8 matches found
CVE-2022-26629
Lock Screen Bypass CVE-2022-26629 影響を受ける製品 SoroushPlus+ Messenger 1.0.30 脆弱性の種類 不適切なアクセス制御 影響 ロック画面バイパス 概要 不十分な権限および特権の不適切な処理により、攻撃者はロック画面の機能を変更・上書きでき、いかなる認可もなしにロック画面をバイパスすることが可能になります。 悪用 BypassLockScreen.py 自動エクスプロイト PoC 1. BypassLockScreen.py をお使いの SoroushPlus+ インストールディレクトリに配置し、 2. Python3...
dotnet: .NET: Security feature bypass due to incorrect authorization
A flaw was found in .NET where incorrect authorization allows an unauthorized attacker to bypass a security feature over a network. This vulnerability enables an attacker to circumvent intended security controls, potentially leading to unauthorized access or actions within the affected system...
EUVD-2026-44211
Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network...
OpenClaw 安全漏洞
OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw has a security vulnerability that can be exploited by attackers to cause unauthorized senders to bypass authorization checks...
CVE-2026-33413
CVE-2026-33413 affects etcd before 3.4.42, 3.5.28, and 3.6.9. Unauthorized users can bypass authentication/authorization on etcd RPCs exposed to untrusted or partially trusted clients, enabling actions such as MemberList (discover cluster topology), Alarm (disruption/DoS), Lease APIs (TTL/lease o...
CVE-2025-55734
CVE-2025-55734 affects flaskBlog (versions ≤ 2.8.0). The root cause is a missing authorization check on admin subroutes: the RBAC check runs only for the /admin page in routes/adminPanel.py, while routes/adminPanelComments.py and routes/adminPanelPosts.py are not protected. This allows unauthoriz...
