CVE-2026-100883 Krayin laravel-crm acl.php access control

A flaw has been found in Krayin laravel-crm up to 2.2.5. The affected element is an unknown function of the file packages/Webkul/Admin/src/Config/acl.php. Executing a manipulation can lead to improper access controls. The attack can be launched remotely. The exploit has been published and may be...

CVE-2026-100883

A vulnerability exists in Krayin laravel-crm versions up to 2.2.5 due to a flaw in an unknown function within the file packages/Webkul/Admin/src/Config/acl.php. This flaw allows for improper access controls through remote manipulation. The documents state that an exploit has been published and ma...

CVE-2026-100883 Krayin laravel-crm acl.php access control

A flaw has been found in Krayin laravel-crm up to 2.2.5. The affected element is an unknown function of the file packages/Webkul/Admin/src/Config/acl.php. Executing a manipulation can lead to improper access controls. The attack can be launched remotely. The exploit has been published and may be...

CVE-2026-100883 Krayin laravel-crm acl.php access control

A flaw has been found in Krayin laravel-crm up to 2.2.5. The affected element is an unknown function of the file packages/Webkul/Admin/src/Config/acl.php. Executing a manipulation can lead to improper access controls. The attack can be launched remotely. The exploit has been published and may be...

cve-2019-14326

CVEID : CVE-2019-14326 Nom du ou des produits affectés et versions : Andy toutes les versions jusqu'à 46.11.113 Type de problème : CWE-284 : Contrôle d'accès inapproprié Résumé Andy est un émulateur Android pour Windows et Mac. Lors de nos tests, nous avons trouvé des ports TCP locaux ouverts qui...

CVE-2025-46018-CSC-Pay-Mobile-App-Payment-Authentication-Bypass

CVE-2025-46018 – Обход аутентификации платежей в мобильном приложении CSC Pay Резюме В мобильном приложении CSC Pay версии 2.19.4 была обнаружена уязвимость обхода аутентификации платежей. Она позволяла злоумышленнику инициировать платеж, отключить Bluetooth в определённый момент процесса и...

CVE-2026-100883: Improper Access Control

A flaw has been found in Krayin laravel-crm up to 2.2.5. The affected element is an unknown function of the file packages/Webkul/Admin/src/Config/acl.php. Executing a manipulation can lead to improper access controls. The attack can be launched remotely. The exploit has been published and may be...

CVE-2026-96281: Improper Access Control

On a multi-user system, a user with an active local login session could downgrade a system-wide Flatpak app to an older version by removing the app's remote ref via the unprivileged system-helper RemoveLocalRef method, causing the anti-downgrade check to fail to find a reference date. A malicious...

CVE-2025-67070-Intelbras-CFTV-MFA-Bypass

Intelbras NVD 9032 R Ftd – Vulnérabilité critique de réinitialisation de mot de passe Découvert par : Theo Cia CVE: CVE-2025-67070 Statut : Signalé au fournisseur Date de découverte : Novembre 2025 Impact : Accès administratif complet via contournement de l'authentification multifacteur MFA...

CVE-2021-42562

CVE-2021-42562 : Contrôle d'accès inapproprié dans MITRE Caldera Caldera versions =2.8.1 ne sépare pas correctement les privilèges des utilisateurs, ce qui donne aux utilisateurs non administrateurs la possibilité de lire et de modifier la configuration ou d'autres composants qui ne devraient êtr...

CVE-2026-48908

CVE-2026-48908 — SP Page Builder RCE non authentifié SP Page Builder comsppagebuilder pour Joomla ≤ 6.6.1 permet à des attaquants non authentifiés de téléverser des fichiers arbitraires et d'obtenir une exécution de code à distance. Champ| Valeur ---|--- CVE| CVE-2026-48908 CWE| CWE-284 Contrôle...

CVE-2025-65731

CVE-2025-65731 CWE-1191: Interface de débogage et de test sur puce avec contrôle d'accès inadéquat Accès au shell racine UART sur D-Link DIR-605L Hardware F1, Firmware V6.02CN02 Résumé Une vulnérabilité critique de sécurité matérielle a été identifiée dans le routeur D-Link DIR-605L, Version...

CVE-2023-27350

CVE-2023-27350 Cette vulnérabilité permet à des attaquants distants de contourner l'authentification sur les installations affectées de PaperCut NG 22.0.5 Build 63914. L'authentification n'est pas requise pour exploiter cette vulnérabilité. Le défaut spécifique existe dans la classe SetupComplete...

CVE-2023-23752

Joomla! options Arguments url : URL racine chemin de base du site Joomla! cible, incluant le schéma HTTP, le port et le dossier racine si nécessaire. --debug : Optionnel. Si défini, le script affichera les informations de déboga...

CVE-2026-100621: Improper Access Control

Capgo capgo.app contains an incomplete access-control/content-lock enforcement issue affecting all versions; no patch is available at the time of publication. The enforceencryptedbundletrigger / checkencryptedbundleoninsert content lock in supabase/schemas/prod.sql exempts appversions rows whose...

CVE-2026-63205

In Zammad versions prior to 7.1.2 , a vulnerability exists where users with specific channel admin permissions can access unauthorized attachments. When creating or updating an email signature, the system processes inline images; if an HTML img tag points to an existing attachment, Zammad copies ...

CVE-2026-93363

The @payloadcms/storage-vercel-blob storage adapter for Payload contains an improper access control vulnerability that allows authenticated users to bypass collection-level permissions by accessing the client-upload route directly. Attackers can upload files through the client-upload endpoint...

CVE-2026-93363 Payload CMS storage-vercel-blob Adapter Improper Access Control on Upload Route

The @payloadcms/storage-vercel-blob storage adapter for Payload contains an improper access control vulnerability that allows authenticated users to bypass collection-level permissions by accessing the client-upload route directly. Attackers can upload files through the client-upload endpoint...

CVE-2026-93363 Payload CMS storage-vercel-blob Adapter Improper Access Control on Upload Route

The @payloadcms/storage-vercel-blob storage adapter for Payload contains an improper access control vulnerability that allows authenticated users to bypass collection-level permissions by accessing the client-upload route directly. Attackers can upload files through the client-upload endpoint...

CVE-2026-93363

The @payloadcms/storage-vercel-blob storage adapter for Payload contains an improper access control vulnerability. Authenticated users can bypass collection-level permissions by directly accessing the client-upload route , allowing them to upload files without the required permissions and circumv...