CVE-2021-36750

CVE-2021-36749 정보 - Druid 수집 시스템에서 InputSource는 특정 데이터 소스로부터 데이터를 읽는 데 사용됩니다. 그러나 HTTP InputSource는 인증된 사용자가 Druid 서버 프로세스의 권한으로 로컬 파일 시스템과 같이 의도하지 않은 다른 소스의 데이터를 읽을 수 있도록 허용합니다. 사용자가 Druid에 직접 액세스하는 경우 Druid에서 동일한 수준의 액세스를 허용하는 Local InputSource도 제공하므로 이는 권한 상승이 아닙니다. 그러나 사용자가 HTTP InputSource는...

rosenbridge

project:rosenbridge : аппаратные бэкдоры в x86 CPU github.com/xoreaxeaxeax/rosenbridge // domas // @xoreaxeaxeax Обзор project:rosenbridge раскрывает аппаратный бэкдор в некоторых настольных, портативных и встроенных x86-процессорах. Бэкдор позволяет коду кольца 3 пользовательский режим обходить...

CVE-2026-81941

IBM Langflow OSS 1.0.0 through 1.11.5 allows an authenticated non-administrative user could execute arbitrary operating system commands on the server at the privilege level of the application process by constructing a flow with an MCP Tools component configured to use a local stdio subprocess...

CVE-2026-81941

IBM Langflow OSS versions 1.0.0 through 1.11.5 are vulnerable to arbitrary operating system command execution when an authenticated non-administrative user constructs a flow with an MCP Tools component configured to use a local stdio subprocess transport. This bypasses both the LANGFLOW_CUSTOM_CO...

CVE-2025-20029

CVE-2025-20029: F5 BIG-IP 中 TMSH CLI 的命令注入 F5 “tmsh” 受限 CLI 中存在一个命令注入漏洞，该漏洞允许已认证的攻击者利用低权限用户可访问的命令来绕过限制、注入任意命令，并以目标系统上的 “root” 用户身份获得远程代码执行。 厂商披露: 该漏洞的厂商披露与修复方案可在此处找到。 前提条件: 此漏洞需要： 有效的用户凭据 向 iControl REST 组件发送请求的能力和/或执行 tmsh 命令的能力 概念验证: 更多细节及利用过程可在此 PDF 中查看。...

CVE-2026-33391

An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges. An authenticated user with limited privileges can remotely bypass the intended access control of the web management interface and modify the Smart...

EUVD-2026-72788

An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges. An authenticated user with limited privileges can remotely bypass the intended access control of the web management interface and modify the Smart...

cve-2020-13933

cve-2020-13933 cve-2020-13933 Apache Shiro 권한 우회 취약점 이 재현은 매우 간단합니다. 먼저 IDEA+Shiro로 환경을 구축하세요. 참고: https://www.cnblogs.com/ph4nt0mer/p/13535999.html 그런 다음 실행하고, 접속하고, 패킷을 캡처하면 됩니다...

CVE-2026-86417

Affected versions of MISP inconsistently enforced email-address visibility in DashboardsController::listTemplates. The query always fetched User.email, while redaction happened only inside the non-REST rendering branch. As a result, the same authenticated user who saw redacted data in the normal...

YellowKey-Bitlocker-CVE-2026-45585

🛡️ YellowKey-Bitlocker-CVE-2026-45585 - BitLocker 키를 안전하게 복구하세요 📋 이 소프트웨어가 하는 일 YellowKey는 Windows 10 및 Windows 11용 무료 오픈소스 유틸리티입니다. BitLocker 복구 키를 추출하고, 백업하고, 확인할 수 있게 도와줍니다. 암호화된 드라이브에 접근할 수 없게 되었거나 보안 설정을 확인해야 할 때 유용합니다. BitLocker는 Windows에 내장된 암호화 도구입니다. 하드웨어 변경, BIOS 업데이트, 또는 비밀번호 분실 등 문제가...

CVE-2026-84989

ntopng is a web-based network traffic monitoring application. In versions 6.7.0 through 6.7.260717, two REST v2 endpoints that manage ntopng's tag/badge feature — POST /lua/rest/v2/delete/tag/tag.lua and POST /lua/rest/v2/edit/tag/tag.lua — perform no authorization check at all. Any authenticated...

CVE-2026-77124 Nexus Repository 3 - Script Execution Disable Setting Not Enforced

In affected versions of Nexus Repository 3, the script execution endpoint POST /service/rest/v1/script/name/run did not verify whether script execution had been administratively disabled. An account holding script-execution permission could continue to run previously-created scripts even after an...

nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw

A flaw in the Node.js Permission Model allows attackers to bypass --permission restrictions, enabling unauthorized read or write access to files and directories...

EEF-CVE-2026-82732 Declared argument constraints not enforced on AshTypescript typed controller routes

Summary Improper Input Validation vulnerability in ash-project ashtypescript allows a remote attacker to submit argument values outside a declared allowlist or bound on typed-controller routes. AshTypescript.TypedController.RequestHandler in lib/ashtypescript/typedcontroller/requesthandler.ex cal...

CVE-2026-82732 Declared argument constraints not enforced on AshTypescript typed controller routes

Improper Input Validation vulnerability in ash-project ashtypescript allows a remote attacker to submit argument values outside a declared allowlist or bound on typed-controller routes. AshTypescript.TypedController.RequestHandler in lib/ashtypescript/typedcontroller/requesthandler.ex calls...

CVE-2026-55545

Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs WebSocket subscription handlers fail to enforce the privileges required by equivalent REST endpoints. PacketsApi.subscribePackets exposes the packets WebSocket topic without ObjectPrivilegeType.ReadPacket,...

Yamcs Core API has Multiple Missing Function Level Access Control vulnerabilities

Summary Multiple Missing Function Level Access Control vulnerabilities exist in the Yamcs Core API. These vulnerabilities allow any authenticated user, regardless of their assigned roles or privileges e.g., an unprivileged "Guest", to bypass intended access controls. An attacker can exploit these...

CVE-2026-78892

Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a local attacker to bypass system access restrictions via a local program. Chromium security severity: Medium...

CVE-2026-55095

OpenProject is open-source, web-based project management software. In version 17.5.1 and earlier, an authenticated non-admin project member can request the inplace-edit dialog for a raw customfield project attribute. The dialog path resolves the project custom field by its raw identifier without...

CVE-2026-64965

ATutor is vulnerable to Missing Authorization Check on Test and Question Import endpoints. A low-privileged authenticated user e.g. a student enrolled in a course can bypass authorization checks by sending requests directly to the backend import endpoints, allowing the unauthorized import of test...