packetfence

PacketFence What is PacketFence? PacketFence is a fully supported, trusted, Free and Open Source network access control NAC system. Boasting an impressive feature set including a captive-portal for registration and remediation, centralized wired and wireless management, 802.1X support, layer-2...

CVE-2024-3400-Check

Description 1. Perform a POST request to the /ssl-vpn/hipreport.esp endpoint. 2. Perform a GET request to /global-protect/portal/images/sxy.txt to check if the exploitation allows access to the file, which would typically be forbidden 403 Forbidden status. Prerequisites You need Python 3.6 or new...

The vulnerability of the control console of the MaxPatrol EDR detection and response system allows a perpetrator to trigger a service failure.

The vulnerability of the control console of the MaxPatrol EDR detection and response system is related to access control errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability affects the embedded energy-independent single-write eFUSE memory module in Realtek RTL8762C, a highly integrated wireless system on chip (SoC). This module allows a hacker to circumvent existing security restrictions and expose sensitive information.

The vulnerability of the embedded energy-independent single-write eFUSE memory in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to the fact that power is turned on before the access control mechanism is activated. Exploiting this vulnerability can allow a hacker to...

The vulnerability of the Directum RX ECM system, related to deficiencies in access control, allows a perpetrator to compromise data integrity.

The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

The vulnerability of the MmMapIoSpace() function in the ThrottleBlood.sys driver allows a hacker to escalate their privileges, execute arbitrary code, or cause a service failure.

The vulnerability of the MmMapIoSpace function in the ThrottleBlood.sys driver, as part of the ThrottleStop utility, is related to open IOCTLs with insufficient access control. Exploiting this vulnerability could allow an attacker to enhance their privileges, execute arbitrary code, or cause...

CVE-2023-43318

CVE-2023-43318 JetStream Smart Switch - TL-SG2210P v5.0/ Improper Access Control / CVE-2023-43318 + Credits: Shahnawaz Shaikh, Security Researcher at Cybergate Defense LLC + Twitter Vendor: Tp-Link http://tp-link.com Product: JetStream Smart Switch - TL-SG2210P Vulnerability Type: Incorrect Acces...

CVE-2025-46204

Description Unifiedtransform v2.0 is vulnerable to Incorrect Access Control. Any user students and teachers can access and modify course details via the /course/edit/id endpoints. This functionality intended exclusively for administrative use. Exploiting this flaw allows unauthorized manipulation...

CVE-2025-46203

Description Unifiedtransform v2.0 is vulnerable to Incorrect Access Control. Any user students and teachers can access and modify student records via the /students/edit/id endpoints. This functionality intended exclusively for administrative use. Exploiting this vulnerability can lead to...

HATCHA

HATCHA CAPTCHA proves you're human. HATCHA proves you're not. HATCHA H yperfast A gent T est for C omputational H euristic A ssessment is a reverse CAPTCHA that gates access behind challenges trivial for AI agents but painful for humans — large-number multiplication, string reversal, binary...

CVE-2024-36842-Backdooring-Oncord-Android-Sterio-

CVE-2024-36842 Backdooring-Oncord+ Android-Sterio We have conducted vulnerablity assessment on one of the most selling after marrket car infotainment unit. Creating Persistent Backdoor on Oncord+ android/ios car infotainment unit using malicious script! About Device: Android version : 12 Kernel...

CVE-2023-31704

CVE-2023-31704 description Sourcecodester Online Computer and Laptop Store 1.0 is vulnerable to Incorrect Access Control, which allows remote attackers to elevate privileges to the administrator's role. Vulnerability Type Incorrect Access Control Vendor of Product Sourcecodster Affected Product...

CVE-2023-46501

CVE-2023-46501 - BoltWire v6.03 - Improper Access Control Description In version 6.03 of BoltWire CMS , it is possible to exploit an “Improper Access Control” vulnerability, through the index.php?p=member.admin&action=data parameter, allowing an attacker to view any member's password, including t...

CVE-2024-25170-Mezzanine-v6.0.0

Product: Mezzanine CMS Version: v6.0.0 Date found: 10.01.2024. Date reported: 10.01.2024. Vulnerability type: Incorrect Access Control. CVE ID: CVE-2024-25170 Description: An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host Header. POC is coming soon:...

CVE-2024-22889-Plone-v6.0.9

Product: Plone CMS Version: v6.0.9 Date found: 10.01.2024. Date reported: 10.01.2024. Vulnerability type: Incorrect Access Control. CVE ID: CVE-2024-22889 Description: Due to incorect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the website via...

CVE-2023-31594

CVE-2023-31594 IC Realtime ICIP-P2012T is vulnerable to Incorrect Access Control Unauthenticated Streaming Channel in IC Realtime IP PTZ Dome Camera ICIP-P2012 software version: 2.420 The live feed MJPEG can be streamed via an exposed HTTP channel using VLC network stream. This vulnerability...

CiscoSpill

CiscoSpill Just a PoC tool to extract password using CVE-2019-1653. CVE-2019-1653 A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The...

jailer

Jailer - eBPF Mandatory Access Control Warning : This project is under heavy development and is NOT ready for production use. APIs, policy formats, and behavior may change without notice. Use for testing and experimentation only. Acknowledgments Note : This is an independent implementation and is...

CVE-2021-42913

CVE-2021-42913 Samsung Printer SCX-6X55X Improper Access Control Samsung Printer SCX-6x55X Series SyncThru Web Service is affected by an improper access control vulnerability. The vulnerability can permit an attacker to gain access to a list of SMB users and passwords...

CVE-2020-10551

CVEID : CVE-2020-10551 Name of the affected products and versions : QQBrowser all versions prior to 10.5.3870.400 Problem type : CWE-284: Improper Access Control Summary QQBrowser is a web browser developed by Tencent. It is one of the most popular web browsers used in China. During our tests, we...