541 matches found
CVE-2026-24306
Improper access control in Azure Front Door AFD allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-24306
Improper access control in Azure Front Door AFD allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-24306 Azure Front Door Elevation of Privilege Vulnerability
...
CVE-2026-24306 Azure Front Door Elevation of Privilege Vulnerability
...
CVE-2026-24306
Azure Front Door (AFD) is identified as the affected product for CVE-2026-24306, described as an improper access control vulnerability that could allow an unauthenticated network attacker to elevate privileges. The connected sources corroborate the high-severity impact (CVSSv3.1: 9.8, Network, no...
Azure Front Door Elevation of Privilege Vulnerability
Improper access control in Azure Front Door AFD allows an unauthorized attacker to elevate privileges over a network...
PT-2026-4312
Name of the Vulnerable Software and Affected Versions Azure Front Door AFD affected versions not specified Description An improper access control issue exists in Azure Front Door AFD. This allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there i...
Microsoft Azure Front Door Access Control Vulnerability
Microsoft Azure Front Door is a cloud content distribution network provided by the American company Microsoft. There is an access control vulnerability in Microsoft Azure Front Door, which stems from improper access control practices. Attackers can exploit this vulnerability to gain higher...
CVE-2023-50124
Flient Smart Door Lock v1.0 is vulnerable to Use of Default Credentials. Due to default credentials on a debug interface, in combination with certain design choices, an attacker can unlock the Flient Smart Door Lock by replacing the fingerprint that is stored on the scanner...
CVE-2022-31269
Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to open a building's doors. This occurs in situations where the CVE-2019-7271 default credentials have been changed...
CVE-2020-12280
iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to open/close a specified garage door/gate via /isg/opendoor.php...
CVE-2020-12681
Missing TLS certificate validation on 3xLogic Infinias eIDC32 devices through 3.4.125 allows an attacker to intercept/control the channel by which door lock policies are applied...
CVE-2019-12393
Anviz access control devices are vulnerable to replay attacks which could allow attackers to intercept and replay open door requests...
CVE-2019-25242
The CVE covers FaceSentry Access Control System version 6.4.8, where a cross-site request forgery (CSRF) vulnerability enables an attacker to perform administrative actions without user consent by persuading an authenticated user to load a crafted page. The vulnerability targets the web interface...
CVE-2018-25130
Beward Intercom 2.3.1 contains a local credential-disclosure vulnerability: usernames and passwords stored in plaintext in BEWARD.INTERCOM.FDB can be read by a local attacker, enabling unauthorized access to IP cameras and door stations. Root cause: credentials stored in an unencrypted database f...
CVE-2018-25130 Beward Intercom 2.3.1 Local Credentials Disclosure via Unencrypted Database
Beward Intercom 2.3.1 contains a credentials disclosure vulnerability that allows local attackers to access plain-text authentication credentials stored in an unencrypted database file. Attackers can read the BEWARD.INTERCOM.FDB file to extract usernames and passwords, enabling unauthorized acces...
Siemens多款产品 安全漏洞
Siemens SIDOOR ATD430W and others are an automatic door drive system from Siemens, Germany. A security vulnerability exists in various Siemens products, which stems from insufficient TCP serial number validation and could lead to a denial-of-service attack. The following products are affected:...
ThreatsDay Bulletin: Wi-Fi Hack, npm Worm, DeFi Theft, Phishing Blasts— and 15 More Stories
Think your Wi-Fi is safe? Your coding tools? Or even your favorite financial apps? This week proves again how hackers, companies, and governments are all locked in a nonstop race to outsmart each other. Here's a quick rundown of the latest cyber stories that show how fast the game keeps changing...
CVE-2025-39466
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Dør dor allows PHP Local File Inclusion.This issue affects Dør: from n/a through = 2.4...
