143 matches found
EUVD-2026-85167
A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the configuration file to be modified by regular users, which may lead to arbitrary script execution with higher privileges...
CVE-2024-34223
PHPとMySQLを使用した人事管理システムプロジェクト フリーソースコード 投稿者: Kha Do 脆弱性 安全でない権限 説明 SourceCodester Human Resource Management System 1.0の/hrm/leaverequest.phpにおける安全でない権限の脆弱性により、攻撃者が休暇申請を承認または拒否できる可能性があります。 影響を受けるコンポーネント パスURL: /hrm/leaverequest.php パラメータ: ?msg= 、?id= 影響 通常ユーザーが休暇申請を自己承認または拒否できるため、許可されていない操作が可能です。 i...
CVE-2024-34221
PHPとMySQLを使用した人事管理システムプロジェクト フリーソースコード 提出者: Kha Do 脆弱性 安全でない権限 説明 SourceCodester Human Resource Management System 1.0の/hrm/controller/ccity.php?positionedit=に安全でない権限の脆弱性が存在し、攻撃者が一般ユーザーには許可されていない機能にアクセスできる可能性があります。 影響を受けるコンポーネント パスURL: /hrm/controller/ccity.php?positionedit= パラメータ: position.php 影響...
GHSA-WJWR-XFP9-R66P Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes
Summary A user who is demoted from admin by an identity provider keeps admin-level read and write access to every user's notes, over any Socket.IO connection that was already open when the demotion happened. Open WebUI caches the user's role on the socket at connection time, and the two SSO...
PT-2026-86920
Lara Dashboard before 1.3.2 authorizes the POST /admin/settings/core-upgrades/upload endpoint with only the settings.edit permission, allowing non-Superadmin administrators to upload and extract arbitrary zip archives over the live application source code. Attackers can upload a malicious archive...
CVE-2026-75166
Insecure Permission vulnerability in MBS-Solutions X-Serie Gateway firmware V60005 allows the low-privileged service user to execute /usr/bin/tcpdump as root without a password. By leveraging the tcpdump -z option, an authenticated attacker can achieve arbitrary command execution...
PT-2026-85681
Insecure Permission vulnerability in MBS-Solutions X-Serie Gateway firmware V6 00 05 allows the low-privileged service user to execute /usr/bin/tcpdump as root without a password. By leveraging the tcpdump -z option, an authenticated attacker can achieve arbitrary command execution...
CVE-2026-75166
Insecure Permission vulnerability in MBS-Solutions X-Serie Gateway firmware V60005 allows the low-privileged service user to execute /usr/bin/tcpdump as root without a password. By leveraging the tcpdump -z option, an authenticated attacker can achieve arbitrary command execution...
CVE-2026-75166
The MBS-Solutions X-Serie Gateway with firmware version V6_00_05 is affected by an Insecure Permission vulnerability. A low-privileged service user can execute the /usr/bin/tcpdump binary as root without a password. By utilizing the tcpdump -z option, an authenticated attacker can achieve arbitra...
EUVD-2026-71447
Insecure Permission vulnerability in MBS-Solutions X-Serie Gateway firmware V60005 allows the low-privileged service user to execute /usr/bin/tcpdump as root without a password. By leveraging the tcpdump -z option, an authenticated attacker can achieve arbitrary command execution...
CVE-2026-75166
Insecure Permission vulnerability in MBS-Solutions X-Serie Gateway firmware V60005 allows the low-privileged service user to execute /usr/bin/tcpdump as root without a password. By leveraging the tcpdump -z option, an authenticated attacker can achieve arbitrary command execution...
PT-2026-82746
Dolibarr before 23.0.4 authorizes REST API document deletion against the wrong permission. Documents::delete in htdocs/api/class/api documents.class.php calls dol check secure access document with the mode argument 'read' when handling DELETE /api/index.php/documents, while the sibling builddoc...
Cerberus FTP Server 安全漏洞
Cerberus FTP Server is a Windows-based FTP server from the American company Cerberus. It supports FTP sessions encrypted using FTPS and SFTP. Versions of Cerberus FTP Server prior to 2026.1 contained security vulnerabilities. These vulnerabilities stemmed from insecure inheritance of permissions,...
CVE-2025-70833
An Authentication Bypass vulnerability in Smanga 3.2.7 allows an unauthenticated attacker to reset the password of any user including the administrator and fully takeover the account by manipulating POST parameters. The issue stems from insecure permission validation in check-power.php...
Smanga 安全漏洞
Smanga is a Docker-based comic streaming reading tool developed by lkw199711. Version 3.2.7 of Smanga has a security vulnerability, which stems from insecure permission verification in the check-power.php script. This vulnerability could allow unverified attackers to reset any user’s password and...
CVE-2025-70833
An Authentication Bypass vulnerability in Smanga 3.2.7 allows an unauthenticated attacker to reset the password of any user including the administrator and fully takeover the account by manipulating POST parameters. The issue stems from insecure permission validation in check-power.php...
CVE-2025-70833
Smanga version 3.2.7 is vulnerable to an Authentication Bypass vulnerability due to insecure permission validation in the check-power.php script. An unauthenticated attacker can manipulate POST parameters to reset the password of any user, including the administrator, leading to a full account ta...
Intel Graphics Software 安全漏洞
Intel Graphics Software is a graphics configuration management tool developed by Intel, a company in the United States. Versions of Intel Graphics Software prior to 25.30.1702.0 contained security vulnerabilities, which were caused by insecure permission inheritance, potentially leading to...
