264925 matches found
WordPress TMDS plugin <= 1.0.15 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Aarush Gaur in WordPress Plugin TMDS versions = 1.0.15...
CVE-2026-107427
The WordPress Event post plugin, affecting versions
CVE-2026-107427 WordPress Event post plugin <= 6.1.1 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in NOUS Ouvert Utile et Simple Event post event-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event post: from n/a through 6.1.1...
EUVD-2026-97287
Authorization Bypass Through User-Controlled Key vulnerability in NOUS Ouvert Utile et Simple Event post event-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event post: from n/a through 6.1.1...
Concierge
Concierge Toolkit: Physical Access Control Identification and Exploitation The Concierge Toolkit is collection of various scripts and resources to aid the in identification and exploitation of physical access control and monitoring systems. Concierge currently contains tests and/or exploits for t...
CVE-2026-76071
CVE-2026-76071: Unauthenticated Pre-Auth Stack Buffer Overflow via sscanf %^, in skkset.cgi ipFilterList Handler in Netis NC63 Researcher: Özcan Ersan @ozcanpng Disclosure status CVE: CVE-2026-76071 Vendor: Netis Systems Co., Ltd. Product: Netis NC63 AC1200 Wireless Dual Band Gigabit MU-MIMO Rout...
NoFrak
NoFrak NoFrak is a Proof of Concept implementation for Android designed to prevent fracking attacks described in "Breaking and Fixing Origin-Based Access Control in Hybrid Web/Mobile Application Frameworks", by Martin Georgiev, Suman Jana, and Vitaly Shmatikov. NDSS 2014. Cordova Android Cordova...
CVE-2023-49979
CVE-2023-49979 Best Student Management System v1.0 - Incorrect Access Control - Directory Listing Description : A directory listing vulnerability in Best Student Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring...
CVE-2026-21135
Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information...
CVE-2026-21139
Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device...
CVE-2026-21118
Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage...
CVE-2026-21139
Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device...
CVE-2026-21139
The Samsung Continuity Service for Windows is vulnerable to improper access control in versions prior to 4.6.1217.0 . This security flaw allows an adjacent attacker to manipulate a connected mobile device. No specific root cause, exploit details, or remediation steps are provided in the documents...
EUVD-2026-97203
Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device...
CVE-2026-21135
Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information...
EUVD-2026-97199
Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information...
CVE-2026-21118
Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage...
CVE-2026-21118
An improper access control vulnerability exists in the DownloadProvider component on devices prior to the SMR Oct-2026 Release 1 . This flaw allows local attackers to gain unauthorized access to files located within scoped storage . Exploitation details and specific exploit paths are not provided...