CVE-2024-13030

A vulnerability was found in D-Link DIR-823G 1.0.2B0520181207. It has been rated as critical. This issue affects the function SetAutoRebootSettings/SetClientInfo/SetDMZSettings/SetFirewallSettings/SetParentsControlInfo/SetQoSSettings/SetVirtualServerSettings of the file /HNAP1/ of the component W...

PT-2025-2003 · D Link · D-Link Dir-816

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB05 R1B011D88210 Description: A critical vulnerability was found in the WiFi Settings Handler component, specifically in an unknown function of the file /goform/form2AdvanceSetup.cgi. The manipulation leads to...

D-Link DIR-823G 安全漏洞

The D-Link DIR-823G is a wireless router that provides network connectivity and management for homes and small offices. The D-Link DIR-823G suffers from an improper access control vulnerability that originates in the Web Management Interface component's SetAutoRebootSettings, SetClientInfo,...

CVE-2024-50945

An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, allowing users to submit reviews without verifying if they have purchased the product...

CVE-2024-50945

An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, allowing users to submit reviews without verifying if they have purchased the product...

CVE-2024-50945

An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, allowing users to submit reviews without verifying if they have purchased the product...

SimplCommerce 安全漏洞

SimplCommerce is SimplCommerce open source a simple, cross-platform, modular e-commerce system built on . A security vulnerability exists in SimplCommerce that stems from improper access control...

PT-2024-28335

Name of the Vulnerable Software and Affected Versions Cpacker MemGPT version 0.3.17 Description The issue is related to incorrect access control in the "/users" endpoint, allowing attackers to access sensitive data. Recommendations For version 0.3.17, consider disabling access to the "/users"...

CVE-2024-50945

CVE-2024-50945 concerns SimplCommerce. A commit (230310c8d7a0408569b292c5a805c459d47a1d8f) exhibits an improper access control in the review submission flow, allowing users to post reviews without confirming product purchase. Affected product: SimplCommerce (review system). Impact stated in sourc...

PYSEC-2024-298

OpenCTI is an open-source cyber threat intelligence platform. Before 6.3.0, general users can access information that can only be accessed by users with access privileges to admin and support information SETTINGSSUPPORT. This is due to inadequate access control for support information...

JetBrains TeamCity Improper Access Control Vulnerability

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity suffers from an improper access...

CVE-2024-56349

In JetBrains TeamCity before 2024.12 improper access control allowed unauthorized users to modify build logs...

CVE-2024-56348

In JetBrains TeamCity before 2024.12 improper access control allowed viewing details of unauthorized agents...

CVE-2024-56348

In JetBrains TeamCity before 2024.12 improper access control allowed viewing details of unauthorized agents...

CVE-2024-56348

In JetBrains TeamCity before 2024.12 improper access control allowed viewing details of unauthorized agents...

CVE-2024-56348

Summary: CVE-2024-56348 affects JetBrains TeamCity versions prior to 2024.12, due to improper access control that allows viewing details of unauthorized agents, potentially exposing confidential agent information. Impact: CVSSv3.1 base score 4.3 (Medium) with confidentiality impact rated Low. Rem...

CVE-2024-56348

In JetBrains TeamCity before 2024.12 improper access control allowed viewing details of unauthorized agents...

Digiteam 安全漏洞

Digiteam is a sales digitization and gamification mobile solution from Digiteam, Inc. A security vulnerability exists in Digiteam version v4.21.0.0 that stems from improper access control in the endpoint /RoleMenuMapping/AddRoleMenu. An attacker can exploit the vulnerability to elevate privileges...

JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity suffers from an improper access...

PT-2024-34466 · Unknown · Simplcommerce

Name of the Vulnerable Software and Affected Versions: SimplCommerce version 230310c8d7a0408569b292c5a805c459d47a1d8f Description: An improper access control issue exists, allowing users to submit reviews without verifying if they have purchased the product. This issue affects the review system,...