5481 matches found
CVE-2024-4875
CVE-2024-4875 HT Mega – Absolute Addons For Elementor = 2.5.2 - Missing Authorization to Options Update Description: The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to unauthorized modification of data|loss of data due to a missing capability check on the...
CVE-2023-26083
CVE-2023-26083 – Mali GPU Kernel Address Leak via Timeline Stream This repository contains a proof-of-concept PoC exploit for CVE-2023-26083 , a vulnerability in the Mali GPU driver Arm Mali GPU Kernel Driver that allows an unprivileged user to leak kernel pointers and sensitive internal...
CVE-2022-35841
CVE-2022-35841 This is only a small writeup with the theory, as this bug was collided on and I never did get around to properly testing this. EnterpriseAppMgmtSvc is an interesting service implementing COM objects. Seems to date from Windows Phone and indeed, most of the COM interfaces implemente...
CVE-2026-0047-poc
CVE-2026-0047: Missing Permission Check in ActivityManagerService Heap of bitmaps stolen from every running app — zero permissions, zero user interaction. A missing enforceCallingOrSelfPermissionDUMP check in ActivityManagerService.dumpBitmapsProto allows any installed app to exfiltrate UI bitmap...
CVE-2023-33477
CVE-2023-33477 Harmonic NSG 9000-6G modulator has an unauthorized download vulnerability in the config.exp configuration file Due to the lack of access permission verification for the "cgi.bin/config.exp" file in this model modulator, any user may request to download a configuration file while...
velociraptor_CVE-2025-6264_PoC
CVE-2025-6264 DISCLAIMER: This is an educational research project. I did not discover this vulnerability. This repository demonstrates CVE-2025-6264 for learning purposes Affected versions before 0.74.3 Affects Windows, MacOS and Linux The Admin.Client.UpdateClientConfig artifact is missing...
CVE-2026-59614
In multiple functions of oemsvcsetup.c, there is a possible way to dump secure cache lines into non-secure memory on warm reset due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitati...
CVE-2026-56909
A vulnerability exists in multiple functions of sswrp_cpm.dtsi where a missing permission check allows non-secure software to modify voltage control registers . This flaw could lead to a local escalation of privilege requiring System execution privileges . No user interaction is required for expl...
nifi-CVE-2026-39816-poc
Apache NiFi CVE-2026-39816 POC Proof-of-concept demonstration for CVE-2026-39816, an EXECUTECODE permission bypass in Apache NiFi 2.8.0 that lets a flow designer who has been deliberately denied code-execution privileges run arbitrary Groovy in the NiFi JVM via the graph bundle's ExecuteGraphQuer...
CVE-2025-4631
🚨 CVE-2025-4631 - Profitori WordPress Plugin Privilege Escalation Exploit 📌 Vulnerability Summary Profitori Plugin versions 2.0.6.0 to 2.1.1.3 is vulnerable to unauthenticated privilege escalation due to a missing capability check in the /wp-json/stocktend/v1/stocktendobject endpoint. This allows...
CVE-2023-47179
CVE-2023-47179 WooODT Lite = 2.4.6 - Missing Authorization to Arbitrary Options Update Subscriber+ Description: The WooODT Lite plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the byconsolewooodtadminfieldssettingfiles function hooked v...
CVE-2026-0092
CVE-2026-0092 In Package Manager, there is a possible device lock controller bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. NVD - CVE-2026-0092 Android...
CVE-2023-33246
CVE-2023-33246 - RocketMQ Remote Code Execution CVE-2023-33246 - Apache RocketMQ config Remote Code Execution Exploit Overview RocketMQ is a distributed messaging and streaming platform. RocketMQ versions 5.1.0 and below are vulnerable to Arbitrary Code Injection. Broker component of RocketMQ is...
CVE-2024-10586
CVE-2024-10586 Debug Tool = 2.2 - Unauthenticated Arbitrary File Creation Description: The Debug Tool plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the dbtpullimage function and missing file type validation in all versions up to, and including,...
CVE-2026-115195
A flaw was found in Mautic. Due to missing permission enforcement in the Stats application programming interface API, internal database tables are accessible by default without proper authorization. An authenticated remote user, even with an account lacking assigned privileges, can query these...
CVE-2026-69002
Incorrect authorization in Samsung framework services due to missing permission checks...
CVE-2026-69002
Incorrect authorization in Samsung framework services due to missing permission checks...
CVE-2026-69002
Incorrect authorization in Samsung framework services due to missing permission checks...
CVE-2026-69002
The SAMSUNG Exynos 1580 is affected by an authorization issue vulnerability due to missing permission checks in Samsung Framework Services . This flaw allows for improper authorization and can potentially lead to privilege escalation . While the specific technical impact is categorized as partial...
