277529 matches found
CVE-2025-14260: WSO2: Due to the improper implementation of access control rules, the WSO2 product accepts user-supplied input related to…
Due to the improper implementation of access control rules, the WSO2 product accepts user-supplied input related to resource location without enforcing expected validation constraints. This can be exploited by an unauthenticated actor to direct the server to make requests to arbitrary network...
Linux Distros Unpatched Vulnerability : CVE-2026-99192
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: bcmgenet: unshare the skb before writing the control block bcmgenet stores firstcb, lastcb and bytessent in the skb control block and reads them back on...
Linux Distros Unpatched Vulnerability : CVE-2026-118318
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper access control in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory via a crafted HTML page. Chromium security...
CVE-2013-20008: Linksys WAG200G: Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the…
Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administrator password without supplying the current password. Attackers with access to an authenticated administrator browser session can set a new password to lock out the legitimate...
PT-2026-129130
An access control bypass flaw was found in Samba's vfs ceph rgw module in it's openat function. An authenticated user can bypass access controls to read or overwrite restricted files on shares configured with the experimental vfs ceph rgw module. When a client requests an existing file using...
CVE-2026-50542: Missing Authorization
Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing access-control checks on GET /layout/status/id allow an authenticated user with any privileges to view the status and metadata of any layout, including...
Vulnerability related to permission and access control issues in Amazon AWS SDK for pandas
Versions of the Amazon AWS SDK for pandas prior to 3.16.1 contain a permission and access control vulnerability. This vulnerability stems from the lack of ownership verification for default query results in the Athena module; it may allow remote attackers to read Athena query results from a...
Oracle Application Object Library Code Execution
The vulnerability in the Core component of the Oracle Application Object Library for Oracle E-Business Suite enterprise activity automation is related to flaws in the authentication process. Exploitation of this vulnerability enables a remote attacker to execute arbitrary code and gain full contr...
Azure API Management Developer Portal Access Control Bypass
The vulnerability in the Azure API Management APIM Developer Portal for developers is related to access control flaws. Exploitation of this vulnerability could allow a remote attacker to bypass security restrictions and gain unauthorized access to protected information...
celerystalk
celerystalk celerystalk helps you automate your network scanning/enumeration process with asynchronous jobs aka tasks while retaining full control of which tools you want to run. Interactive Demo: Bug Bounty Mode HackerOne Interactive Demo: Vulnerability Assessment / PenTest Mode Retired...
CVE-2026-118337
Improper access control in Forms in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2026-118318
Improper access control in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory via a crafted HTML page. Chromium security severity: High...
CVE-2026-118318
Improper access control in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory via a crafted HTML page. Chromium security severity: High...
CVE-2026-118318
Improper access control in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory via a crafted HTML page. Chromium security severity: High...
Malware in csec-form-validatorr
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in ccsec-form-validator
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in csec-form-validator
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CVE-2026-118337
Improper access control in Forms in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-118337
A high-severity improper access control vulnerability exists in the Forms component of Google Chrome (prior to version 156.0.8078.73 ). A remote attacker can bypass the web origin policy by tricking a user into visiting a crafted HTML page. This vulnerability is tracked in Chromium and affects va...
