CVE-2020-13850

Artica Pandora FMS 7.44 has inadequate access controls on a web folder...

Incorrect Authorization

org.apache.pulsar, pulsar-broker is vulnerable to Incorrect Authorization. The vulnerability exists due to inadequate access controls to modify topic-level policies. Only users with the tenant admin or super user role should be permitted to perform such management operations, allowing authenticat...

PT-2023-6872

Name of the Vulnerable Software and Affected Versions COMOS All versions Description The issue is related to inadequate access controls in the COMOS application, specifically when making a connection to the SQLServer. This could allow a remote attacker to directly query the database, accessing...

SUSE CVE-2011-2367

The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict read operations, which allows remote attackers to obtain sensitive information from GPU memory associated with an arbitrary process, or cause a denial of service application crash, via unspecified vectors...

PT-2021-5101

Name of the Vulnerable Software and Affected Versions Open Management Infrastructure OMI affected versions not specified Description The issue is related to an elevation of privilege vulnerability in Open Management Infrastructure OMI. It is associated with inadequate access controls in OMI...

PT-2021-1747

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.10 Description The issue is related to the CRM User Management Framework component of Oracle Common Applications, which has inadequate...

PT-2020-3372

Name of the Vulnerable Software and Affected Versions Oracle Security Service versions 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is related to the SSL API component of Oracle Security Service, which has inadequate access controls. This allows an unauthenticated attacker with networ...

CVE-2020-13850

Artica Pandora FMS 7.44 has inadequate access controls on a web folder...

CVE-2020-13850

Artica Pandora FMS 7.44 has inadequate access controls on a web folder...

CVE-2020-13850: Direct Request

Artica Pandora FMS 7.44 has inadequate access controls on a web folder...

PT-2020-13730

Name of the Vulnerable Software and Affected Versions Artica Pandora FMS version 7.44 Description The issue is related to inadequate access controls on a web folder. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where...

PT-2020-2306

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access controls in the Estimate and Actual Charges component of Oracle Depot Repair. It allows an unauthenticated attacker with network acces...

PT-2020-2319

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access controls in the Marketing Administration component of Oracle Marketing. It allows an unauthenticated attacker with network access via...

PT-2020-2326

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access controls in the Print Server component of Oracle One-to-One Fulfillment. It allows an unauthenticated attacker with network access via...

PT-2020-2323

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access controls in the Courseware component of Oracle Quoting, allowing an unauthenticated attacker with network access via HTTP to compromis...

PT-2020-1547

Name of the Vulnerable Software and Affected Versions Oracle Outside In Technology version 8.5.4 Description The issue is related to inadequate access controls in the Outside In Filters component of Oracle Outside In Technology, a suite of software development kits SDKs. This allows an...

Schneider Electric Pelco Endura NET55XX Encoder - Authentication Bypass Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Schneider Electric Pelco Endura NET55XX Encoder", 'Description' = %q This module exploits inadequate access controls within the webUI to enable t...

Schneider Electric Pelco Endura NET55XX Encoder

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Schneider Electric Pelco Endura NET55XX Encoder", 'Description' = %q This module exploits inadequate access controls within the webUI to enable...

Schneider Electric Pelco Endura NET55XX Encoder

This module exploits inadequate access controls within the webUI to enable the SSH service and change the root password. This module has been tested successfully on: NET5501, NET5501-I, NET5501-XT, NET5504, NET5500, NET5516, NET550 versions. Module Options msf use...

HackerOne: Inadequate access controls in "Vote" functionality???

Hello there, First of all let me congratulate you for including pornhub in the list of bug bounty programs, me and my colleagues will have a lot of fun with it hahahahahah. Awesome... Anyways, I stumbled upon something whilst testing hackerone's main site. I don't know if it's a feature that it's...