D-LINK DIR850 - Insecure Access Control Vulnerability

Exploit Title: DLINK DIR850 - Insecure Access Control Product: Dlink Model: DIR850 Date: 14/1/2022 CVE : CVE-2021-46378 Exploit Author: Ahmed Alroky Hardware version: b1 Firmware version: ET850-1.08TRb03 Vendor home page: https://www.dlink.com/ Exploit : Visit http:///config.dat...

DLINK DIR850 Insecure Direct Object Reference

Exploit Title: DLINK DIR850 - Insecure Access Control Product: Dlink Model: DIR850 Date: 14/1/2022 CVE : CVE-2021-46378 Exploit Author: Ahmed Alroky Hardware version: b1 Firmware version: ET850-1.08TRb03 Vendor home page: https://www.dlink.com/ Exploit : Visit http:///config.dat...

DLINK DIR850 - Insecure Access Control

Exploit Title: DLINK DIR850 - Insecure Access Control Product: Dlink Model: DIR850 Date: 14/1/2022 CVE : CVE-2021-46378 Exploit Author: Ahmed Alroky Hardware version: b1 Firmware version: ET850-1.08TRb03 Vendor home page: https://www.dlink.com/ Exploit : Visit http:///config.dat...

Privilege Escalation

github.com/fleetdm/fleet is vulnerable to privilege escalation. A premium users with access to the team features are facing post-authentication authorization leading to insecure access control. This vulnerability does not affect fleet instances without teams, or with teams but without restricted...

Insecure Access Control

linux is vulnerable to insecure access control. The vulnerability exists due to a flaw in kvms390guestsidaop in the arch/s390/kvm/kvm-s390.c function in KVM allowing an attacker to obtain unauthorized memory write access...

Information Disclosure

motioneye is vulnerable to information disclosure. The vulnerability exists due to an insecure access control allowing an attacker to access sensitive information via the GET request to web API /config/list endpoint when a user's password is not configured...

Insecure Access Control

IBM MQ is vulnerable to insecure access control. The vulnerability exists due to an error in the SSLPEER logic within a AMQP channel...

Insecure Access Control

cockpit has insecure access control. The vulnerability exists due to a flaw was found in Cockpit allowing client certificates to authenticate successfully, regardless of the Certificate Revocation List CRL configuration or the certificate status...

Insecure Access Control

shenyu has insecure access control. The vulnerability exists due to a lack of validation of the user access via the /plugin api allowing an attacker to access the system without authentication...

Insecure Access Control

389-ds-base is vulnerable to insecure access control. The vulnerability exists due to a lack of sanitization which allows an attacker to gain authorization with an asterisk in the password...

Information disclosure

In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/sso/config/ SSO configuration endpoint allows any logged-in user guest, standard, or admin to view and modify information...

CVE-2021-25954

In “Dolibarr” application, 2.8.1 to 13.0.4 don’t restrict or incorrectly restricts access to a resource from an unauthorized actor. A low privileged attacker can modify the Private Note which only an administrator has rights to do, the affected field is at “/adherents/note.php?id=1” endpoint...

Insecure Access Control

directmailteam/direct-mail uses insecure access controls. The extension fails to check if an authenticated backend user has access to newsletter subscriber tables e.g. ttaddress, feusers when using the CSV export function of the extension...

Insecure Access Control

chromium is uses an insecure access control. An insufficient policy enforcement was found in the Android intents component, allowing an attacker to bypass security restrictions...

Insecure Access Control

github.com/containerd/containerd uses insecure access controls. Pulling of malicious image can cause Unix file permission changes for existing files in the host's file system. This can result in restriction of access to files which should otherwise by accessible...

Insecure Access Control

github.com/pterodactyl/wings allows insecure access to endpoints. An attacker is able to access resources on local networks that would otherwise be inaccessible due to lack of hostname verification...

Emmanuel MyDomoAtHome 安全漏洞

GitLab Emmanuel MyDomoAtHome is a GitLab open source application. A REST interface to ImperoHome with Domoticz ISS. Emmanuel MyDomoAtHome has a security vulnerability that stems from incorrect access control implementation. An unauthenticated, remote attacker could use the vulnerability could...

Insecure Access Control

mediawiki uses an insecure access control. A user is able to protect a page to a higher level than they currently have permissions for...

Content Spoofing

chromium is vulnerable to content spoofing. An insecure access control allows an attacker who has compromised the renderer process to spoof contents of the Omnibox via a malicious HTML page...

Insecure Access Control

shinobi uses insecure access controls. An attacker is able to access the User/Admin/Super API functions through the use of JS Proto Method names held in an internal JS Object and trick the System into accepting supplied API Key that exists in the underlying JS object...