CVE-2024-21754-Forti-RCE

FortiOS 및 FortiProxy 비밀번호 해싱 취약점으로 인한 RCE CVE-2024-21754 개요 FortiOS 및 FortiProxy 7.4.3, 7.2, 7.0, 6.4, 2.0 이하 버전에서 CVE-2024-21754로 분류된 심각한 취약점이 확인되었습니다. CWE-916으로 분류된 이 취약점은 충분하지 않은 연산 노력으로 생성된 비밀번호 해시를 사용하는 문제로, 슈퍼 관리자 프로필과 CLI 접근 권한을 가진 권한 있는 공격자가 백업 파일을 복호화할 수 있게 합니다. 세부 정보 CVE ID :...

CVE-2024-55591

CVE-2024-55591 PoC Этот репозиторий содержит PoC Proof of Concept для CVE-2024-55591 — критической уязвимости обхода аутентификации, обнаруженной в продуктах Fortinet FortiOS и FortiProxy. Обзор уязвимости CVE-2024-55591 — это уязвимость обхода аутентификации , вызванная использованием...

CVE-2026-6356

Augmentt: 매개변수 변조를 통한 권한 상승 크레딧 이 CVE는 다음의 공동 작업으로 수행되었습니다: HelloWorld 작성자 – GitHub: https://github.com/Penquinsecq Raznov – GitHub: https://github.com/basraznov 설명 웹 애플리케이션의 취약점으로 인해 일반 사용자가 매개변수 조작을 통해 권한을 슈퍼 관리자 수준으로 상승시킬 수 있으며, 이를 통해 민감한 정보에 접근하고 수정할 수 있습니다. !CAUTION본 연구는 교육 및 방어 목적으로 게시되었습니다...

PT-2026-86920

Lara Dashboard before 1.3.2 authorizes the POST /admin/settings/core-upgrades/upload endpoint with only the settings.edit permission, allowing non-Superadmin administrators to upload and extract arbitrary zip archives over the live application source code. Attackers can upload a malicious archive...

PT-2026-82660

Name of the Vulnerable Software and Affected Versions Bluewave Labs Checkmate versions prior to 3.3.1 Description An issue in the inviteController.js component allows remote authenticated administrators to escalate their privileges to superadmin. This is achieved by manipulating the role paramete...

CVE-2026-55728 Loytec LINX firmware: Stack-based Buffer Overflow in cmd_ipaddr_conflict

Stack-based Buffer Overflow CWE-121 in /usr/bin/ltsudo cmdipaddrconflict in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a superadmin-group attacker to trigger a SUID-root process abort or potentially elevate privileges via an overly lo...

EUVD-2026-48593

Stack-based Buffer Overflow CWE-121 in /usr/bin/ltsudo cmdipaddrconflict in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a superadmin-group attacker to trigger a SUID-root process abort or potentially elevate privileges via an overly lo...

CVE-2026-55728

CVE-2026-55728 describes a stack-based buffer overflow in Loytec LINX firmware: the vulnerable path is /usr/bin/ltsudo with the cmd_ipaddr_conflict function, affecting LINX-A64 devices (LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS, L-PAD) up to firmware version 8.4.16. The underlying fl...

EUVD-2026-48590

Improper Privilege Management CWE-269 in /usr/bin/ltsudo in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a superadmin-group attacker to reset the password of any LARM user including the larmapp service account via the set-passwd...

CVE-2026-63082

Perfect Support Ticketing & Document Management System through 1.7 contains a broken access control vulnerability that allows authenticated attackers with Agent-level privileges to manipulate the Support Agent assignment field of tickets by bypassing intended authorization checks. Attackers can a...

EUVD-2026-44945

Perfect Support Ticketing & Document Management System through 1.7 contains a stored cross-site scripting vulnerability that allows authenticated attackers with Agent-level privileges to inject malicious payloads into the Notes field of assigned support tickets. Attackers can store malicious...

CVE-2026-63081 Perfect Support Ticketing System 1.7 Stored XSS via Ticket Notes Field

Perfect Support Ticketing & Document Management System through 1.7 contains a stored cross-site scripting vulnerability that allows authenticated attackers with Agent-level privileges to inject malicious payloads into the Notes field of assigned support tickets. Attackers can store malicious...

PT-2026-60497

Perfect Support Ticketing & Document Management System through 1.7 contains a stored cross-site scripting vulnerability that allows authenticated attackers with Agent-level privileges to inject malicious payloads into the Notes field of assigned support tickets. Attackers can store malicious...

PT-2026-51620

Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.5.0 Description A missing authorization issue allows a user with permissions to edit other users to reset the two-factor authentication 2FA of a superadmin. Recommendations Update to version 8.5.0...

EUVD-2026-38162

phpMyFAQ before 4.1.4 contains missing authorization vulnerabilities in editUser and updateUserRights endpoints that allow authenticated administrators to escalate privileges. Non-SuperAdmin users with edituser permission can set issuperadmin flag or grant arbitrary rights to escalate to SuperAdm...

EUVD-2026-37505

Postiz is an AI social media scheduling tool. In versions prior to 2.21.8, the Skool integration callback signed an attacker-controlled JSON blob into a session-shape JWT using the application's JWTSECRET, and the auth middleware trusted every claim in that JWT without re-resolving the user from...

CVE-2026-35905

T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 were discovered to contain a hardcoded password for root access under the "superadmin" account...

EUVD-2026-34275

T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 were discovered to contain a hardcoded password for root access under the "superadmin" account...

CVE-2026-35905

T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 were discovered to contain a hardcoded password for root access under the "superadmin" account...

CVE-2026-27602

Modoboa contains an OS command injection vulnerability (CWE-like) due to exec_cmd paths using subprocess with shell=True and unsanitized domain/input values. In modoboa/lib/sysutils.py and related sinks (DKIM domain handling, mailbox rename, sa-learn, doveadm, rrdtool, webmail operations), domain...