EUVD-2026-81401

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. Insufficient access controls within a privileged Named Pipe service may allow an authenticated local user to perform unauthorized registry operations. In certain situations, thi...

CVE-2025-64095---DNN-Unauthenticated-arbitrary-file-upload

CVE-2025-64095---DNN 未认证任意文件上传 DNN 访问控制不足的 POC - 图片上传允许覆盖站点内容 我是个简单的人，看到 cvss:10/10 我就冲了 xD 我看到了这个新的 CVE CVE-2025-64095，DNN 访问控制不足 - 图片上传允许覆盖站点内容 默认的 HTML 编辑器提供程序允许未认证的文件上传，并且图片可以覆盖现有文件。 描述 未认证用户可以上传并替换现有文件，从而允许篡改网站，并与其他问题结合，注入 XSS 载荷。 https://nvd.nist.gov/vuln/detail/CVE-2025-64095 基础评分：10.0 严重...

CVE-2026-66751-Insufficient-Access-Controls-Allow-for-Unauthorized-Room-Deletion-Let-s-Chat-

安全公告：访问控制不足导致未授权删除房间（Let's Chat） 分配的 CVE 编号： CVE-2026-66751 摘要 DELETE /rooms/:room 除了要求登录之外，不执行任何授权检查。任何账户都可以归档服务器上的任意房间，包括该账户无权读取、加入或修改的私有房间和密码保护房间。 归档就是 Let's Chat 删除房间的方式。房间会从房间列表中消失，直接查找返回 404，向其发布消息或上传文件也会被拒绝。应用程序中没有任何代码路径可以撤销此操作。 受影响版本 仓库 URL：https://github.com/sdelements/lets-chat 从 0.3.0（...

throttlestop-exploit-rw

Physical Memory Mapper 研究工具，通过虚拟地址到物理地址的转换结合脆弱驱动程序利用，演示物理内存访问。 概述 本项目探索了底层 Windows 内存管理，结合 superfetch 技术进行地址转换和基于 IOCTL 的物理内存访问。旨在理解内核模式/用户模式交互以及内存子系统内部机制。 CVE-2025-7771 – ThrottleStop.sys 物理内存读写 漏洞摘要 CVE ID： CVE-2025-7771 组件： ThrottleStop.sys（来自 TechPowerUp LLC 的已签名驱动） 受影响版本： ThrottleStop 3.0.0....

CVE-2021-21551

CVE-2021-21551 Dell 驱动程序权限提升 CVE-2021-21551 描述 Dell dbutil23.sys 驱动程序包含一个访问控制不足的漏洞，可能导致权限提升、拒绝服务或信息泄露。需要本地已认证用户的访问权限。 该漏洞利用程序已在 Windows 10 v1511 上测试通过。 漏洞公告链接...

HP Support Assistant < 9.53.2.0 Potential Escalation of Privilege (HPSBGN04131)

The version of HP Support Assistant installed on the remote Windows host is prior to 9.53.2.0. It is, therefore, affected by a privilege escalation vulnerability as referenced in the HPSBGN04131 advisory: - A potential security vulnerability has been identified in the HP Support Assistant for...

CVE-2026-75809

Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by bypassing driver authentication and using IOCTLs to read from and write to PCIe configuration space.Refer to the ' Security Update for Armoury...

CVE-2026-16004

Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read and write arbitrary PCI/PCIe configuration space via crafted IOCTL requests by bypassing the driver's verification. Refer to the ' Security Update for Armoury Crate App' section on the ASUS Security...

CVE-2026-16003

Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add an arbitrary process identifier to the driver's whitelist via a crafted IOCTL request by bypassing the driver's verification.Refer to the ' Security Update for Armoury Crate App ' section on the ASUS...

CVE-2026-16003

Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add an arbitrary process identifier to the driver's whitelist via a crafted IOCTL request by bypassing the driver's verification.Refer to the ' Security Update for Armoury Crate App ' section on the ASUS...

CVE-2026-75809

Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by bypassing driver authentication and using IOCTLs to read from and write to PCIe configuration space.Refer to the ' Security Update for Armoury...

CVE-2026-15431 HP Support Assistant – Potential Escalation of Privilege

A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.53.2.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls...

CVE-2026-15431 HP Support Assistant – Potential Escalation of Privilege

A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.53.2.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls...

CVE-2026-15431

HP Support Assistant versions prior to 9.53.2.0 contain a local privilege escalation vulnerability caused by insufficient access controls , allowing a local attacker with low privileges (and no user interaction) to compromise the confidentiality, integrity, and availability of the vulnerable syst...

EUVD-2026-70656

A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.53.2.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls...

PT-2026-85204

A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.53.2.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls...

CVE-2026-82346 HP ImageDiags - Potential Escalation of Privilege

A potential security vulnerability has been identified in the HP ImageDiags for versions prior to 5.0.0.36. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls...

EUVD-2026-68372

WaveSuite is affected by an insufficient role-based access control vulnerability in the CPB Log Files feature. Successful exploitation allows an authenticated low-privilege user to load pages restricted to higher-privilege roles by requesting the corresponding URL directly in the browser...

CVE-2026-79673

Ech0 before 4.4.3 protects the PUT /user endpoint with the profile:read scope, a read-only scope, but allows write operations including password changes. An attacker with an admin's profile:read access token can change the admin's password and login to obtain an unrestricted session token that...

EUVD-2026-65192

The WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.29 via the 'resultID' parameter due to missing validation on a user controlled key...