CVE-2021-22733

Improper Privilege Management vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause shell access when unauthorized code is loaded into the system folder...

CVE-2021-22733

Improper Privilege Management vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause shell access when unauthorized code is loaded into the system folder...

CVE-2021-22732

Improper Privilege Management vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause a code execution issue when an attacker loads unauthorized code on the web server...

CVE-2021-22733

CVE-2021-22733 affects Schneider Electric homeLYnk (Wiser For KNX) and spaceLYnk up to/including v2.60. Root cause: Improper Privilege Management enabling shell access when unauthorized code is loaded into the system folder. Impact (per sources): local access with high integrity and confidentiali...

CVE-2021-22733

Improper Privilege Management vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause shell access when unauthorized code is loaded into the system folder...

CVE-2021-22732

CVE-2021-22732 affects Schneider Electric homeLYnk and spaceLYnk (Wiser For KNX) systems. The vulnerability is described as improper privilege management in homeLYnk/spaceLYnk versions up to V2.60 and earlier, enabling code execution if an attacker loads unauthorized code on the web server. Conne...

The vulnerability of the Windows Container Manager Service in Microsoft Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Container Manager Service in Microsoft Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to increase their privileges...

Improper Privilege Management in dolibarr/dolibarr

💥 BUG unprivileged user can add personal email to another user. 💥 IMPACT user who dont have any access in "users and groups" can update users personal email. 💥 TESTED VERSION dolibarr 14.0.0-beta 💥 STEP TO REPRODUCE 1. First goto admin account and add user B as normal user .\ Now give user B...

The vulnerability of the Windows Container Manager Service component in the Windows operating system, related to insecure management of privileges, allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Container Manager Service component of the operating system is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to enhance their privileges...

Improper Privilege Management in dolibarr/dolibarr

💥 BUG unprivileged user can attach agenda with leave. 💥 IMPACT user who dont have any access in leave can add agenda to this leave 💥 TESTED VERSION dolibarr 14.0.0-beta 💥 STEP TO REPRODUCE 1. First goto admin account and add user B as normal user .\ Now give user B bellow permission for Agenda...

Improper Privilege Management in dolibarr/dolibarr

💥 BUG unprivileged user can add resource to a agenda 💥 IMPACT user with read-only permission can add resource agenda 💥 TESTED VERSION dolibarr 14.0.0-beta 💥 STEP TO REPRODUCE 1. First goto admin account and add user B as normal user .\ Now give user B bellow permission for Events/Agenda and...

Improper Privilege Management in dolibarr/dolibarr

💥 BUG unprivileged user can see task associated with a project 💥 IMPACT user dont have access to specific project but still can see task attached to this project . 💥 TESTED VERSION dolibarr 14.0.0-beta 💥 STEP TO REPRODUCE 1. First goto admin account and add user B as normal user .\ Now give user ...

Improper Privilege Management in dolibarr/dolibarr

💥 BUG unprivileged user can download file of a agenda 💥 IMPACT user dont have access to specific agenda but still can download file uploaded to this agenda . 💥 TESTED VERSION dolibarr 14.0.0-beta 💥 STEP TO REPRODUCE 1. First goto admin account and add user B as normal user .\ Now give user B...

Vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are caused by privilege management errors, allowing attackers to write arbitrary files to the device’s file system.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are due to privilege management errors. Exploiting these vulnerabilities can allow an attacker to remotely write arbitrary files...

Improper Privilege Management in dolibarr/dolibarr

💥 BUG unprivileged user can edit/share linked file of a project . 💥 VIDEO https://drive.google.com/file/d/1YaiG0vjFTuqZRck7dMLqkhT7HSZqaEdu/view?usp=sharing 💥 STEP TO REPRODUCE 1. From admin account add user B as normal user .\ now give user B bellow permission for project module.\ ----Read...

Improper Privilege Management in dolibarr/dolibarr

💥 BUG unprivileged user can download project file 💥 STEP TO REPRODUCE ========================== 1. From admin account add user B as normal user .\ now give user B bellow permission for project module.\ ----Read projects and tasks shared project and projects I'm contact for. Can also enter time...

Improper Privilege Management in dolibarr/dolibarr

💥 BUG unprivileged user can modify directory 💥 STEP TO REPRODUCE 1. From admin account add user B as normal user .\ Now dont give any permission for DMS/ECM module for user B .\ So, user B should not see any DMS/ECM details .\ \ 2. Now from admin account goto...

The vulnerability of the cluster software-defined networking control interface of Cisco SD-WAN allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Cisco SD-WAN programmatically-defined network management interface is related to privilege management errors. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are caused by privilege management errors. This allows attackers to write arbitrary files to the device’s file system.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are due to privilege management errors. Exploiting these vulnerabilities can allow an attacker to remotely write arbitrary files...

The vulnerability in the vManage web interface of the software-defined Cisco SD-WAN network allows a attacker to elevate their privileges.

The vulnerability of the vManage web interface for the programmatically defined Cisco SD-WAN network is related to privilege management errors. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...