536 matches found
CVE-2024-55963
CVE‑2024‑55963 Appsmith RCE PoC Exploit PoC per CVE‑2024‑55963 che esegue comandi arbitrari o avvia una reverse shell su istanze Appsmith vulnerabili. Gestisce automaticamente sia i server moderni con la funzionalità environmentId sia le build “legacy” molto più vecchie che la precedono, quindi...
aws-security-assessment-solution
Soluzioni di Valutazione della Sicurezza Self-Service v2.0 La cybersecurity rimane un argomento molto importante e un punto di preoccupazione per molti CIO, CISO e i loro clienti. Per affrontare queste importanti preoccupazioni, AWS ha sviluppato un set primario di servizi che i clienti dovrebber...
self-service-password
LDAP Tool Box Self Service Password Presentazione Self Service Password è un'applicazione PHP che consente agli utenti di modificare la propria password in una directory LDAP. L'applicazione può essere utilizzata con directory LDAPv3 standard OpenLDAP, OpenDS, ApacheDS, Sun Oracle DSEE, Novell,...
CVE-2026-77142
The frontend company self-service editing feature relies on a template-level visibility flag to hide the edit form for company records a visitor does not own, but the corresponding write operation does not repeat this ownership check on the server side. As a result, a visitor who knows the...
CVE-2026-77133
The extension fails to restrict which frontend usergroups a logged-in user may assign to their own account when the profile edit plugin uses its default field configuration, allowing self-service privilege escalation into arbitrary frontend groups...
CVE-2026-77133
CVE-2026-77133 is a broken access control vulnerability in the TYPO3 extension femanager . When the profile edit plugin uses its default field configuration, it fails to restrict which frontend usergroups a logged-in user may assign to their own account, enabling self-service privilege escalation...
EUVD-2026-65343
The extension fails to restrict which frontend usergroups a logged-in user may assign to their own account when the profile edit plugin uses its default field configuration, allowing self-service privilege escalation into arbitrary frontend groups...
EUVD-2026-65334
The frontend company self-service editing feature relies on a template-level visibility flag to hide the edit form for company records a visitor does not own, but the corresponding write operation does not repeat this ownership check on the server side. As a result, a visitor who knows the...
CVE-2026-62183
CVE-2026-62183 — Privilegieneskalation im Benutzer-Self-Service von Apache Syncope Fehlerhaftes Privilegienmanagement CWE-269 in Apache Syncope. Ein authentifizierter Benutzer mit niedrigen Privilegien kann sich über die Self-Service-API für Benutzer selbst beliebige Rollen zuweisen sowie...
CVE-2026-70855
Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM component: Helpdesk/Training. Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Self Service...
EUVD-2026-61806
Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM component: Helpdesk/Training. Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Self Service...
Important: Red Hat Security Advisory: Red Hat Developer Hub 1.10.3 release.
Red Hat Developer Hub 1.10.3 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...
EUVD-2026-47507
Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite component: Manager Self-Service. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
EUVD-2026-47286
Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2026-62542
Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite component: Self Service Benefits. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced...
CVE-2026-62470
Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite component: Manager Self-Service. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2026-61282
Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite component: Self Service Benefits. Supported versions that are affected are 12.2.4-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced...
CVE-2026-61075
Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2026-62542
Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite component: Self Service Benefits. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced...