CVE-2022-24927

CVE-2022-24927 is a privilege mismanagement vulnerability in Samsung Video Player prior to version 7.3.15.30. The root cause is faulty privilege validation logic that allows an attacker to execute video files without permission. The impact per the CVE is attacker-controlled execution with user pr...

Improper Privilege Management in snipe/snipe-it

Description It was found that if a user is not having access to supplier module, he can access and view the supplier content. Proof of Concept 1. Create two users, one admin and one normal user 2. A normal user is not having access to the supplier module. 3. But by enumeration the normal user vie...

CVE-2021-22801: Improper Privilege Management

A CWE-269: Improper Privilege Management vulnerability exists that could cause an arbitrary command execution when the software is configured with specially crafted event actions. Affected Product: ConneXium Network Manager Software All Versions...

CVE-2022-24927: Improper Privilege Management

Improper privilege management vulnerability in Samsung Video Player prior to version 7.3.15.30 allows attackers to execute video files without permission...

PT-2022-16988

Name of the Vulnerable Software and Affected Versions Samsung Video Player versions prior to 7.3.15.30 Description The issue is related to improper privilege management, allowing attackers to execute video files without permission. Recommendations For versions prior to 7.3.15.30, update to versio...

Improper Privilege Management in snipe/snipe-it

Description Unprivilege user can create maintainance for asset Proof of Concept 1. Create regular user and set DENY to all permissions in asset models.\ 2. Login as the user and sent bellow request to create maintainance for asset await fetch"https://demo.snipeitapp.com/hardware/maintenances",...

GHSA-PG38-R834-G45J Improper Privilege Management in Gitea

An issue exsits in Gitea through 1.15.7, which could let a malicious user gain privileges due to client side cookies not being deleted and the session remains valid on the server side for reuse...

Improper Privilege Management in Gitea

An issue exsits in Gitea through 1.15.7, which could let a malicious user gain privileges due to client side cookies not being deleted and the session remains valid on the server side for reuse...

The vulnerability of the Windows AppContracts API Server component of the Windows operating system, related to insecure management of privileges, allows a perpetrator to escalate their privileges.

The vulnerability of the Windows AppContracts API Server component of the operating system is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to enhance their privileges...

The vulnerability of the StateRepository service in the Windows operating system allows a perpetrator to escalate their privileges.

The vulnerability of the StateRepository service in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of Windows Push Notifications apps in the Windows operating system allows attackers to escalate their privileges.

The vulnerability of Windows Push Notifications apps in the operating system Windows is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Windows Accounts Control component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows Accounts Control component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to circumvent existing security restrictions.

The vulnerability of the Windows Hyper-V hardware virtualization system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions...

The vulnerability of Human Interface Devices in the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of Human Interface Devices in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to gain increased privileges.

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Tablet Windows User Interface Application Core component in the Windows operating system allows a hacker to enhance their privileges.

The vulnerability of the Tablet Windows User Interface Application Core component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the basic Windows DWM library in the Windows operating system allows attackers to escalate their privileges.

The vulnerability of the Windows DWM base library in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Windows Common Log File System, a system for journaling on Windows operating systems, allows attackers to escalate their privileges.

The vulnerability of the Windows Common Log File System in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Windows System Launcher component of the Windows operating system allows a hacker to gain increased privileges.

The vulnerability of the Windows System Launcher component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Windows Event Tracing service allows a perpetrator to enhance their privileges within the system.

The vulnerability of the Windows Event Tracing service is related to insecure privilege management. Exploiting this vulnerability can allow an attacker to enhance their privileges within the system...