CVE-2023-27350

CVE-2023-27350 This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper...

CVE-2023-43318

CVE-2023-43318 JetStream Smart Switch - TL-SG2210P v5.0/ Improper Access Control / CVE-2023-43318 + Credits: Shahnawaz Shaikh, Security Researcher at Cybergate Defense LLC + Twitter Vendor: Tp-Link http://tp-link.com Product: JetStream Smart Switch - TL-SG2210P Vulnerability Type: Incorrect Acces...

CVE-2026-111417

A broken access control vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service . The root cause is the use of a shared token for submitted conversion documents, which may allow unauthorized users to access documents submitted by others. While the vulnerability is conf...

EUVD-2026-112697

A broken access control vulnerability exists in the Foxit official website’s HTML-to-PDF conversion service due to the use of a shared token for submitted conversion documents. This may allow unauthorized users to access documents submitted by other users...

CVE-2026-35414

CVE-2026-35414 CVE-2026-35414 Vuln block auth2-pubkeyfile.c vulnerable static int matchprincipalsoptionconst char principallist, struct sshkeycert cert char result; uint i; / XXX percentexpand sequences for authorizedprincipals? / for i = 0; i nprincipals; i++ if result = matchlistcert-principals...

CVE-2026-71204-PoC

CVE-2026-71204 — changedetection.io: Omitted Checkbox in /settings Save Silently Disables API Key Enforcement Product: dgtlmoon/changedetection.io — v0.55.7 Files: changedetectionio/blueprint/settings/init.py, changedetectionio/forms.py CWE: CWE-284 — Improper Access Control CVSS 3.1:...

CVE-2026-20180

Cisco ISE RCE: Advanced Exploitation and Remediation Analysis 📋 Table of Contents 1. Executive Summary 2. Attack Surface Analysis 3. Exploitation Vectors 4. Advanced Evasion Techniques 5. Systemic Impact on Zero Trust Architectures 6. Remediation Strategy 7. Forensic Investigation 8. References 🎯...

BIT-GITLAB-2026-14288 Use of Incorrectly-Resolved Name or Reference in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated to bypass a required merge request approval policy on a protected branch due to improper access...

CVE-2019-13403

CVE-2019-13403 Report: May 2019 Fix: May 2019 Credit: B3Bo1d Description Temenos CWX version 8.9 has an Broken Access Control vulnerability in the module /CWX/Employee/EmployeeEdit2.aspx, leading to the viewing of user information. PoC Before After Reference https://vulners.com/cve/CVE-2019-13403...

CVE-2024-20767-Adobe-ColdFusion

CVE-2024-20767-Adobe-ColdFusion Adobe ColdFusion is a rapid development platform for building and deploying web and mobile applications. CVE-2024-20767 - ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could lead to arbitrary file syst...

Security update for rust-keylime

This update for rust-keylime fixes the following issue: CVE-2026-115905: zip: security control bypass via parser differential between central directory and local headers bsc1287921 CVE-2026-115906: zip: authentication bypass in AES encrypted entries due to improper HMAC verification bsc1287921...

Security update for rust-keylime

This update for rust-keylime fixes the following issue: CVE-2026-115905: zip: security control bypass via parser differential between central directory and local headers bsc1287921 CVE-2026-115906: zip: authentication bypass in AES encrypted entries due to improper HMAC verification bsc1287921...

CVE-2021-41773-i-

CVE-2021-41773 CVE-2021-41773 POC with Docker Configuration To customize the httpd.conf file, change line 251 in the section from Require all denied to Require all granted. AllowOverride none Require all granted Create a Dockerfile in your project FROM httpd:2.4.49 COPY ./httpd.conf...

CVE-2017-14980

CVE-2017-14980 Sync Breeze Enterprise 10.0.28 - Buffer Overflow Research Objective Study of a classic stack-based buffer overflow vulnerability in a controlled lab environment for educational purposes. The objective of this project was to better understand: Application fuzzing Crash analysis EIP...

CVE-2023-1281

CVE-2023-1281 Use After Free vulnerability in Linux kernel traffic control index filter tcindex...

HARDE

HARDE: Optimizing Agent Harnesses for Runtime Risk Detection and Execution Control Code release for HARDE: Optimizing Agent Harnesses for Runtime Risk Detection and Execution Control. The repository contains two complementary entry-point families: domains/: the Meta-Harness baseline and the two...

CVE-2023-49982

CVE-2023-49982 School Fees Management System v1.0 - Incorrect Access Control - Privilege Escalation Description : Broken access control in School Fees Management System v1.0 allows attackers to escalate privileges and perform Administrative actions, including adding and deleting user accounts...

pedit-cow

CVE-2026-46331 is a Linux kernel privilege escalation vulnerability involving the traffic control subsystem and page cache corruption. Requirements: Linux x8664 GCC iproute2 tc Vulnerable kernel Exploitation Flow: SUID Enumeration ↓ Target Selection ↓ ELF Analysis ↓ tc / Netlink / pedit ↓ Page...

CVE-2023-49070

ofbiz-xmlrpc-rce CVE-2023-49070 PoC for the Apache OFBiz XML-RPC pre-auth deserialization RCE tracked as CVE-2023-49070: an authentication-bypass path unlocks the legacy /webtools/control/xmlrpc endpoint, which deserializes an attacker- controlled Java object smuggled inside an XML-RPC parameter...

CVE-2026-99110

A flaw was found in the Linux kernel's Common Internet File System CIFS client. When converting a POSIX Access Control List ACL to the network wire format, the kernel verifies the ACL against an extended attribute size calculation instead of the larger network format size, leading to a heap-based...