FOQUZ Platform Authentication Bypass

The vulnerability of the FOQUZ platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

FOQUZ Platform Auth Bypass

The vulnerability of the FOQUZ platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

FOQUZ Platform Auth Bypass

The vulnerability of the FOQUZ platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

FOQUZ Platform Auth Bypass

The vulnerability of the FOQUZ platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

FOQUZ Platform Auth Bypass

The vulnerability of the FOQUZ platform is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

FOQUZ Platform Auth Bypass

The vulnerability of the FOQUZ platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Digital Inspector Unauthorized Access

The vulnerability of the “Digital Inspector” software architecture is related to the use of pre-installed account data. Exploiting this vulnerability can allow an unauthorized actor to gain unauthorized access to protected information...

Enlogic SCADA System ENTTEK Data Interception Unauthorized Access

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information by intercepting network traffic...

Directum RX Data Compromise

The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

ThrottleBlood.sys RCE

The vulnerability of the MmMapIoSpace function in the ThrottleBlood.sys driver, as part of the ThrottleStop utility, is related to open IOCTLs with insufficient access control. Exploiting this vulnerability could allow an attacker to enhance their privileges, execute arbitrary code, or cause...

CrocoTime authorization Unauthorized Access

The vulnerability of the CrocoTime employee time management system is related to deficiencies in the authorization process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

teleport

Teleport provides connectivity, authentication, access controls and audit for infrastructure. You might use Teleport to: Set up single sign-on SSO for all of your cloud and on-prem infrastructure. Protect access to servers, Kubernetes clusters, databases, Windows desktops, web applications, and...

FreePBX-Reverse-Shell-Module

FreePBX-Reverse-Shell-Module...

CVE-2026-84747

Interpretation conflict in the HTTP protocol implementation in Apache bRPC version 1.18.0 on all platforms allows remote attackers to bypass access control rules enforced by a front proxy. Root Cause: The method dispatch function FindMethodPropertyByURI in bRPC's HTTP protocol splits the request...

CVE-2026-84748

Improper authorization in Apache bRPC versions 1.18.0 on all platforms allows remote attackers to access builtin services through the public port. Root Cause: ServerOptions.internalport is documented to make builtin services and Tabbed services reachable only from the internal port, and the HTTP/...

CVE-2026-114388

Chamilo LMS 2.0.0 pre-releases from 2.0.0-alpha.1 before 2.0.0-RC.3 contain a missing access control vulnerability in GradebookController that allows unauthenticated users to modify gradebook certificates. Attackers can request the setdefaultcertificate endpoint with any course id and document id...

CVE-2026-111849

Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.5...

androrat

'm in progress internationalization, Welcome to join. Androrat Fork/Silent Edition Remote Administration Tool for Android Androrat is a client/server application developed in Java Android for the client-side and in Java/Swing for the Server. The name Androrat is a mix of Android and RAT Remote...

wireless-ids

Wireless IDS Intrusion Detection System Wireless IDS is an open source tool written in Python and work on Linux environment. This tool will sniff your surrounding air traffic for suspicious activities such as WEP/WPA/WPS attacking packets. It do the following Detect mass deauthentication sent to...

CVE-2026-111849

The WpTravelly tour-booking-manager plugin for WordPress, developed by Magepeople inc. , contains a Broken Access Control vulnerability (CWE-862) affecting versions up to and including 2.3.5 . The root cause is a Missing Authorization flaw that allows for the exploitation of incorrectly configure...