

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device...

CVE-2026-77553

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device...

CVE-2026-77553

CVE-2026-77553 is a CRITICAL (CVSS 9.9) Improper Access Control vulnerability in the UniFi Access Application (Ubiquiti). A low-privileged actor with network access can exploit it to escalate privileges on the host device , with high impact on confidentiality, integrity, and availability. The att...

EUVD-2026-66400

A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Connect Display Cast Pro to escalate privileges on the device...

CVE-2026-77551

An Improper Access Control vulnerability in UniFi Connect Display Cast Pro allows a network-based attacker, under certain conditions, to escalate privileges on the device. The flaw is scored CVSS 9.0 (CRITICAL) with a changed scope and high impact on confidentiality, integrity, and availability. ...