PT-2024-2807 · Microsoft · Azure Migrate

Name of the Vulnerable Software and Affected Versions: Azure Migrate affected versions not specified Description: The issue is related to improper authorization in the Azure Migrate service for transferring data from a local environment. Exploitation of this issue may allow a remote attacker to...

CVE-2024-26193: Improper Authorization

Azure Migrate Remote Code Execution Vulnerability...

Improper Authorization

github.com/hashicorp/nomad is vulnerable to Improper Authorization. The vulnerability is due to a lack of proper access controls in the search HTTP API, allowing unauthenticated users or users without the necessary policy to view the names of available CSI plugins...

CVE-2024-3434

A vulnerability classified as critical was found in CP Plus Wi-Fi Camera up to 20240401. Affected by this vulnerability is an unknown functionality of the component User Management. The manipulation leads to improper authorization. The attack can be launched remotely. The exploit has been disclos...

CVE-2023-52539: Improper Authorization

Permission verification vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CP Plus Wi-Fi Camera 安全漏洞

CP Plus Wi-Fi Camera is a wireless security camera from CP Plus. A security vulnerability exists in CP Plus Wi-Fi Camera 20240401 and prior versions, which stems from an improper authorization issue in the User Management component...

CVE-2023-52359: Improper Authorization

Vulnerability of permission verification in some APIs in the ActivityTaskManagerService module. Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2024-3434 CP Plus Wi-Fi Camera User Management improper authorization

A vulnerability classified as critical was found in CP Plus Wi-Fi Camera up to 20240401. Affected by this vulnerability is an unknown functionality of the component User Management. The manipulation leads to improper authorization. The attack can be launched remotely. The exploit has been disclos...

CVE-2024-3434

CVE-2024-3434 affects CP Plus Wi‑Fi Camera (up to 20240401); the vulnerability lies in the User Management component and causes improper authorization. The issue can be exploited remotely; the exploit has been disclosed publicly. Available documents confirm the affected versions and the remote at...

CVE-2024-3434: Improper Authorization

A vulnerability classified as critical was found in CP Plus Wi-Fi Camera up to 20240401. Affected by this vulnerability is an unknown functionality of the component User Management. The manipulation leads to improper authorization. The attack can be launched remotely. The exploit has been disclos...

The vulnerability of distributed data sets orchestrators and open-source accelerators in Kubernetes for applications with intensive data processing, related to improper authorization, allows attackers to gain full privileged access to the entire cluster.

The vulnerability of distributed data sets orchestrators and open-source accelerators in Kubernetes for applications with intensive data processing related to improper authorization. Exploiting this vulnerability can allow attackers to gain full privileged access to the entire cluster...

CVE-2024-30260: Improper Authorization

Undici is an HTTP/1.1 client, written from scratch for Node.js. Undici cleared Authorization and Proxy-Authorization headers for fetch, but did not clear them for undici.request. This vulnerability was patched in versions 5.28.4 and 6.11.1...

CVE-2024-29834 Apache Pulsar: Improper Authorization For Namespace and Topic Management Endpoints

This vulnerability allows authenticated users with produce or consume permissions to perform unauthorized operations on partitioned topics, such as unloading topics and triggering compaction. These management operations should be restricted to users with the tenant admin role or superuser role. A...

CVE-2024-29834 Apache Pulsar: Improper Authorization For Namespace and Topic Management Endpoints

This vulnerability allows authenticated users with produce or consume permissions to perform unauthorized operations on partitioned topics, such as unloading topics and triggering compaction. These management operations should be restricted to users with the tenant admin role or superuser role. A...

CVE-2024-3139

A vulnerability, which was classified as critical, has been found in SourceCodester Computer Laboratory Management System 1.0. Affected by this issue is the function saveusers of the file /classes/Users.php?f=save. The manipulation of the argument id leads to improper authorization. The attack ma...

CVE-2024-3139 SourceCodester Computer Laboratory Management System save_users improper authorization

A vulnerability, which was classified as critical, has been found in SourceCodester Computer Laboratory Management System 1.0. Affected by this issue is the function saveusers of the file /classes/Users.php?f=save. The manipulation of the argument id leads to improper authorization. The attack ma...

CVE-2024-3139

CVE-2024-3139 affects SourceCodester Computer Laboratory Management System 1.0. The vulnerability lies in the save_users function (/classes/Users.php?f=save), where the id argument is used in file path/authorization logic without proper validation, enabling improper authorization. A remote attack...

CVE-2024-3139 SourceCodester Computer Laboratory Management System save_users improper authorization

A vulnerability, which was classified as critical, has been found in SourceCodester Computer Laboratory Management System 1.0. Affected by this issue is the function saveusers of the file /classes/Users.php?f=save. The manipulation of the argument id leads to improper authorization. The attack ma...

PT-2024-24037

Name of the Vulnerable Software and Affected Versions SourceCodester Computer Laboratory Management System version 1.0 Description A critical issue has been found in the function save users of the file /classes/Users.php?f=save, where the manipulation of the argument id leads to improper...

CVE-2024-3139: Improper Authorization

A vulnerability, which was classified as critical, has been found in SourceCodester Computer Laboratory Management System 1.0. Affected by this issue is the function saveusers of the file /classes/Users.php?f=save. The manipulation of the argument id leads to improper authorization. The attack ma...