CVE-2026-24420

phpMyFAQ is an open source FAQ web application. Versions 4.0.16 and below allow an authenticated user without the dlattachment permission to download FAQ attachments due to a incomprehensive permissions check. The presence of a right key is improperly validated as proof of authorization in...

EUVD-2019-18759

Malware in sbrugna...

Authentication Bypass

zoneminder is vulnerable to Authentication Bypass. The vulnerability exists due to the improper permissions check on the snapshot action, which trigger ends up calling shellexec using the supplied Id, allowing an attacker to bypass the authorization mechanism by injecting and executing malicious...

PT-2023-13543

Name of the Vulnerable Software and Affected Versions GitLab versions 15.5 through 15.7.7 GitLab versions 15.8 through 15.8.3 GitLab versions 15.9 through 15.9.1 Description An issue has been discovered in GitLab due to improper permissions checks, allowing an unauthorized user to read, add, or...

CVE-2021-25768: Undefined Security Weakness

In JetBrains YouTrack before 2020.4.4701, permissions for attachments actions were checked improperly...

Privilege escalation

In LockPatternUtils, there is a possible escalation of privilege due to an improper permissions check. This could lead to local bypass of the Lockguard with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID:...