Improper Privilege Management in amirsanni/mini-inventory-and-sales-management-system

💥 BUG unprivileged user can update item 💥 STEP TO REPDOUCE 1. From admin account goto https://1410inc.xyz/mini-inventory-and-sales-management-system/administrators and add new user callled user-B with basic role .\ 2. Now goto user-B account and here user-B cant see any item.\ Now user-B execute...

Improper Privilege Management in opensource-socialnetwork/opensource-socialnetwork

💥 BUG unprivileged user can like to private album . 💥 IMPACT user who does not have permiison in private album still can comment in that album. 💥 STEP TO RERPODUCE There is two user called user-A and user-B.\ 1. First goto user-A account and create a private album . \ Lets album url is...

Improper Privilege Management in opensource-socialnetwork/opensource-socialnetwork

💥 BUG unprivileged user can comment to private album . 💥 IMPACT user who does not have permiison in private album still can comment in that album. 💥 STEP TO RERPODUCE There is two user called user-A and user-B.\ 1. First goto user-A account and create a private album . \ Lets album url is...

Improper Privilege Management in uvdesk/core-framework

✍️ BUG privilege escalation bug to pin a threads 🕵️‍♂️ Proof of Concept 1. Frist from admin account goto http://localhost/uvdesk/public/en/member/agents and add new user called user B with Agent role .\ Now gives user-B all tikceting permission like can update/add/edit/delete/lock/pin to a ticket...

Rancher Labs Rancher Licensing Issue Vulnerability

Rancher Labs Rancher is an open source enterprise container management platform from Rancher Labs, Inc. Rancher Labs Rancher has an authorization issue vulnerability that stems from the product's lack of effective privilege management for the management of critical resources, which could be...

Rancher Labs Rancher Access Control Error Vulnerability

Rancher Labs Rancher is an open source enterprise container management platform from Rancher Labs, Inc. An access control error vulnerability exists in Rancher Labs Rancher, which stems from the product's lack of effective privilege management for creating cloud credential IDs, which could be...

Rancher Labs Rancher 授权问题漏洞

Rancher Labs Rancher is an open source enterprise container management platform from Rancher Labs, Inc. Rancher Labs Rancher has an authorization issue vulnerability that stems from the product's lack of effective privilege management for the management of critical resources, which could be...

Security Advisory - Privilege Escalation Vulnerability in some Huawei Products

There is a privilege escalation vulnerability in some Huawei products. Due to improper privilege management, a local attacker with common privilege may access some specific files in the affected products. Successful exploit will cause privilege escalation. Vulnerability ID: HWPSIRT-2020-05256 Thi...

PT-2021-4318 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to insecure privilege management in Visual Studio Code. Exploitation of this issue may allow an attacker to elevate their privileges. Recommendations: At the...

PT-2021-4152 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows InstallService, which is caused by insecure privilege management. This vulnerability can be exploited to allow...

PT-2021-3921 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the Windows kernel. It allows an attacker to elevate their privileges. The estimated number of potentially affected devices worldwid...

PT-2021-3790 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to insecure privilege management in Microsoft Exchange Server, allowing a remote attacker to elevate their privileges. There is no information provide...

PT-2021-5178 · Microsoft · Windows Remote Access Connection Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Access Connection Manager affected versions not specified Description: The issue is related to insecure privilege management in the Remote Access Connection Manager RASMan service of the Microsoft Windows operating system. It...

PT-2021-5110 · Microsoft · Windows Desktop Bridge +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Desktop Bridge affected versions not specified Description: The issue is related to insecure privilege management in the Desktop Bridge application converter of the Microsoft Windows operating system. It allows an attacker t...

PT-2021-6051 · Microsoft · Open Enclave Sdk

Name of the Vulnerable Software and Affected Versions: Open Enclave SDK affected versions not specified Description: The issue is related to insecure privilege management. Exploitation of this issue may allow an attacker to bypass security restrictions and elevate their privileges. Recommendation...

PT-2021-4164 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the Windows operating system kernel, allowing an attacker to bypass security mechanisms. A security-feature bypass vulnerability...

PT-2021-5215 · Microsoft · Windows Cloud Files Mini Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Cloud Files Mini Filter Driver affected versions not specified Description: The issue is related to unsafe privilege management in the Windows Cloud Files Mini Filter Driver. It allows an attacker to elevate privileges in the system...

PT-2021-3923 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows Kernel, which is caused by insecure privilege management. Exploitation of this issue may allow an...

PT-2021-4161 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows operating system, specifically due to insecure privilege management. This vulnerability can be exploited by an...

CVE-2021-25429

Improper privilege management vulnerability in Bluetooth application prior to SMR July-2021 Release 1 allows untrusted application to access the Bluetooth information in Bluetooth application...