71052 matches found
CVE-2022-24924
Improper access control vulnerability in LiveWallpaperService CVE-2022-24924SVE-2021-24089 Windows version tested: Windows 10 20H2 Build 19042.1348 64bit Live Wallpaper Version: 3.0.9.0 or earlier There is a LiveWallpaperService that works by default in Samsung laptops, but there was a...
CVE-2026-48908
CVE-2026-48908 — SP Page Builder Unauthenticated RCE SP Page Builder comsppagebuilder for Joomla ≤ 6.6.1 allows unauthenticated attackers to upload arbitrary files and achieve Remote Code Execution. Field| Value ---|--- CVE| CVE-2026-48908 CWE| CWE-284 Improper Access Control Component| SP Page...
CVE-2025-24076
CVE-2025-24076 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability Exploit Overview This script exploits a vulnerability in the Windows Cross Device Service that allows privilege escalation on Windows 11 , Windows Server 2025 , and Windows Server 2022 23H2 Server Core...
windows-smb-vulnerability-framework-cve-2025-33073
Windows SMB Client Vulnerability Research Framework Author: cyberseallll Created: 2025 Overview I developed this research framework to analyze and understand CVE-2025-33073, a critical Windows SMB Client Elevation of Privilege vulnerability. This implementation provides comprehensive tools for...
CVE-2025-65731
CVE-2025-65731 CWE-1191: On-Chip Debug and Test Interface With Improper Access Control UART Root Shell Access on D-Link DIR-605L Hardware F1, Firmware V6.02CN02 Summary A critical hardware security vulnerability has been identified in the D-Link DIR-605L router, Hardware Version F1, Firmware...
CVE-2025-67070-Intelbras-CFTV-MFA-Bypass
Intelbras NVD 9032 R Ftd – Critical Password Reset Vulnerability Discovered by: Theo Cia CVE: CVE-2025-67070 Status: Reported to vendor Date Discovered: November 2025 Impact: Full administrative access via MFA bypass Firmware: V2.800.00IB00C.0.T Build Date: 2022-08-17 Summary A critical...
CVE-2023-23752
Joomla! options Arguments url: Root URL base path of the target Joomla! site, including the HTTP scheme, port, and root folder if necessary. --debug: Optional. If set, the script will print debug information, including the fetched data. --no-color: Optional. If set, disables colored output for...
CVE-2026-119251
A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in WiFiman Desktop for macOS to escalate privileges on the host device...
CVE-2026-36425
CVE-2026-36425 : OPSWAT AppRemover Arbitrary Process Termination A signed OPSWAT kernel driver that kills any process on demand. No admin rights needed, no privilege checks, no questions asked. Point it at an EDR, an antivirus, a PPL-protected process and it dies. Three different kill methods, al...
CVE-2026-119251
An Improper Access Control vulnerability exists in WiFiman Desktop for macOS . A malicious actor with local access and high privileges could exploit this flaw to escalate privileges on the host device. Exploitation details are not provided in the documents.
CVE-2026-119251
A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in WiFiman Desktop for macOS to escalate privileges on the host device...
EUVD-2026-113330
A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in WiFiman Desktop for macOS to escalate privileges on the host device...
CVE-2022-24693
CVE-2022-24693 Description Baicells Nova436Q and Neutrino 430 devices with firmware through QRTB 2.7.8 have hardcoded credentials that are easily discovered, and can be used by remote attackers to authenticate via ssh. The credentials are stored in the firmware, encrypted by the crypt function...
CVE-2023-46501
CVE-2023-46501 - BoltWire v6.03 - Improper Access Control Description In version 6.03 of BoltWire CMS , it is possible to exploit an “Improper Access Control” vulnerability, through the index.php?p=member.admin&action=data parameter, allowing an attacker to view any member's password, including t...
CVE-2024-6782
CVE-2024-6782 Calibre Remote Code Execution CVE-2024-6782 Improper access control in Calibre 6.9.0 7.14.0 allow unauthenticated attackers to achieve remote code execution...
CVE-2026-90867
Improper access control in the Web Admin console of Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could expose administrative functionality to remote authentication attempts...
CVE-2021-24006-Fortimanager-Exploit
CVE-2021-24006 – FortiManager Improper Access Control Exploit PoC PoC Proof of Concept - Educational Use Only Exploit for improper access to SD-WAN Orchestrator in FortiManager, exploiting access control flaw CWE-284. Description The CVE-2021-24006 vulnerability affects FortiManager versions 6.4....
CVE-2026-90867
Progress Software WS_FTP Server on Windows versions prior to 2024.0.7 and 2025.0.4 is susceptible to an Improper Access Control vulnerability (CWE-284) within the Web Admin console . This flaw could allow remote actors to access administrative functionality via remote authentication attempts . Th...
EUVD-2026-113024
Improper access control in the Web Admin console of Progress Software WSFTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could expose administrative functionality to remote authentication attempts...
