Gin-Vue-admin-poc-CVE-2022-21660

Gin-Vue-admin Vertical Privilege Escalation Vulnerability and Code Analysis - CVE-2022-21660 1. Foreword Welcome everyone to give this project a star.http https://github.com/flipped-aurora/gin-vue-admin/ After finishing the article, applying for a CVE was somewhat troublesome, but fortunately it...

Apache-couchdb-CVE-2017-12635

CouchDB Vertical Privilege Escalation Vulnerability CVE-2017-12635 Apache CouchDB is an open-source database that focuses on ease of use and being a "fully web-embracing database." It is a NoSQL database that uses JSON as the storage format, JavaScript as the query language, and MapReduce and HTT...

CVE-2021-44103

CVE-2021-44103 KONGA 0.14.9 用のプルーフオブコンセプト - 権限昇格。 はじめに 2021年11月16日、Fabrício Salomão と私は Konga API ゲートウェイに脆弱性を発見しました。これにより、認証済みユーザーなら誰でも管理者になることができます。 脆弱性レポート 製品: KONGA モデル: 0.14.9 脆弱性: 権限昇格 影響: 完全な管理者アクセス（垂直的権限昇格） 認証: 必須 エクスプロイト作者: Fabricio Salomao / Paulo Trindade PoC...

PT-2026-82242

A Broken Access Control vulnerability exists in ThingsBoard Professional Edition PE 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows...

Privilege escalation

A Vertical Privilege Escalation issue in Merchandise Online Store v.1.0 allows an attacker to get access to the admin dashboard...

Acronis: Local Privilege Escalation via DLL Search-Order Hijacking with Cyber Protection Agent - tibxread.exe utility

Vulnerability description not provided...

Privilege escalation

An issue was discovered in Total.js CMS 12.0.0. An authenticated user with limited privileges can get access to a resource that they do not own by calling the associated API. The product correctly manages privileges only for the front-end resource path, not for API requests. This leads to vertica...