PT-2025-15034

Name of the Vulnerable Software and Affected Versions xujiangfei admintwo version 1.0 Description A vulnerability was found in an unknown functionality of the file /user/home, where the manipulation of the ID argument leads to improper access controls. The attack can be launched remotely...

WordPress plugin RepairBuddy 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress plugin eaSYNC 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

admintwo 安全漏洞

admintwo is an application by xujiangfei personal developer. A security vulnerability exists in admintwo version 1.0, which stems from improper access control...

Tenda FH1202 安全漏洞

The Tenda FH1202 is a wireless router manufactured by Tenda in China. An improper access control vulnerability exists in the Tenda FH1202. The vulnerability stems from improper access control due to the handling of the file /goform/wrlwpsset. An attacker can exploit this vulnerability to launch a...

CVE-2025-3255: Improper Access Control

A vulnerability was found in xujiangfei admintwo 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /user/home. The manipulation of the argument ID leads to improper access controls. The attack can be launched remotely. The exploit has...

WordPress plugin Revive.so 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

BIT-DOLIBARR-2023-4198 Dolibarr ERP CRM (<= 17.0.3) Improper Access Control

Improper Access Control in Dolibarr ERP CRM = v17.0.3 allows an unauthorized authenticated user to read a database table containing customer data...

BIT-DOLIBARR-2022-0731 Improper Access Control (IDOR) in dolibarr/dolibarr

Improper Access Control IDOR in GitHub repository dolibarr/dolibarr prior to 16.0...

CVE-2025-2996

A vulnerability was found in Tenda FH1202 1.2.0.14408 and classified as critical. This issue affects some unknown processing of the file /goform/SysToolDDNS of the component Web Management Interface. The manipulation leads to improper access controls. The attack may be initiated remotely. The...

CVE-2025-2994

A vulnerability, which was classified as critical, was found in Tenda FH1202 1.2.0.14408. This affects an unknown part of the file /goform/qossetting of the component Web Management Interface. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The...

CVE-2025-2995

A vulnerability has been found in Tenda FH1202 1.2.0.14408 and classified as critical. This vulnerability affects unknown code of the file /goform/SysToolChangePwd of the component Web Management Interface. The manipulation leads to improper access controls. The attack can be initiated remotely...

CVE-2025-2992

A vulnerability classified as critical was found in Tenda FH1202 1.2.0.14408. Affected by this vulnerability is an unknown functionality of the file /goform/AdvSetWrlsafeset of the component Web Management Interface. The manipulation leads to improper access controls. The attack can be launched...

CVE-2025-2991

A vulnerability classified as critical has been found in Tenda FH1202 1.2.0.14408. Affected is an unknown function of the file /goform/AdvSetWrlmacfilter of the component Web Management Interface. The manipulation leads to improper access controls. It is possible to launch the attack remotely. Th...

CVE-2025-2989

A vulnerability was found in Tenda FH1202 1.2.0.14408. It has been declared as critical. This vulnerability affects unknown code of the file /goform/AdvSetWrl of the component Web Management Interface. The manipulation leads to improper access controls. The attack can be initiated remotely. The...

Trend Vision One 安全漏洞

Trend Vision One is a comprehensive security platform from Trend Vision, Inc. A security vulnerability exists in Trend Vision One that stems from improper access control and could result in elevated privileges...

Trend Vision One 安全漏洞

Trend Vision One is a comprehensive security platform from Trend Vision, Inc. A security vulnerability exists in Trend Vision One that stems from improper access control and could result in elevated privileges...

Trend Vision One 安全漏洞

Trend Vision One is a comprehensive security platform from Trend Vision, Inc. A security vulnerability exists in Trend Vision One that stems from improper access control and could result in elevated privileges...

CVE-2025-31484: Improper Access Control

conda-forge infrastructure holds common configurations and settings for key pieces of the conda-forge infrastructure. Between 2025-02-10 and 2025-04-01, conda-forge infrastructure used the wrong token for Azure's cf-staging access. This bug meant that any feedstock maintainer could upload a packa...

CVE-2025-31725: Improper Access Control

Jenkins monitor-remote-job Plugin 1.0 stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...