CVE-2022-22063

CVE-2022-22063 CVE-2022-22063 es un problema de seguridad en el firmware del hipervisor de algunos conjuntos de chips antiguos de Qualcomm. Un componente de hardware desprotegido el "boot remapper" puede ser abusado para obtener acceso completo de lectura/escritura al hipervisor desde un sistema...

CVE-2026-24055-OAuth-Langfuse

CVE-2026-24055 — Unauthenticated Slack OAuth Install in Langfuse Đồ án môn Bảo mật Web và Ứng dụng — Nhóm 06, lớp NT213.Q21.ANTT 📌 Tóm tắt Dự án tái hiện lại reproduce một lỗ hổng bảo mật thực tế đã được công bố CVE-2026-24055 trên nền tảng Langfuse — một endpoint OAuth cho phép kẻ tấn công chiếm...

CVE-2021-42913

...

WebminRCE-exploit

WebminRCE-exploit CVE-2022-0824, CVE-2022-0829 - File Manger privilege exploit Vulnerable application to test this PoC can be found here as a docker image. Prerequisites: Python3 Requests module Description Vulnerability Improper Access Control to Remote Code Execution Safe users Unpriviledged us...

CVE-2026-21109

CVE-2026-21109 is an improper access control vulnerability in Samsung's Watch Plugin , affecting versions prior to Android Watch 17 . A local attacker with no required privileges can access sensitive information , resulting in low confidentiality impact. The CVSS 4.0 score is 2.1 (LOW) , with an ...

EUVD-2026-74650

Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information...

CVE-2026-21105

An improper access control flaw in Samsung's Collection app on Android 15 (prior to version 1.0.1.14) and Android 16 (prior to version 2.0.02.7) allows local attackers to access sensitive information without requiring privileges or user interaction. The vulnerability is rated CVSS 4.0 5.9 (MEDIUM...

EUVD-2026-74646

Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information...

EUVD-2026-74641

Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity...

CVE-2026-21100

CVE-2026-21100 is an improper access control vulnerability in Samsung's SystemUI component on mobile devices prior to the SMR Sep-2026 Release 1 security update. A local attacker with no privileges and no user interaction can launch arbitrary activity , resulting in a HIGH impact on availability ...

CVE-2026-21099

CVE-2026-21099 is an improper access control vulnerability in SettingsProvider on Samsung mobile devices. A local attacker with no privileges required and no user interaction can access sensitive information on the vulnerable system. The CVSS 4.0 base score is 5.1 (MEDIUM) , reflecting the local ...

EUVD-2026-74640

Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information...

EUVD-2026-74639

Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction...

CVE-2026-21098

CVE-2026-21098 is an improper access control vulnerability in Samsung's Link to Windows feature, affecting versions prior to SMR Sep-2026 Release 1 . A local attacker can establish a connection with the PC without proper user interaction , resulting in high impact on availability as scored by the...

CVE-2021-24006-Fortimanager-Exploit

CVE-2021-24006 – FortiManager Improper Access Control Exploit PoC PoC Proof of Concept - Educational Use Only Exploit for improper access to SD-WAN Orchestrator in FortiManager, exploiting access control flaw CWE-284. Description The CVE-2021-24006 vulnerability affects FortiManager versions 6.4....

CVE-2024-20767-Adobe-ColdFusion

CVE-2024-20767-Adobe-ColdFusion Adobe ColdFusion is a rapid development platform for building and deploying web and mobile applications. CVE-2024-20767 - ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could lead to arbitrary file syst...

CVE-2023-46501

CVE-2023-46501 - BoltWire v6.03 - Improper Access Control Description In version 6.03 of BoltWire CMS , it is possible to exploit an “Improper Access Control” vulnerability, through the index.php?p=member.admin&action=data parameter, allowing an attacker to view any member's password, including t...

CVE-2026-87036

Tanium Comply is affected by an improper access controls vulnerability, rated HIGH (CVSS 8.1) due to network-reachable, low-privilege exploitation causing high integrity and availability impact with no confidentiality loss. Tanium has addressed the issue, with details available via their security...

CVE-2026-87048

Tanium Comply contained an improper access controls vulnerability, rated CVSS 5.4 (Medium) . The vector is network-based with low attack complexity and low privileges required , no user interaction, resulting in low impact to integrity and availability with no confidentiality impact. Tanium has a...

CVE-2026-87073

Tanium Comply is affected by an improper access controls vulnerability, as addressed by Tanium and referenced in advisory TAN-2026-029 . The CVSS 3.1 score is 6.5 (MEDIUM) with the vector AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N , indicating a network-based attack with low complexity and low privilege...