265578 matches found
CVE-2026-93744
The IBM Navigator for i application on IBM i versions 7.3, 7.4, 7.5, and 7.6 (5770-SS1 Option 3) is vulnerable to an improper authentication flaw (CWE-287 ). An unauthenticated remote attacker can bypass security restrictions by sending a specially crafted HTTP request to any URL within the Navig...
CVE-2026-93744 IBM i Improper Authentication
IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending a specially crafted HTTP request to any URL within the Navigator application prior to authentication, a bad actor could exploit this vulnerability ...
CVE-2023-23752
CVE-2023-23752 Description This repository contains Python and Bash scripts that serve as ports of the original Proof of Concept PoC written in Ruby for the vulnerability CVE-2023-23752 in Joomla! CMS versions 4.0.0 through 4.2.7 made by 'noraj' Alexandre ZANNI. An access control flaw was...
gitpwnd
GitPwnd GitPwnd is a tool to aid in network penetration tests. GitPwnd allows an attacker to send commands to compromised machines and receive the results back using a git repo as the command and control transport layer. By using git as the communication mechanism, the compromised machines don't...
CVE-2026-91467
A vulnerability exists in the Framework component of Oracle Fusion Middleware Control (affected versions 12.2.1.4.0 and 14.1.2.0.0 ). The flaw allows an attacker with physical access to compromise the product, requiring human interaction from a third party. Successful exploitation can lead to a t...
pedit-cow
CVE-2026-46331 is a Linux kernel privilege escalation vulnerability involving the traffic control subsystem and page cache corruption. Requirements: Linux x8664 GCC iproute2 tc Vulnerable kernel Exploitation Flow: SUID Enumeration ↓ Target Selection ↓ ELF Analysis ↓ tc / Netlink / pedit ↓ Page...
CVE-2026-101735
A vulnerability exists in the Project Control component of Oracle Construction and Engineering's Primavera Unifier product, affecting supported versions 23.12.0-23.12.16 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitatio...
CVE-2019-19550
CVE-2019-19550 Description Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and 6.2.34.37 allows admin access to sensitive information of affected users using vulnerable versions. The attacker only needs to provide the correct URL. Important Dates Announcement to Vendor: 2019-12-02 Public...
ved-ebpf
VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF VED Vault Exploit Defense-eBPF leverages eBPF extended Berkeley Packet Filter to implement runtime kernel security monitoring and exploit detection for Linux systems. Introduction eBPF is an in-kernel virtual machine that allows code...
CVE-2024-39210
CVE ID CVE-2024-39210 PRODUCT Best house rental management system VERSION =1.0 PROBLEM TYPE Incorrect Access Control Description Best House Rental Management System v1.0 was discovered to contain an arbitrary file read vulnerability via the Page parameter at index.php. This vulnerability allows...
CVE-2026-113029
Improper access control in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-113029
Improper access control in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-113029
Improper access control in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-113029
Google Chrome versions prior to 156.0.8078.47 are vulnerable to an improper access control issue within the ANGLE component. A remote attacker can exploit this vulnerability by leveraging a crafted HTML page to potentially execute arbitrary code inside the sandbox. While the Chromium security sev...
CVE-2026-113297
Improper access control in Ozone in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-113297
Improper access control in Ozone in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-113297
A remote attacker can leak sensitive information via a crafted HTML page due to an improper access control vulnerability in Ozone within Google Chrome . This issue affects versions prior to 156.0.8078.47 . No specific exploit details or additional remediation steps are provided in the documents.
CVE-2026-113159
Improper access control in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-113159
Improper access control in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-113159
Google Chrome versions prior to 156.0.8078.47 are vulnerable to an improper access control flaw within DevTools . This vulnerability allows a remote attacker to potentially leak sensitive information by interacting with a crafted HTML page . Exploitation details or specific in-the-wild instances ...