Dapr Dashboard 0.1.0-0.10.0 - Improper Access Control

Dapr Dashboard 0.1.0 through 0.10.0 is susceptible to improper access control. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2022-38817 info: name: Dapr Dashboard 0.1.0-0.10.0 - Improper Access Control author: For3stCo1d...

Adobe Connect < 12.1.5 - Local File Disclosure

Adobe Connect versions 11.4.5 and earlier, 12.1.5 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not...

WordPress WPQA <5.5 - Improper Access Control

WordPress WPQA plugin before 5.5 is susceptible to improper access control. The plugin lacks authentication in a REST API endpoint. An attacker can potentially discover private questions sent between users on the site. id: CVE-2022-1598 info: name: WordPress WPQA 5.5 - Improper Access Control...

WAVLINK WN530HG4 - Improper Access Control

WAVLINK WN530HG4 M30HG4.V5030.191116 is susceptible to improper access control. It contains a hardcoded encryption/decryption key for its configuration files at /etcro/lighttpd/www/cgi-bin/ExportAllSettings.sh. An attacker can possibly obtain sensitive information, modify data, and/or execute...

RegistrationMagic <= 6.0.7.1 - Privilege Escalation

RegistrationMagic WordPress plugin = 6.0.7.1 contains a privilege escalation caused by improper access control in 'addmenu' via 'rmuserexists' AJAX action, letting unauthenticated attackers manipulate admin menu capabilities, exploit requires subscriber user for further escalation. id:...

VMware vRealize Log Insight - Improper Access Control to RCE

The vRealize Log Insight contains a broken access control vulnerability. An unauthenticated malicious actor can remotely inject code into sensitive files of an impacted appliance which can result in remote code execution. id: CVE-2022-31704 info: name: VMware vRealize Log Insight - Improper Acces...

WAVLINK WN535 G3 - Improper Access Control

WAVLINK WN535 G3 M35G3R.V5030.180927 is susceptible to improper access control. A vulnerability in /cgi-bin/ExportAllSettings.sh allows an attacker to execute arbitrary code via a crafted POST request and thereby possibly obtain sensitive information, modify data, and/or execute unauthorized...

CVE-2023-23752

CVE-2023-23752 Joomla Vulnerabilidade de Acesso Não Autorizado CVE-2023-23752 Descrição da Vulnerabilidade Joomla é um sistema de gerenciamento de conteúdo CMS de código aberto, escrito em PHP, que suporta vários bancos de dados como MySQL, MSSQL e PostgreSQL. Restrições de acesso inadequadas...

TestRail-files.md5-IAC-scanner

TestRail-files.md5-IAC-scanner Il controllo degli accessi improprio in Gurock TestRail versioni Inserire il server nel formato http:\ o https:\ Lo script stamperà la posizione del server/file, il codice di stato se non 500 e qualsiasi parola chiave interessante trovata...

forticlient_ems_cve_2026_35616_poc.py

CVE-2026-35616 - FortiClient EMS API Authentication Bypass Detector ⚠️ KRITISCHE SICHERHEITSLÜCKE ⚠️ CVSS-Score: 9.1 | CWE-284: Unsachgemäße Zugriffskontrolle FortiClient EMS Versionen 7.4.5 bis 7.4.6 📋 Beschreibung Dieser Detektor identifiziert, ob ein FortiClient EMS -Server anfällig für...

CVE-2022-45451

Einführung System-Spezifikationen: Windows 10 1809 x64 EN Ziel: Acronis Home Cyber Protect Acronis Cyber Protect Beschreibung der Schwachstelle Der Anti-Malware-Scanner-Treiber „ngscan" von Acronis leidet unter einer falschen/unsachgemäßen Zugriffskontrolle, die auf den Filter-Kommunikationsport...

CVE-2026-25049

🚨 CVE-2026-25049 – n8n Nicht authentifizierte Einstellungsoffenlegung 📌 Übersicht CVE-ID: CVE-2026-25049 Betroffene Software: n8n Schweregrad: Kritisch Kategorie: Unzureichende Zugriffskontrolle / Informationsoffenlegung Diese Schwachstelle ermöglicht nicht authentifizierten Zugriff auf interne...

CVE-2026-48908

CVE-2026-48908 — SP Page Builder RCE non authentifié SP Page Builder comsppagebuilder pour Joomla ≤ 6.6.1 permet à des attaquants non authentifiés de téléverser des fichiers arbitraires et d'obtenir une exécution de code à distance. Champ| Valeur ---|--- CVE| CVE-2026-48908 CWE| CWE-284 Contrôle...

CVE-2026-21962

🚨 CVE-2026-21962 - Vulnerabilidade Crítica de Bypass de Autenticação 🧾 Resumo 🔥 Uma vulnerabilidade de severidade máxima 10.0 que permite acesso remoto não autenticado a sistemas Oracle middleware. root@kitploit: CVE ID : CVE-2026-21962 Severity : CRITICAL Published : 2026-01-20 Category :...

Blackash-CVE-2025-33073

✨ CVE-2025-33073: Windows SMB RCE 취약점 🚨 🔥 높은 심각도의 인증된 원격 코드 실행 🔥 Windows SMB 클라이언트의 부적절한 접근 제어 CWE-284 🛡️ 주요 정보 요약...

PT-2026-82766

Improper access control to the Synergis Softwire installation folder. This vulnerability affects Streamvault all-in-one appliances SV-100E and SV-300E series and Synergis Softwire installed on Windows servers...

zeroheight-account-verification-bypass-CVE-2025-65925

CVE-2025-65925 — Controllo degli accessi errato in Zeroheight nel flusso di creazione account Data di divulgazione: 2025-06-11 Data di correzione del fornitore secondo il fornitore: 2025-06-13 Data di validazione del ricercatore: 2025-06-26 Scoperto da: Sneden Rebello Riepilogo Un percorso API...

CVE-2023-27350

CVE-2023-27350 Questa vulnerabilità consente a un utente malintenzionato remoto di aggirare l'autenticazione su installazioni affette di PaperCut NG 22.0.5 Build 63914. Non è richiesta autenticazione per sfruttare questa vulnerabilità. Il difetto specifico risiede nella classe SetupCompleted. Il...

Digisol-DG-GR1321-s-Improper-Access-Control-CVE-2024-4231

Digisol-DG-GR1321-s-Controllo-di-Accesso-Improprio-CVE-2024-4231...

CVE-2021-24006-Fortimanager-Exploit

CVE-2021-24006 – FortiManager Improper Access Control Exploit PoC PoC Proof of Concept – Nur für Bildungszwecke Exploit für unbefugten Zugriff auf den SD-WAN Orchestrator in FortiManager, der eine Schwachstelle in der Zugriffskontrolle CWE-284 ausnutzt. Beschreibung Die Schwachstelle CVE-2021-240...