CVE-2026-55547

CVE-2026-55547 affects Yamcs , a mission control framework, in versions prior to 5.12.8 and 5.13.2 . The root cause is missing SystemPrivilege.ControlAccess authorization checks in three IAM API endpoints (GET /api/roles, GET /api/roles/{name}, GET /api/privileges) within IamApi.java. Any authent...

EUVD-2026-67840

Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs omits SystemPrivilege.ControlAccess checks from IamApi.listRoles, IamApi.getRole, and IamApi.listPrivileges in yamcs-core/src/main/java/org/yamcs/http/api/IamApi.java. Any authenticated account can call GET /api/roles, GET...

CVE-2026-55547 Yamcs: Missing Authorization on Role and Privilege Enumeration Endpoints Allows Any Authenticated User to Disclose Full Security Configuration

Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs omits SystemPrivilege.ControlAccess checks from IamApi.listRoles, IamApi.getRole, and IamApi.listPrivileges in yamcs-core/src/main/java/org/yamcs/http/api/IamApi.java. Any authenticated account can call GET /api/roles, GET...

CVE-2026-55547 Yamcs: Missing Authorization on Role and Privilege Enumeration Endpoints Allows Any Authenticated User to Disclose Full Security Configuration

Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs omits SystemPrivilege.ControlAccess checks from IamApi.listRoles, IamApi.getRole, and IamApi.listPrivileges in yamcs-core/src/main/java/org/yamcs/http/api/IamApi.java. Any authenticated account can call GET /api/roles, GET...

GHSA-962X-CCWF-8X6P Yamcs Core API has Multiple Missing Function Level Access Control vulnerabilities

Summary Multiple Missing Function Level Access Control vulnerabilities exist in the Yamcs Core API. These vulnerabilities allow any authenticated user, regardless of their assigned roles or privileges e.g., an unprivileged "Guest", to bypass intended access controls. An attacker can exploit these...

Yamcs Core API has Multiple Missing Function Level Access Control vulnerabilities

Summary Multiple Missing Function Level Access Control vulnerabilities exist in the Yamcs Core API. These vulnerabilities allow any authenticated user, regardless of their assigned roles or privileges e.g., an unprivileged "Guest", to bypass intended access controls. An attacker can exploit these...

snorby

Snorby github.com/Snorby/snorby github.com/Snorby/snorby/issues github.com/Snorby/snorby/wiki irc.freenode.net snorby Descrizione Snorby è un'applicazione web in Ruby on Rails per il monitoraggio della sicurezza di rete che si interfaccia con i più diffusi sistemi di rilevamento delle intrusioni...

GHSA-3G44-3M7X-CGG2 Yamcs vulnerable to authenticated RCE via StreamSQL aggregate-compiler column-name injection in Yamcs `executeSql`

Overview Yamcs compiles StreamSQL expressions to Java on the fly with the Janino SimpleCompiler no restrictive class-loading policy or expression sandbox. When a StreamSQL aggregate such as sum... is applied to a column, the column's name is interpolated unescaped into the generated Java source...

Yamcs vulnerable to authenticated RCE via StreamSQL aggregate-compiler column-name injection in Yamcs `executeSql`

Overview Yamcs compiles StreamSQL expressions to Java on the fly with the Janino SimpleCompiler no restrictive class-loading policy or expression sandbox. When a StreamSQL aggregate such as sum... is applied to a column, the column's name is interpolated unescaped into the generated Java source...

FHEM-6.0-Local-File-Inclusion-LFI-Vulnerability

FHEM-6.0-Local-File-Inclusion-LFI-Schwachstelle LFI in FHEM 6.0 ermöglicht es einem Angreifer, eine Datei einzubinden, was zur Offenlegung sensibler Informationen führen kann. CVE-2020-19360 https://vulners.com/cve/CVE-2020-19360 PoC Um die Schwachstelle auszunutzen, könnte jemand die Anfrage...

obike

Descrizione del Protocollo oBike BLE/HTTP Questo documento fornisce un'analisi dei protocolli di comunicazione oBike a partire da gennaio 2018. I risultati sono stati presentati alla insomni'hack security conference 2019: slides registrazione nonché all'AREA41 security conference 2018: slides...

arp-dns-spoof

Installazione su distribuzioni Linux basate su Debian Installare Scapy root@kitploit: % sudo apt-get install tcpdump graphviz imagemagick python-gnuplot python-crypto python-pyx % pip install scapy Installare python-NetfilterQueue root@kitploit: % sudo apt-get install build-essential python-dev...

Vikunja vulnerable to Improper Authorization and Authorization Bypass Through User-Controlled Key

Summary A user with only a single self-owned project can permanently destroy the Kanban bucket assignments taskbuckets and task ordering taskpositions of any other project view in the entire instance. The ProjectView.Delete model method runs three SQL statements: the first is properly scoped to...

GHSA-GG93-X632-9CCV Vikunja vulnerable to Improper Authorization and Authorization Bypass Through User-Controlled Key

Summary A user with only a single self-owned project can permanently destroy the Kanban bucket assignments taskbuckets and task ordering taskpositions of any other project view in the entire instance. The ProjectView.Delete model method runs three SQL statements: the first is properly scoped to...

CVE-2024-6366

Per creare un modulo Metasploit per sfruttare la vulnerabilità RCE nel plugin WordPress User Profile Builder precedente alla versione 3.11.8, dobbiamo sfruttare la mancanza di autorizzazione appropriata nella funzionalità di caricamento dei file multimediali. Ecco come creare un tale modulo...

BKScan

BKScan Scanner BlueKeep CVE-2019-0708 que funciona tanto sem autenticação como autenticado ou seja, quando a Autenticação em Nível de Rede NLA está ativada. Requisitos: Um servidor RDP Windows Se o NLA estiver ativado no servidor RDP, um usuário/senha válidos que façam parte do grupo "Usuários de...

CVE-2026-25747

Reproducer für die LevelDB-Deserialisierungsschwachstelle Dieses Projekt demonstriert eine Java-Deserialisierungsschwachstelle im Apache-Camel-LevelDB-Aggregations-Repository, ähnlich zu CVE-2024-23114 die das Cassandra-Aggregations-Repository betraf. Zusammenfassung der Schwachstelle Eigenschaft...

CVE-2026-4484

CVE-2026-4484 Masteriyo LMS = 2.1.6 - Autorizzazione mancante per l'escalation dei privilegi da autenticato Studente+ ad Amministratore 🔴 Panoramica della vulnerabilità CVE-2026-4484 — Escalation dei privilegi autenticata Studente → Amministratore Descrizione: Il plugin Masteriyo LMS per WordPres...

CVE-2026-1492

CVE-2026-1492 User Registration & Membership = 5.1.2 - Escalation dei Privilegi Non Autenticata tramite la Registrazione alla Membership 🔴 Panoramica della Vulnerabilità CVE-2026-1492 — Escalation dei Privilegi Non Autenticata tramite la Registrazione alla Membership Descrizione: Il plugin User...

CVE-2024-54292

CVE-2024-54292 Appsplate = 2.1.3 - Iniezione SQL non autenticata Descrizione Il plugin Appsplate per WordPress è vulnerabile all'iniezione SQL nelle versioni fino alla 2.1.3 inclusa, a causa di un escaping insufficiente sul parametro fornito dall'utente e della mancanza di una preparazione adegua...