CVE-2026-15952

Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager PCM600. This issue affects Protection and control IED manager PCM600: through 2.14...

CVE-2026-15952 Improper Permission Assignment in Scheduler Service

Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager PCM600. This issue affects Protection and control IED manager PCM600: through 2.14...

CVE-2026-15952

The ABB Protection and control IED manager (PCM600) is affected by an improper permission assignment vulnerability within the Scheduler Service . This flaw involves incorrect permissions for a critical resource, potentially impacting confidentiality, integrity, and availability. The issue specifi...

CVE-2026-15952 Improper Permission Assignment in Scheduler Service

Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager PCM600. This issue affects Protection and control IED manager PCM600: through 2.14...

EUVD-2026-88248

Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager PCM600. This issue affects Protection and control IED manager PCM600: through 2.14...

CVE-2025-2304

Camaleon CMS v2.9.1 - Mass Assignment leads to Privilege Escalation Exploit Tool - PoC Description This project is a Python-based exploitation proof of concept tool that demonstrates and analyzes a privilege escalation vulnerability affecting v2.9.1 of Camaleon CMS. The script automates the proce...

CVE-2025-2304-CamaleonCMS-PoC

PoC: CVE-2025-2304 - Camaleon CMS Privilege Escalation Technical Overview This repository contains a Functional Proof of Concept PoC for a Mass Assignment vulnerability in Camaleon CMS versions prior to 2.8.1. The vulnerability resides in the updatedajax endpoint of the User Management module,...

CVE-2026-15952: Incorrect Permission Assignment for Critical Resource

Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager PCM600. This issue affects Protection and control IED manager PCM600: through 2.14...

ROS-20260928-73-0123

The vulnerability of the longhaulexit function in the drivers/cpufreq/longhaul.c module of the Linux kernel frequency scaling driver is related to the assignment of pointers. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

PT-2026-99884

Name of the Vulnerable Software and Affected Versions ABB Protection and control IED manager PCM600 versions prior to 2.15 Description An incorrect permission assignment for a critical resource exists within the software, which could allow unauthorized access or modification of sensitive...

CVE-2025-2304

Camaleon CMS -p Аргументы -t, --target Базовый URL цели -u, --username Действительное имя низкоуровневого пользователя -p, --password Пароль пользователя Ход эксплойта 1. Получить страницу входа и извлечь CSRF-токен 2. Аутентифицироваться с предоставленными учётными данными 3. Перейти на страницу...

CVE-2025-2304-PoC

Exploit CVE-2025-2304 Camaleon CMS vulnérable à une élévation de privilèges via une assignation massive Mass Assignment Description de la vulnérabilité Une élévation de privilèges via une assignation massive Mass Assignment existe dans Camaleon CMS Lorsqu'un utilisateur souhaite changer son mot d...

CVE-2025-15602-PoC

CVE-2025-15602-PoC CVE-2025-15602-PoC est une preuve de concept de la vulnérabilité CVE-2025-15602 dans Snipe-IT. Un script pour lister tous les utilisateurs et un script pour prendre le contrôle d'un compte superadmin. Contexte Un utilisateur a seulement le droit de modifier les utilisateurs, il...

Exploit-for-CVE-2025-2304

Exploit-for-CVE-2025-2304 usage: exploit.py -h --url URL --username USERNAME --password PASSWORD 설명 Camaleon CMS는 안전하지 않은 일괄 할당mass assignment으로 인한 권한 상승 취약점의 영향을 받습니다. UsersController의 updatedajax 메서드는 permit! 함수를 사용하여 필터링되지 않은 매개변수가 처리되도록 허용합니다. 이로 인해 인증된 사용자가 제한된 속성을 수정하고 상승된 권한을 획득할 수 있습니다. ⚠️...

CVE-2024-54363-Exploit

CVE-2024-54363-Exploit Уязвимость неверного назначения привилегий в nssTheme Wp NssUser Register позволяет повышать привилегии. Эта проблема затрагивает Wp NssUser Register: от n/a до 1.0.0. Описание Плагин nssTheme Wp NssUser Register для WordPress уязвим к проблеме неверного назначения привилег...

CVE-2025-67875

CVE-2025-67875: ChurchCRM имеет хранимую XSS-уязвимость через назначение свойств лица, ведущую к угону сессии администратора Обзор Поле| Подробности ---|--- Идентификатор CVE| CVE-2025-67875 Серьезность| HIGH Рекомендация| Посмотреть рекомендацию Обнаружено| Lukasz Rybak Затронутые продукты...

CVE-2026-0920-

CVE-2026-0920- LA-Studio Element Kit for Elementor 📡 Эксплойт выходит здесь первым. Подписывайтесь на @KNxploited в Telegram — ваш элитный канал со свежераскрытыми CVE, рабочими PoC и точными security-исследованиями. Обновляется неустанно. Создан для тех, кто идёт впереди. 🧠 Обзор CVE-2026-0920 —...

CVE-2019-10149

CVE-2019-10149 SNP Assignment для уязвимости в Linux...

CVE-2022-45265

CVE-2022-45265 Dans le Sanitization Management System 1.0 distribué par sourcecodester.com curl --location --request POST 'http://localhost/php-sms/classes/Users.php?f=save' \ --form 'id="1"' \ --form 'firstname="HACKED"' \ --form 'lastname="Administrator"' \ --form 'username="admin"' \ --form...

CVE-2026-100686

Budibase versions before 3.45.0 fail to validate per-app authorization in the POST /api/global/groups/:groupId/apps endpoint, allowing builders to assign application roles across workspace boundaries. A builder of a single workspace can exploit missing per-app authorization checks to grant...