CVE-2025-64095---DNN-Unauthenticated-arbitrary-file-upload

CVE-2025-64095---DNN-Unauthenticated-arbitrary-file-upload POC de Control de Acceso Insuficiente de DNN: la subida de imágenes permite sobrescribir contenido del sitio Soy un hombre sencillo, veo cvss:10/10 y entro xD Vi este nuevo CVE CVE-2025-64095: Control de Acceso Insuficiente de DNN: la...

CVE-2026-105848

The @payloadcms/plugin-stripe component within the Payload headless content management system is vulnerable to insufficient access control in versions before 3.90.0 and canary versions before 4.0.0-canary.34 . An authenticated user capable of reaching the enabled optional Stripe REST proxy can pe...

CVE-2026-66751-Insufficient-Access-Controls-Allow-for-Unauthorized-Room-Deletion-Let-s-Chat-

Aviso de seguridad: los controles de acceso insuficientes permiten la eliminación no autorizada de salas Let's Chat Identificador CVE asignado: CVE-2026-66751 Resumen DELETE /rooms/:room no realiza ninguna comprobación de autorización más allá de requerir un inicio de sesión. Cualquier cuenta pue...

throttlestop-exploit-rw

Physical Memory Mapper 研究工具，通过虚拟地址到物理地址的转换结合脆弱驱动程序利用，演示物理内存访问。 概述 本项目探索了底层 Windows 内存管理，结合 superfetch 技术进行地址转换和基于 IOCTL 的物理内存访问。旨在理解内核模式/用户模式交互以及内存子系统内部机制。 CVE-2025-7771 – ThrottleStop.sys 物理内存读写 漏洞摘要 CVE ID： CVE-2025-7771 组件： ThrottleStop.sys（来自 TechPowerUp LLC 的已签名驱动） 受影响版本： ThrottleStop 3.0.0....

CVE-2021-21551

CVE-2021-21551 EoP del controlador Dell CVE-2021-21551 Descripción El controlador dbutil23.sys de Dell contiene una vulnerabilidad de control de acceso insuficiente que puede provocar una escalada de privilegios, una denegación de servicio o una divulgación de información. Se requiere acceso de...

Rocky Linux 9 [CIQ] Security Update: microcode_ctl Multiple Vulnerabilities (crlsa-2025_7043)

The Rocky Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-20257043 advisory. microcodectl: Improper input validation in UEFI firmware CVE-2024-28047 microcodectl: Insufficient granularity of access control in UEFI firmware...

CVE-2026-12265

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL database operations...

EUVD-2026-88237

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL database operations...

CVE-2026-12265 Missing Authorization on HA Failover Config allows Complete Data Destruction

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL database operations...

CVE-2026-12265

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to an insufficient access control flaw in the HA failover endpoint . This vulnerability allows an attacker to perform destructive PostgreSQL database operations , potentially leading to complete data destruction. The vulnerabil...

CVE-2026-12265 Missing Authorization on HA Failover Config allows Complete Data Destruction

Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL database operations...

HP Support Assistant < 9.55.10.0 Potential Escalation of Privilege (HPSBGN04141)

The version of HP Support Assistant installed on the remote Windows host is prior to 9.55.10.0. It is, therefore, affected by a privilege escalation vulnerability as referenced in the HPSBGN04141 advisory: - A potential security vulnerability has been identified in the HP Support Assistant for...

PT-2026-97198

Name of the Vulnerable Software and Affected Versions WC Fields Factory WordPress plugin versions prior to 4.1.11 Description Insufficient access restrictions on the field-management AJAX action allow authenticated users with Subscriber-level permissions or higher to create, modify, and delete...

CVE-2026-19915

A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.55.10.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls...

CVE-2026-19915 HP Support Assistant - Local Escalation of Privilege

A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.55.10.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls...

EUVD-2026-84500

A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.55.10.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls...

CVE-2026-19915

HP Support Assistant versions prior to 9.55.10.0 contain a local privilege escalation vulnerability caused by insufficient access controls . A local attacker with low privileges can exploit this without user interaction to achieve high impact on the system's confidentiality, integrity, and availa...

CVE-2026-19915 HP Support Assistant - Local Escalation of Privilege

A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.55.10.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls...

CVE-2026-50610

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense due to insufficient access controls in a privileged service. An authenticated local user may be able to access the service and perform unauthorized registry modifications,...

CVE-2026-50609

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. Insufficient access controls within a privileged Named Pipe service may allow an authenticated local user to perform unauthorized registry operations. In certain situations, thi...