CVE-2025-25960

CVE-2025-25960 is a Cross Site Scripting vulnerability affecting phpcmsv9 v9.6.3. The issue allows a remote attacker to escalate privileges via the member center’s menu interface in the background administrator. Reported impact is a partial privilege escalation with low confidentiality/integrity ...

The vulnerability of the Microsoft Dynamics 365 Sales resource planning software server lies in insufficient validation of requests on the server side, allowing attackers to increase their privileges.

The vulnerability of the Microsoft Dynamics 365 Sales resource planning software server relates to insufficient validation of requests on the server side. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

The vulnerability of the OAuth2 Token Handler component of the Red Hat Ansible Automation Platform allows a perpetrator to escalate their privileges.

The vulnerability of the OAuth2 Token Handler component of the Red Hat Ansible Automation Platform is related to access control errors. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerability of FortiOS operating systems, related to incorrect privilege assignment, allows attackers to elevate their privileges.

The vulnerability of FortiOS operating systems is related to the improper assignment of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

Orbe ONetView Roteador Onet-1200 安全漏洞

Orbe ONetView Roteador Onet-1200 is a router from Orbe Brazil. A security vulnerability exists in the Orbe ONetView Roteador Onet-1200 that originates from a remote attacker being able to elevate privileges from status code 500 to status code 200 via a server response...

The vulnerability of the distributed database management system Apache Cassandra lies in its insecure handling of privileges, allowing attackers to elevate their own privileges.

The vulnerability of the distributed database management system Apache Cassandra lies in the insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

MaysWind ezBookkeeping has Improper Privilege Management

An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the insufficient protection of sensitive data. This allows attackers to exploit their privileges.

The vulnerabilities of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to insufficient protection of sensitive data. Exploiting these vulnerabilities can allow attackers to enhance their privileges remote...

The vulnerability of the Xsan component of the Mac OS system allows attackers to gain increased privileges.

The vulnerability of the Xsan component in the Mac OS operating system is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to gain increased privileges remotely...

PT-2025-6753 · Mayswind · Mayswind Ezbookkeeping

Name of the Vulnerable Software and Affected Versions: MaysWind ezBookkeeping version 0.7.0 Description: An issue in MaysWind ezBookkeeping allows a remote attacker to escalate privileges via the token component. Recommendations: For MaysWind ezBookkeeping version 0.7.0, consider disabling the...

The vulnerability of SAP Document Builder in creating and managing documents, related to deficiencies in the authorization process, allows attackers to escalate their privileges.

The vulnerability of SAP Document Builder, a tool for creating and managing documents, is related to deficiencies in its authentication procedures. Exploiting this vulnerability could allow attackers to gain increased privileges remotely...

The vulnerability of PackageKit for macOS operating systems, which allows a hacker to increase their privileges

The vulnerability of PackageKit for macOS operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

PT-2025-5805

Name of the Vulnerable Software and Affected Versions Defense Platform Home Edition versions 3.9.51.x and earlier Description A buffer overflow issue exists, allowing a remote attacker to potentially gain SYSTEM privileges of the Windows system where the product is installed, by performing a...

CVE-2020-27869

This vulnerability allows remote attackers to escalate privileges on affected installations of SolarWinds Network Performance Monitor 2020 HF1, NPM: 2020.2. Authentication is required to exploit this vulnerability. The specific flaw exists within the WriteToFile method. The issue results from the...

The vulnerability of the Yeti threat analysis platform, which relies on the use of strictly encrypted credentials, allows attackers to escalate their privileges.

The vulnerability of the Yeti threat analysis platform is related to the use of strictly encrypted credentials. Exploiting this vulnerability allows a remote attacker to enhance their privileges by using a static JWT token...

Safety-production-process-management-system 安全漏洞

Safety-production-process-management-system is a safety production process management system from China's Zhichuang Control and Safety Company. A security vulnerability exists in Safety-production-process-management-system v1.0, which stems from incorrect handling of password and account...

CVE-2018-9373

In TdlsexRxFrameHandle of the MTK WLAN driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2025-1331 · Mediatek · Mtk Wlan

Name of the Vulnerable Software and Affected Versions: MTK WLAN affected versions not specified Description: A possible out-of-bounds write in the TdlsexRxFrameHandle of the MTK WLAN driver could allow for remote privilege escalation without requiring additional execution privileges. No user...

The vulnerability of the software used for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP lies in the lack of authentication procedures. This allows attackers to increase their privileges.

The vulnerabilities of the software used for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP are related to deficiencies in the authentication process. Exploiting these vulnerabilities can allow attackers, operating remotely, to increase the...

The vulnerability of the web interface of Microprogramming Software for WI-Fi routers from Sharp allows a hacker to elevate their privileges and execute arbitrary commands.

The vulnerability of the web interface of Microprogramming Software-based Wi-Fi routers from Sharp is related to insufficient protection of operational data during code debugging. Exploiting this vulnerability can allow a remote attacker to enhance their privileges and execute arbitrary commands...