4257 matches found
CVE-2026-87113
Tanium addressed an improper access controls vulnerability in Threat Response...
CVE-2026-87026
Tanium Threat Response is affected by an improper access controls vulnerability. The CNA-assigned CVSS v3.1 score is 3.8 (LOW) with a network vector, low attack complexity, and high privileges required , resulting in limited impact on confidentiality and integrity with no availability impact. The...
EUVD-2026-81086
Tanium addressed an improper access controls vulnerability in Threat Response...
EUVD-2026-81085
Tanium addressed an improper access controls vulnerability in Threat Response...
CVE-2026-87113 Tanium addressed an improper access controls vulnerability in Threat Response.
Tanium addressed an improper access controls vulnerability in Threat Response...
CVE-2026-87113
Tanium Threat Response contains an improper access controls vulnerability, assigned a CVSS v3.1 score of 6.3 (MEDIUM) with a network-based attack vector requiring only low privileges and no user interaction. The flaw impacts confidentiality, integrity, and availability at a low level each, with u...
Apache Tomcat JK Connect <=1.2.44 - Manager Access
Apache Tomcat JK modjk Connector 1.2.0 to 1.2.44 allows specially constructed requests to expose application functionality through the reverse proxy. It is also possible in some configurations for a specially constructed request to bypass the access controls configured in httpd. While there is so...
CVE-2020-36730
CVE-2020-36730 CMP - Coming Soon & Maintenance 3.8.2 - 对 AJAX 调用的不当访问控制（Subscriber+） 描述： 该插件中的部分 AJAX 调用未正确检查权限和 CSRF 令牌，从而导致任意文章读取、订阅者列表导出以及插件停用等问题。 root@kitploit: reference: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f1ef067b-e4b4-4174-b6ff-ec94a7afd55d?source=api-prod...
tailsnitch
Tailsnitch Tailscale 配置的安全审计工具。Tailsnitch 会扫描您的 tailnet，检查 57 种错误配置、过度宽松的访问控制以及违反安全最佳实践的问题。 快速开始 root@kitploit: 1. 设置您的 Tailscale API 凭据 export TSAPIKEY="tskey-api-..." 2. 运行审计 tailsnitch 3. 仅查看高严重性发现 tailsnitch --severity high 4. 修复一些问题 交互式 yolo 模式 tailsnitch --fix 安装 下载预编译二进制文件 从 GitHub Release...
CVE-2019-7238
CVE-2019-7238 Ejecución remota de código sin autenticación en Nexus Repository Manager 3 3.15.0 encontrado por Rico Tencent Security Yunding Lab y @voidfyoo Análisis detallado inglés:...
CVE-2026-66751-Insufficient-Access-Controls-Allow-for-Unauthorized-Room-Deletion-Let-s-Chat-
Aviso de seguridad: los controles de acceso insuficientes permiten la eliminación no autorizada de salas Let's Chat Identificador CVE asignado: CVE-2026-66751 Resumen DELETE /rooms/:room no realiza ninguna comprobación de autorización más allá de requerir un inicio de sesión. Cualquier cuenta pue...
EUVD-2026-77039
A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is an unknown function of the file dashboard.php. Performing a manipulation of the argument userid results in improper access controls. It is possible to initiate t...
EUVD-2026-76980
A vulnerability was identified in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. Affected is the function getsurgesubscription of the file services/subscription.py of the component Subscription Handler. Such manipulation of the argument key leads to improper access...
CVE-2026-90493
A vulnerability was detected in Tonec Internet Download Manager up to 6.42 Build 63 on Windows. The impacted element is an unknown function of the file idmwfp.sys of the component Kernel Driver. The manipulation results in improper access controls. Attacking locally is a requirement. Internet...
PT-2026-90783
A high-severity vulnerability in the Tonec Internet Download Manager kernel driver enables local privilege escalation on Windows systems, with a public exploit already available and no vendor patch released. Key Points: CVE-2026-90493 is a high-severity improper access control flaw in the...
gitoops
GitOops! 😱 条条大路通云端 GitOops 是一款帮助攻击者和防御者识别 GitHub 组织中横向移动与权限提升路径的工具，通过滥用 CI/CD 流水线和 GitHub 访问控制实现。 它通过映射 GitHub 组织与其 CI/CD 任务及环境变量之间的关系来工作。该工具使用任何兼容 Bolt 协议的图数据库作为后端，因此你可以通过 openCypher 查询攻击路径： root@kitploit: MATCH p=:Userlogin:"alice"-..5-v:EnvironmentVariable WHERE v.name = ".SECRET." RETURN p...
HP Support Assistant < 9.53.2.0 Potential Escalation of Privilege (HPSBGN04131)
The version of HP Support Assistant installed on the remote Windows host is prior to 9.53.2.0. It is, therefore, affected by a privilege escalation vulnerability as referenced in the HPSBGN04131 advisory: - A potential security vulnerability has been identified in the HP Support Assistant for...
CVE-2026-87047
Tanium addressed an improper access controls vulnerability in Comply...