64164 matches found
CVE-2026-50165
alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. An Improper Access Control issue in versions prior to 2.0-M5-2605 allows an organization owner to read system-level configuration secrets through organization/event scoped "single configuratio...
forticlient_ems_cve_2026_35616_poc.py
CVE-2026-35616 - FortiClient EMS API Authentication Bypass Detector ⚠️ CRITICAL SECURITY VULNERABILITY ⚠️ CVSS Score: 9.1 | CWE-284: Improper Access Control FortiClient EMS versions 7.4.5 through 7.4.6 📋 Description This detector identifies whether a FortiClient EMS server is vulnerable to...
CVE-2023-23752
CVE-2023-23752 Joomla Unauthorized Access Vulnerability CVE-2023-23752 Vulnerability Description Joomla is an open-source content management system CMS, written in PHP, supporting multiple database systems such as MySQL, MSSQL, and PostgreSQL. Improper access restrictions lead to unauthorized...
CVE-2022-1442
CVE-2022-1442 WordPress Plugin Metform = 2.1.3 - Control de Acceso Inadecuado que Permite la Divulgación No Autenticada de Información Sensible Descripción Es vulnerable a la divulgación de información sensible debido a un control de acceso inadecuado en el archivo /core/forms/action.php, que pue...
Webmin-CVE-2022-0824-revshell
Webmin-CVE-2022-0824-revshell Vulnerability Description Webmin 1.984 and below - File Manager privilege exploit CVE-2022-0824 and CVE-2022-0829 Less privileged Webmin users who do not have any File Manager module restrictions configured can access files with root privileges, if using the default...
CVE-2026-50165 alf.io has Improper Access Control for Organization Owners that Exposes System Secrets
alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. An Improper Access Control issue in versions prior to 2.0-M5-2605 allows an organization owner to read system-level configuration secrets through organization/event scoped "single configuratio...
CVE-2026-50165
alf.io , an open-source ticket reservation system, contains an Improper Access Control flaw in its organization and event "single configuration" endpoints. These endpoints require only organization or event ownership but accept an arbitrary configuration key, performing a lookup that includes sys...
EUVD-2026-75140
alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. An Improper Access Control issue in versions prior to 2.0-M5-2605 allows an organization owner to read system-level configuration secrets through organization/event scoped "single configuratio...
CVE-2026-50165 alf.io has Improper Access Control for Organization Owners that Exposes System Secrets
alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. An Improper Access Control issue in versions prior to 2.0-M5-2605 allows an organization owner to read system-level configuration secrets through organization/event scoped "single configuratio...
CVE-2022-45451
Introduction System Specs: Windows 10 1809 x64 EN Target: Acronis Home Cyber Protect Acronis Cyber Protect Vulnerability Description The Acronis "ngscan" anti-malware scan driver suffers from incorrect / improper access control placed on the filter communication port. The minifilter driver suppor...
CVE-2026-35616-detector.py
CVE-2026-35616 - FortiClient EMS Vulnerability Detector Description This tool detects if a FortiClient EMS server is vulnerable to CVE-2026-35616 , a critical improper access control vulnerability affecting versions 7.4.5 through 7.4.6. CVSS Score: 9.1 Critical CWE: CWE-284 Improper Access Contro...
CVE-2026-79617
CVE-2026-79617 is an improper access control vulnerability (Incorrect Permission Assignment for Critical Resource) in TÜBİTAK BİLGEM's Pardus LightDM Greeter , affecting versions before 0.4.15 . The flaw allows an attacker with local access and low privileges to exploit incorrectly configured acc...
Vulnerabilities in Adobe ColdFusion
Adobe has identified several vulnerabilities in Adobe ColdFusion. These vulnerabilities include a stored Cross-Site Scripting XSS vulnerability, where an attacker with low privileges can inject malicious scripts into form fields, which are then executed in the user’s browser. There is also a...
CVE-2023-51119
CVE-2023-51119 Improper Access Control on D-Link DIR-605L router Exploitation explanation: Due to an incorrect access control, a takeover can be done over the admin account without any kind of authentication sending a request under special circumstances only needs a legitimate admin to be logged ...
Security Bulletin: Enterprise Content Managemant System Monitor for August 2026 - multiple CVEs
Summary Enterprise Content Management System Monitor is vulnerable to multiple remote code execution and denial of service attacks in third party and open source used in the product for various functions. See full list below. The vulnerabilities have been addressed. Vulnerability Details...
CVE-2026-21109
Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information...
CVE-2026-21098
Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction...
CVE-2026-21100
Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity...