AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera 安全漏洞

AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera is an indoor smart surveillance device from AZIOT India. A security vulnerability exists in AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera version V1.00.02, which stems from improper access control and could lead to a local attacker...

Grandstream GXP1628 安全漏洞

Grandstream GXP1628 is an IP phone from Grandstream USA. A security vulnerability exists in the Grandstream GXP1628 version 1.0.4.130 and earlier, which stems from improper access control and could lead to unauthorized access...

NanoMQ 安全漏洞

NanoMQ is a lightweight and fast MQTT Broker for IoT edge platforms open sourced by EMQ USA. A security vulnerability exists in NanoMQ version 0.21.10, which stems from improper access control and could allow an attacker to use MQTT wildcards to bypass security restrictions and access sensitive...

CVE-2025-54533

In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via VCS configuration...

CVE-2025-54532

In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via snapshot dependencies...

CVE-2025-54533

In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via VCS configuration...

JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides features such as continuous unit testing, code quality analysis and build issue analysis reports. A security vulnerability exists in JetBrains TeamCity...

JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides features such as continuous unit testing, code quality analysis and build issue analysis reports. A security vulnerability exists in JetBrains TeamCity...

Exploit for Improper Access Control in Fortinet Forticlient

CVE-2024-40586 Windows Coerced Authentication in FortiClient...

CVE-2025-6741

Improper access control in secure message component in Devolutions Server allows an authenticated user to steal unauthorized entries via the secure message entry attachment feature This issue affects the following versions : Devolutions Server 2025.2.2.0 through 2025.2.4.0 Devolutions Server...

Improper Access Control

marshmallow-packages/nova-tiptap is vulnerable to Improper Access Control. The vulnerability is due to missing authentication middleware and lack of file validation on the /nova-tiptap/api/file endpoint, which allows an attacker to upload arbitrary files e.g., PHP scripts or binaries to any...

WordPress Cost Calculator Authorization Issue Vulnerability

WordPress Cost Calculator is a plugin for creating quote or cost estimation forms, which is mainly used to help users calculate prices based on different parameters in real time and generate professional quotes. WordPress Cost Calculator suffers from an authorization issue vulnerability that stem...

WordPress Profiler-What Slowing Down Your WP Missing Authorization Vulnerability

WordPress Profiler-What Slowing Down Your WP is a plugin for checking the speed of your website, mainly used to analyze the impact of plugins on the loading speed of your website. WordPress Profiler-What Slowing Down Your WP suffers from a missing authorization vulnerability that can be exploited...

Gitlab -- vulnerabilities

Gitlab reports: Cross-site scripting issue impacts Kubernetes Proxy in GitLab CE/EE Cross-site scripting issue impacts Kubernetes Proxy in GitLab CE/EE using CDNs Exposure of Sensitive Information to an Unauthorized Actor issue impacts GitLab CE/EE Improper Access Control issue impacts GitLab EE...

WordPress News Kit Elementor Addons Missing Authorization Vulnerability

WordPress News Kit Elementor Addons is a visual page builder plugin designed for WordPress websites, mainly for creating news or blog sites. A lack of authorization vulnerability exists in WordPress News Kit Elementor Addons that stems from improperly configured access control, and no details of...

CVE-2025-6741

Improper access control in secure message component in Devolutions Server allows an authenticated user to steal unauthorized entries via the secure message entry attachment feature This issue affects the following versions : Devolutions Server 2025.2.2.0 through 2025.2.4.0 Devolutions Server...

Improper Access Control

github.com/grafana/grafana is vulnerable to Improper Access Control. The vulnerability is due to insufficient permission checks in the Grafana Alerting DingDing integration, which allows an attacker with Viewer permissions to access or interact with alerting configurations...

Devolutions Server 访问控制错误漏洞

Devolutions Server is an application from Devolutions Canada Inc. It provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server versions 2025.2.4.0 and earlier and 2025.1.11.0 and earlier, which stems from improper access contro...

Oracle MySQL Server Resource Management Error Vulnerability

Oracle MySQL Server is a relational database from Oracle Corporation. A resource management error vulnerability exists in Oracle MySQL Server that stems from improper access control of the DDL component and can be exploited by an attacker to cause a denial of service...

Oracle MySQL Server Resource Management Error Vulnerability (CNVD-2025-17105)

Oracle MySQL Server is a relational database from Oracle Corporation. A resource management error vulnerability exists in Oracle MySQL Server, which stems from improper access control on a multi-protocol network and can be exploited by an attacker to cause a denial of service...