8 matches found
CVE-2022-26629
잠금 화면 우회 CVE-2022-26629 영향을 받는 제품 SoroushPlus+ Messenger 1.0.30 취약점 유형 부적절한 접근 제어 영향 잠금 화면 우회 요약 충분하지 않은 권한 및 특권에 대한 부적절한 처리는 공격자가 잠금 화면 기능을 수정 및 덮어쓰기하여 승인 없이 우회할 수 있게 합니다. 익스플로잇 BypassLockScreen.py 자동 익스플로잇 PoC 1. BypassLockScreen.py를 SoroushPlus+ 설치 디렉터리에 넣습니다. 2. Python3 BypassLockScreen.py를...
dotnet: .NET: Security feature bypass due to incorrect authorization
A flaw was found in .NET where incorrect authorization allows an unauthorized attacker to bypass a security feature over a network. This vulnerability enables an attacker to circumvent intended security controls, potentially leading to unauthorized access or actions within the affected system...
EUVD-2026-44211
Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network...
OpenClaw 安全漏洞
OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw has a security vulnerability that can be exploited by attackers to cause unauthorized senders to bypass authorization checks...
CVE-2026-33413
CVE-2026-33413 affects etcd before 3.4.42, 3.5.28, and 3.6.9. Unauthorized users can bypass authentication/authorization on etcd RPCs exposed to untrusted or partially trusted clients, enabling actions such as MemberList (discover cluster topology), Alarm (disruption/DoS), Lease APIs (TTL/lease o...
CVE-2025-55734
CVE-2025-55734 affects flaskBlog (versions ≤ 2.8.0). The root cause is a missing authorization check on admin subroutes: the RBAC check runs only for the /admin page in routes/adminPanel.py, while routes/adminPanelComments.py and routes/adminPanelPosts.py are not protected. This allows unauthoriz...
