CVE-2025-46203

Description Unifiedtransform v2.0 is vulnerable to Incorrect Access Control. Any user students and teachers can access and modify student records via the /students/edit/id endpoints. This functionality intended exclusively for administrative use. Exploiting this vulnerability can lead to...

CVE-2023-46980

CVE-2023-46980 An issue in Best Courier Management System v.1.000 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the userID parameter. Additional Information Video POC Link On YT ; https://youtu.be/3Mz2lSElg7Y Vulnerability Type Incorrect Access...

CVE-2024-31719----AMI-Aptio-5-Vulnerability

AMI-Aptio--NvLock-Vulnerability Information CVE ID: CVE-2024-31719 Link Vulnerability Type: Incorrect Access Control Vendoer of Product: American Megatrends International, LLC. Product: AMI Aptio - 5 Atack Type: Local Attack Vector The attacker can easily bypass the NvLock module's access...

H3C ER8300G2-X - Password Disclosure

H3C ER8300G2-X is vulnerable to Incorrect Access Control. The password for the router's management system can be accessed via the management system page login interface. id: CVE-2024-32238 info: name: H3C ER8300G2-X - Password Disclosure author: s4e-io,adeljck severity: critical description: | H3...

CVE-2020-10238

Made by HK CVE-2020-10238: Incorrect Access Control in comtemplates- RCE CVE-2020-10239: Incorrect Access Control in comfields SQL field- RCE Link https://developer.joomla.org/security-centre/804-20200303-core-incorrect-access-control-in-com-templates.html...

CVE-2024-34320

ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoints...

CVE-2023-31595

CVE-2023-31595 IC Realtime ICIP-P2012T is vulnerable to Incorrect Access Control via an open port IC Realtime IP PTZ Dome Camera ICIP-P2012 software version: 2.420 An exposed port 9989 responds with a live snapshot at the time of request, by using a script, it could be leveraged to have a live fe...

CVE-2023-36643

== Affected Software %hardbreaks Vendor: ITB-GmbH Affected Products: TradePro v9.5 Component: Function Customer; Action oordershow Confirmed: yes == Attack Vector %hardbreaks Type: Incorrect Access Control Access-Type: Remote Impact: Information Disclosure Incorrect Access Control in function...

CVE-2023-36644

== Affected Software %hardbreaks Vendor: ITB-GmbH Affected Products: TradePro v9.5 Component: Printmail Plugin Confirmed: yes == Attack Vector %hardbreaks Type: Incorrect Access Control Access-Type: Remote Impact: Information Disclosure Incorrect Access Control in the printmail plugin in ITB-GmbH...

CVE-2025-45466

CVE-2025-45466 It is the details of CVE-2025-45466 CVE Disclosure: CVE-2025-45466 Summary A vulnerability has been discovered in Unitree Go1 robotic dog all versions using the...

CVE-2023-27035

CVE-2023-27035 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Vulnerability type: Incorrect Access Control Description: An issue discovered in Obsidian Canvas 1.1.9 allows remote attackers to send desktop notifications, record user audio and other unspecified impacts via embedded website on the...

CVE-2026-52394

The DeepSeek V4 model is vulnerable to Incorrect Access Control when processing a crafted input. While specific internal component details or root cause files are not provided in the documents, the vulnerability allows for unauthorized access. Based on the SSVC metrics, the issue is considered au...

CVE-2024-34320

The ProPhoenix Law RMS software, specifically version v2022.2403.3.101 , is affected by an incorrect access control issue. This vulnerability exists within sensitive API endpoints , potentially allowing unauthorized access to restricted data or functions. The CVSS 3.1 score for this vulnerability...

CVE-2024-34320

ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoints...

CVE-2024-23733

CVE-2024-23733 Software AG webMethods API Integration Server 10.15.0 Incorrect Access Control Description The /WmAdmin/,/invoke/vm.server/login login page in the Integration Server in Software AG webMethods 10.15.0 before CoreFix7 allows remote attackers to reach the administration panel and...

CVE-2025-25616

CVE-2025-25616 Unifiedtransform v2.0 is vulnerable to Incorrect Access Control, allowing students to modify exam rules. The affected endpoint is /exams/edit-rule?examruleid=1. Vendor: Unifiedtransform PoC Step 1: Log in to the application as a Student. Step 2: Browse to the following endpoint:...

CVE-2025-25621

CVE-2025-25621 Unifiedtransform v2.0 is vulnerable to Incorrect Access Control, allowing teachers to take attendance of fellow teachers through the endpoint /courses/teacher/index?teacherid=2&semesterid=1. Vendor: Unifiedtransform PoC Step 1: Log in to the application as a Teacher. Step 2: Naviga...

CVE-2023-31704

CVE-2023-31704 description Sourcecodester Online Computer and Laptop Store 1.0 is vulnerable to Incorrect Access Control, which allows remote attackers to elevate privileges to the administrator's role. Vulnerability Type Incorrect Access Control Vendor of Product Sourcecodster Affected Product...

CVE-2023-31594

CVE-2023-31594 IC Realtime ICIP-P2012T is vulnerable to Incorrect Access Control Unauthenticated Streaming Channel in IC Realtime IP PTZ Dome Camera ICIP-P2012 software version: 2.420 The live feed MJPEG can be streamed via an exposed HTTP channel using VLC network stream. This vulnerability...

CVE-2023-49981

CVE-2023-49981 School Fees Management System v1.0 - Incorrect Access Control - Directory Listing Description : A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring...