PT-2021-6975 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insecure privilege management in the Windows Print Spooler. It allows an attacker to elevate their privileges, potentially affecting the system. No...

PT-2021-6957 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insecure privilege management in the Windows Print Spooler. It allows an attacker to elevate their privileges, potentially affecting the system...

PT-2021-6955 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to insecure privilege management in Microsoft Visual Studio, allowing an attacker to escalate their privileges. Recommendations: At the moment, there is...

PT-2021-6970 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the Windows Event Tracing service of the Windows operating system. It allows an attacker to elevate their privileges. Recommendation...

Siemens Industrial Edge Management 授权问题漏洞

An authorization bypass vulnerability exists in Siemens Industrial Edge Management, a Siemens platform for hosting applications from various vendors on a computing platform close to the shop floor. Lack of effective privilege management for changing passwords. The vulnerability allows an attacker...

Exploit for Privilege Context Switching Error in Canonical Ubuntu_Linux

overlayFS CVE-2021-3493 OverlayFs OverlayFS es un módulo de...

Improper Privilege Management in microweber/microweber

✍️ Description A simple user without Super Admin access is able to add further users to the system. 🕵️‍♂️ Proof of Concept BurpSuite or proxy utility is required - 1;Simply add a simple User roled user USER A . - 2; Log in with USER A - 3; Obtain the X-Csrf-Token and the Cookie value of USER A - 4;...

CVE-2021-38540: Improper Privilege Management

The variable import endpoint was not protected by authentication in Airflow =2.0.0, =2.0.0, 2.1.3...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.

The vulnerability of the Windows operating system’s kernel is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Kerberos Key Distribution Center (KDC) component of the Windows operating system, which allows a perpetrator to increase their privileges

The vulnerability of the Kerberos Key Distribution Center KDC component of the Windows operating system is related to privilege management errors. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Photo Station photo storage application, related to privilege management errors, allows a intruder to gain unauthorized access to the system.

The vulnerability of the Photo Station photo storage app is related to privilege management errors. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to the system...

Improper Privilege Management in chatwoot/chatwoot

✍️ Description A user without collaborator access to an Inbox is able to reveal the messages from it, by guessing the ID of the Inbox. 🕵️‍♂️ Proof of Concept - 1; With an Administrator user, create an Inbox email type - 2; Only add the Administrator itself to the list of collaborators in the Inbox...

PT-2021-7631 · Microsoft · Edge For Android

Name of the Vulnerable Software and Affected Versions: Microsoft Edge for Android affected versions not specified Description: The issue is related to insecure privilege management in Microsoft Edge for Android. Exploitation of this issue may allow a remote attacker to elevate their privileges...

Design/Logic Flaw

Amazon Kindle e-reader prior to and including version 5.13.4 improperly manages privileges, allowing the framework user to elevate privileges to root...

PT-2021-5187

Name of the Vulnerable Software and Affected Versions Huawei Smartphone affected versions not specified Description The issue is related to a Permissions, Privileges, and Access Controls vulnerability. Successful exploitation of this vulnerability may lead to the user's nickname being maliciously...

CVE-2021-37911: Improper Privilege Management

The management interface of BenQ smart wireless conference projector does not properly control user's privilege. Attackers can access any system directory of this device through the interface and execute arbitrary commands if he enters the local subnetwork...

Improper Privilege Management in circuitverse/circuitverse

✍️ Description subscribe to any private project 🕵️‍♂️ Proof of Concept There is two different user called user-A and user-B.\ 1. User-A created a private project .\ 2. Now User-B sent bellow request to subscribe to above private project PUT /commontator/threads/496401/subscribe HTTP/2 Host:...

Improper Privilege Management in circuitverse/circuitverse

✍️ Description upvote in any private comment 🕵️‍♂️ Proof of Concept Bellow request is vulnerable to upvote in any comment of private project POST /commontator/comments/1312/upvote HTTP/2 Host: circuitverse.org Cookie: User-Agent: Mozilla/5.0 X11; Ubuntu; Linux x8664; rv:90.0 Gecko/20100101...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to privilege management errors, allowing attackers to execute malicious code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to privilege management errors. Exploiting these vulnerabilities can allow an attack...