4587 matches found
CVE-2026-90523
A vulnerability was identified in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The affected element is an unknown function of the file travel/src/main/java/com/controller/UsersController.java of the component User Register Endpoint. Such manipulation of...
CVE-2026-90523
CVE-2026-90523 affects the jaychouchannel Tourism-Management-System GitHub project, specifically the User Register Endpoint in UsersController.java. The root cause is improper privilege management arising from manipulation of the UsersEntity argument, allowing a remote, unauthenticated attacker t...
CVE-2026-90523 jaychouchannel Tourism-Management-System User Register Endpoint UsersController.java privileges management
A vulnerability was identified in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The affected element is an unknown function of the file travel/src/main/java/com/controller/UsersController.java of the component User Register Endpoint. Such manipulation of...
CVE-2026-90501
CVE-2026-90501 affects the lenve vhr application (version 1.0-SNAPSHOT ). The vulnerability resides in the HrInfoController.updateHr function within HrMapper.xml , where manipulation of the Password argument leads to improper privilege management (mass assignment privilege escalation, per the ass...
EUVD-2026-76974
A security vulnerability has been detected in lenve vhr 1.0-SNAPSHOT. This issue affects the function HrInfoController.updateHr of the file HrMapper.xml. Such manipulation of the argument Password leads to improper privilege management. The attack may be performed from remote. The exploit has bee...
PT-2026-90860
A vulnerability was identified in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The affected element is an unknown function of the file travel/src/main/java/com/controller/UsersController.java of the component User Register Endpoint. Such manipulation of...
CVE-2026-90487
Xuxueli xxl-job versions up to 3.4.2 are affected by an improper privilege management flaw in the JobGroupController.java file within the xxl-job-admin module. The root cause is a missing authentication check on the loadById endpoint, allowing a remote, low-privilege attacker to access job group ...
CVE-2022-0441
在 WordPress 上的 MasterStudy LMS 插件 2.7.5 及之前版本中发现了一个被归类为严重的漏洞（WordPress 插件）。该漏洞影响组件 New Account Handler 的未知部分。通过对未知输入的操作，导致了权限管理漏洞。该漏洞的 CWE 定义为 CWE-269。软件未能正确地为参与者分配、修改、跟踪或检查权限，从而为该参与者创建了非预期的控制范围。已知其影响涉及机密性、完整性和可用性。 该弱点于 2022 年 3 月 7 日以编号 2667195 披露。公告可在 wpscan.com 获取。自 2022 年 2 月 1 日起，该漏洞被命名为...
CVE-2026-13610
CVE-2026-13610 KiviCare – Clinic & Patient Management System CWE-269 Gestión inadecuada de privilegios | Registro no autenticado con un rol de personal elegido por el atacante → divulgación de PHI del paciente Resumen Vulnerabilidad crítica en el plugin de WordPress KiviCare – Clinic & Patient...
BOF-pack-1
BOF-pack-1 Un paquete de BOFs útiles para ejercicios de red team GetAppLockerPolicy Imprime la Effective AppLockerPolicy para el dominio TokenElevate Crea un proceso con el token de winlogon incluye el privilegio Tcb habilitado por defecto y otros privilegios específicos de winlogon. Forma...
sudo-cve-2019-14287
sudo 的设计理念 Sudo 是一个旨在允许系统管理员向用户授予有限 root 权限并记录 root 活动的程序。其基本理念是：在尽可能少地赋予权限的同时，仍能让用户完成工作。 在哪里找到 sudo 在您尝试构建 sudo 之前， 请 确保您拥有当前版本。最新的 sudo 始终可以通过匿名 ftp 从 ftp.sudo.ws 的 /pub/sudo/ 目录获取，或者从 sudo 网站 https://www.sudo.ws/ 获取。 发行版的名称为 sudo-M.m.tar.gz，其中 M 是主版本号，m 是次版本号。也可能提供 sudo 的 BETA 版本。如果您加入...
PT-2026-90726
A vulnerability was found in Xuxueli xxl-job up to 3.4.2. Affected by this issue is some unknown functionality of the file xxl-job-admin/src/main/java/com/xxl/job/admin/business/controller/JobGroupController.java. The manipulation results in improper privilege management. The attack may be launch...
GSSC-CVE-2022-41923
Solución alternativa para CVE-2022-41923: Vulnerabilidad de Gestión de Privilegios Resumen La vulnerabilidad CVE-2022-41923 encontrada en el complemento Grails Spring Security Core GSSC sin parche puede dar lugar a una gestión de privilegios inadecuada. Este repositorio describe cómo solucionar e...
Security Bulletin: IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions (CVE-2026-87958)
Summary IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions CVE-2026-87958 Vulnerability Details CVEID:CVE-2026-87958 DESCRIPTION: IBM Db2 is vulnerable to a denial of service where a specific...
beyondtrust-cve-2026-1232
🔍 Investigación de Vulnerabilidades Una colección seleccionada de informes detallados de vulnerabilidades que cubren incidentes de seguridad reales en el ecosistema de software. Cada entrada incluye un análisis técnico completo, prueba de concepto, listado de IOCs y guía de remediación. Propósito...
CVE-2026-9055
CVE-2026-9055 — Escalada de Privilegios No Autenticada en el Plugin Amelia Booking Informe de investigación de Sentinel AI Defense. Solo análisis defensivo — no se publica aquí ningún exploit funcional ni PoC para esta vulnerabilidad. Una vulnerabilidad de escalada de privilegios no autenticada e...
CVE-2026-62183
CVE-2026-62183 — Apache Syncope user self-service privilege escalation Improper Privilege Management CWE-269 in Apache Syncope. An authenticated, low-privilege user can grant themselves arbitrary roles and group memberships, external resources, and a new realm through the user self-service API —...
secureCodingDemo
secureCodingDemo 2022年秋季 安全编码 CVE-2019-13272 : Linux 内核权限管理不当漏洞 Georgette Kendall CSEC 302 2022年11月14日，星期一 链接包含在 .txt 文件中...