CVE-2022-27134

CVE-2022-27134 affects EOSIO batdappboomx v327c04cf, with an access-control flaw in the smart contract’s transfer function. The vulnerability allows remote attackers to win cryptocurrency without paying the ticket fee, via the std::string memo parameter. Multiple sources (NVD, Red Hat, PRION, CVE...

chapasperona.com Improper Access Control vulnerability OBB-2573691

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cijara.com Improper Access Control vulnerability OBB-2572720

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

goodsec.mn Improper Access Control vulnerability OBB-2559268

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress和WordPress plugin 安全漏洞

WordPress is a blogging platform developed using the PHP language. The WordPress plugin flo-launch version 2.4.1 or earlier is vulnerable to an access control error that originates when the plugin injects code into wp-config.php when creating a clone site. prefix cookie to an arbitrary value to...

CVE-2021-42029

CVE-2021-42029 affects SIMATIC STEP 7 (TIA Portal) V15 (all versions), V16 (all versions before V16 Update 5), and V17 (all versions before V17 Update 2). Root cause: improper access control in the engineering system software that can allow privilege escalation on the web server of affected devic...

CVE-2021-42029

A vulnerability has been identified in SIMATIC STEP 7 TIA Portal V15 All versions, SIMATIC STEP 7 TIA Portal V16 All versions V16 Update 5, SIMATIC STEP 7 TIA Portal V17 All versions V17 Update 2. An attacker could achieve privilege escalation on the web server of certain devices due to improper...

CVE-2022-27838

Improper access control vulnerability in FactoryCamera prior to version 2.1.96 allows attacker to access the file with system privilege...

CVE-2022-22257

The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity...

Improper access control

Improper access control vulnerability in FactoryCamera prior to version 2.1.96 allows attacker to access the file with system privilege...

CVE-2022-27840

SamsungRecovery prior to version 8.1.43.0 contains an improper access control vulnerability that allows a local attacker to delete arbitrary files with SamsungRecovery permissions. The issue is confirmed across multiple sources and is mitigated by upgrading to 8.1.43.0 or later. If upgrading is n...

The vulnerability of the OAuth2 ACS access control service of the VMware Workspace One Access application management platform allows a perpetrator to bypass the authentication process and gain unauthorized access to the application.

The vulnerability of the OAuth2 ACS access control service of the VMware Workspace One Access application management platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to bypass the authentication process and gain...

CVE-2021-43474

An Access Control vulnerability exists in D-Link DIR-823G REVA1 1.02B05 Lastest via any parameter in the HNAP1 function...

CVE-2021-43430

An Access Control vulnerability exists in BigAntSoft BigAnt office messenger 5.6 via imwebserver, which could let a malicious user upload PHP Trojan files...

Improper access control

An Access Control vulnerability exists in BigAntSoft BigAnt office messenger 5.6 via imwebserver, which could let a malicious user upload PHP Trojan files...

Improper access control

An Access Control vulnerability exists in HisiPHP 2.0.11 via special packets that are constructed in $files = Dir::getList$decompath. '/ Upload/Plugins /, which could let a remote malicious user execute arbitrary code...

xn----8sbcckak6azbcbazta.xn--p1ai Improper Access Control vulnerability OBB-2465184

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

papoulias.com.gr Improper Access Control vulnerability OBB-2464904

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

oneta.ch Improper Access Control vulnerability OBB-2464887

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-25915

Improper access control vulnerability in ELECOM LAN routers WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior,...