2766 matches found
CVE-2026-84653
A flaw was found in Jenkins. An attacker with Overall/Manage permission can exploit incorrect permission checks in the Appearance configuration page. This allows them to modify configuration options they should not have access to, potentially leading to unauthorized changes within the Jenkins...
CVE-2015-1328
CVE-2015-1328 Proof of Concept A Proof of Concept PoC exploit for CVE-2015-1328, a privilege escalation vulnerability affecting the Linux kernel's overlayfs implementation. This vulnerability allows local unprivileged users to gain root access by exploiting improper permission checks in overlayfs...
CVE-2026-56724
The web-based open source helpdesk system Zammad is vulnerable to a permission check flaw in the knowledge base management area prior to version 7.0.2 . Due to incomplete data validation for linked items, users with limited read permissions could potentially interact with items outside their assi...
velociraptor_CVE-2025-6264_PoC
CVE-2025-6264 DESCARGO DE RESPONSABILIDAD: Este es un proyecto de investigación educativa. Yo no descubrí esta vulnerabilidad. Este repositorio demuestra CVE-2025-6264 con fines de aprendizaje Versiones afectadas anteriores a 0.74.3 Afecta a Windows, MacOS y Linux Al artefacto...
CVE-2026-88619
The 1024-lab SmartAdmin v3.30.0 software contains a missing authorization vulnerability within the scheduled-job management module . Specifically, the AdminSmartJobController fails to implement method-level permission checks on scheduled-job management endpoints. This oversight allows a low-privi...
Astra Linux – Vulnerability in Zabbix
The request to LDAP is sent before checking the user permissions...
Astra Linux – Vulnerability in Linux, Linux-6.1
Local privilege escalation vulnerability in Ubuntu Kernels overlayfs: Ovlcopyupmeta inodedata function skips permission checks when calling ohldosetxattr on Ubuntu kernels...
Astra Linux – Vulnerability in Linux
In the rbd block device driver located in drivers/block/rbd.c within the Linux kernel, up to version 5.8.9, incomplete permission checks were used for accessing rbd devices. This could have been exploited by local attackers to map or unmap rbd block devices, specifically the CID-f44d04e696fe devi...
CVE-2026-87987
An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks by placing environment variable assignments before allowlisted commands. These assignments are excluded from inspection, enabling attacker-controlled environment variables to trigger c...
SUSE CVE-2026-20909
Gitea versions before 1.25.5 have insufficient permission checks when listing tracked time entries...
CVE-2026-86490
In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed overwriting of bundled apps via the app import endpoint...
CVE-2026-86495
In JetBrains YouTrack before 2026.2.18687 missing permission checks allowed creating knowledge base articles in inaccessible projects...
CVE-2026-86495
In JetBrains YouTrack before 2026.2.18687 missing permission checks allowed creating knowledge base articles in inaccessible projects...
CVE-2026-86495
JetBrains YouTrack versions before 2026.2.18687 are affected by missing permission checks that allow a low-privileged user to create knowledge base articles in projects they cannot otherwise access. This results in a HIGH integrity impact (CVSS 3.1 score 6.5 MEDIUM , vector AV:N/AC:L/PR:L/UI:N/S:...
CVE-2026-86495
In JetBrains YouTrack before 2026.2.18687 missing permission checks allowed creating knowledge base articles in inaccessible projects...
EUVD-2026-72511
In JetBrains YouTrack before 2026.2.18687 missing permission checks allowed creating knowledge base articles in inaccessible projects...
CVE-2026-86493
JetBrains YouTrack versions before 2026.2.18634 contained improper permission checks that allowed read-only users to create and modify whiteboard cards . This represents an authorization bypass with an integrity impact — a user granted only read access could alter content without being permitted ...
CVE-2026-86493
In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed read-only users to create and modify whiteboard cards...