57 matches found
iam-vulnerable
IAM Vulnerable Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground. IAM Vulnerable uses the Terraform binary and your AWS credentials to deploy over 250 IAM resources into your selected AWS account. Within minutes, you can start learning how to identify a...
CVE-2021-36934
CVE-2021-36934 CVE-2021-36934 PowerShell スクリプト Detection.ps1 これは、マシンが脆弱である可能性があるかを確認するための簡易スクリプトです。BUILTIN\Users がアクセス許可リストで検出されたかどうかを示すメッセージをシェルに出力し、検証のために SAM パスに対する現在のアクセス許可も表示します。 システムに影響がない、または修復が完了している場合、以下のような出力が表示されます。 SCCM-Detection.ps1 これは、SCCM 構成項目で使用する基本的な PowerShell スクリプトです。クライアントがこの...
CVE-2020-14066
Icewarp Email Server 12.3.0.1 insecurepermissions https://nvd.nist.gov/vuln/detail/CVE-2020-14066...
EUVD-2026-76737
The administrative password is hashed using a comparatively weak, fast algorithm for the credential store backing one authentication path, and the file containing that hash is written with permissions allowing it to be read by any local user. This is inconsistent with a separate, stronger hashing...
PT-2026-90526
The administrative password is hashed using a comparatively weak, fast algorithm for the credential store backing one authentication path, and the file containing that hash is written with permissions allowing it to be read by any local user. This is inconsistent with a separate, stronger hashing...
CVE-2026-86437
Lara Dashboard before 1.3.2 authorizes the POST /admin/settings/core-upgrades/upload endpoint with only the settings.edit permission, allowing non-Superadmin administrators to upload and extract arbitrary zip archives over the live application source code. Attackers can upload a malicious archive...
EUVD-2026-63112
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the restpropertiesget capability could read encrypted stored credentials through the Representational State Transfer REST API. Successful exploitation can expose relevant data protected by the...
eda-server: ExternalEventStreamViewSet trusts Subject header without validation and leaks expected DN
A flaw was found in the Event-Driven Ansible EDA server. The ExternalEventStreamViewSet uses permissive access controls permissionclasses=AllowAny, authenticationclasses= and relies solely on the Subject HTTP header value for mTLS authentication without verifying that the header originated from a...
EUVD-2026-42795
The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to unauthorized post publication in all versions up to, and including, 3.5.32 due to a misconfigured capability check on the 'getitemspermissioncheck' function permission callback of the...
The vulnerability of Schneider Electric Saitel DR and Schneider Electric EasyLogic T150 management platforms lies in the improper assignment of permissions for critical resources, allowing attackers to gain unauthorized access to protected information.
The vulnerability of Schneider Electric Saitel DR and Schneider Electric EasyLogic T150 management platforms relates to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...
The vulnerability of the PowerProtect Agent Service software in the centralized backup and recovery management system, allowing attackers to expose confidential information.
The vulnerability of the PowerProtect Agent Service, a software component of the centralized backup and recovery management system PowerProtect Data Manager, is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability could allow an attacker to...
Incorrect Authorization
Overview org.apache.activemq:artemis-openwire-protocol is a package for activemq. Affected versions of this package are vulnerable to Incorrect Authorization in the OpenWire protocol when an authenticated user with the createDurableQueue permission but without the createAddress permission attempt...
CVE-2026-30244
Plane (open‑source project management tool) has a vulnerability prior to version 1.2.2 where unauthenticated actors can enumerate workspace members and extract emails, user roles, and internal identifiers due to misconfigured Django REST Framework permissions. The issue has been patched in 1.2.2,...
host-based-vulnerability-assessments
Host-Based Vulnerability Assessments Overview This reposi...
PT-2026-7314
Name of the Vulnerable Software and Affected Versions Intel System Firmware Update Utility SysFwUpdt versions prior to 16.0.12 Description A misconfiguration in permission assignments for critical resources within the System Firmware Update Utility SysFwUpdt for Intel server boards and systems ma...
CVE-2025-10314
Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation FREQSHIP-mini for Windows versions 8.0.0 to 8.0.2 allows a local attacker to execute arbitrary code with system privileges by replacing service executable files EXE or DLLs in the installation directory with specially...
Local privilege escalation due to insecure folder permissions
...
Skipper code issue vulnerabilities
Skipper is an open-source HTTP router and reverse proxy developed by Zalando SE for service combinations. Versions of Skipper prior to 0.24.0 had code vulnerabilities due to improper permission configuration, which could allow users to create routes to access internal services...
WorkDo HRM SaaS HR and Payroll Tool 安全漏洞
WorkDo HRM SaaS HR and Payroll Tool is a human resource management software from WorkDo, Inc. A security vulnerability exists in WorkDo HRM SaaS HR and Payroll Tool version 8.1, which stems from improperly set permissions and could result in an authenticated user creating leave or resignation...