4 matches found
CVE-2026-23896 immich API Key Privilege Escalation vulnerability
immich is a high performance self-hosted photo and video management solution. Prior to version 2.5.0, API keys can escalate their own permissions by calling the update endpoint, allowing a low-privilege API key to grant itself full administrative access to the system. Version 2.5.0 fixes the issu...
EUVD-2014-8265
Malware in sbrugna...
CVE-2020-13554
An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In webvrpcs Run Key Privilege Escalation in installation folder of WebAccess, an attacker can either replace binary or loaded modules to execute code with ...
CVE-2020-13554
Advantech WebAccess/SCADA 9.0.1 contains multiple local privilege escalation flaws stemming from weak permissions and executable/file tampering in the installation directory. The TALOS-2020-1169 analysis describes various vectors, including webvrpcs Run Key registry entry and multiple binaries/ex...