CVE-2022-0441

MasterStudy LMSプラグイン（WordPressプラグイン）バージョン2.7.5以前に、深刻度「critical」に分類される脆弱性が発見されました。この脆弱性は、New Account Handlerコンポーネントの未知の部分に影響を与えます。未知の入力を操作することにより、特権管理の脆弱性が引き起こされます。この脆弱性のCWE定義はCWE-269です。ソフトウェアは、アクターに対して特権を適切に割り当て、変更、追跡、またはチェックしないため、そのアクターに意図しない制御範囲が生じます。影響としては、機密性、完全性、および可用性に影響を与えることが知られています。...

CVE-2026-94048

A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0. This affects the function Save of the file app/Controllers/UserController.php. The manipulation of the argument roleid results in improper privilege management. The attack can be executed remotely. The exploit is...

CVE-2026-94047

A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function importTemplate of the file src/services/templateService.ts of the component Template Import Endpoint. The manipulation leads to improper privilege management. Remote exploitation of...

EUVD-2026-83782

A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0. This affects the function Save of the file app/Controllers/UserController.php. The manipulation of the argument roleid results in improper privilege management. The attack can be executed remotely. The exploit is...

CVE-2026-94048 CodeAstro QR Code Attendance Management System UserController.php save privileges management

A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0. This affects the function Save of the file app/Controllers/UserController.php. The manipulation of the argument roleid results in improper privilege management. The attack can be executed remotely. The exploit is...

CVE-2026-94048

CodeAstro QR Code Attendance Management System 1.0 is affected by an improper privilege management vulnerability in the Save function of app/Controllers/UserController.php. Manipulation of the role_id argument allows a remote, authenticated user with high privileges to escalate access, with a sco...

CVE-2026-94047

samanhappy MCPHub (up to version 1.0.32) is affected by an improper privilege management flaw in the Template Import Endpoint , specifically the importTemplate function within src/services/templateService.ts. The vulnerability is remotely exploitable over the network with low complexity and low p...

EUVD-2026-83781

A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function importTemplate of the file src/services/templateService.ts of the component Template Import Endpoint. The manipulation leads to improper privilege management. Remote exploitation of...

CVE-2026-93968

A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of the file backend/rbac/serializers.py of the component UserSerializer. Executing a manipulation can lead to improper privilege management. The attack can be executed remotely. This patch is called...

CVE-2026-93968 aiyiyi121 SxDevOps UserSerializer serializers.py update privileges management

A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of the file backend/rbac/serializers.py of the component UserSerializer. Executing a manipulation can lead to improper privilege management. The attack can be executed remotely. This patch is called...

EUVD-2026-83704

A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of the file backend/rbac/serializers.py of the component UserSerializer. Executing a manipulation can lead to improper privilege management. The attack can be executed remotely. This patch is called...

CVE-2026-93968

aiyiyi121 SxDevOps versions 1.0 and 1.1 are affected by an improper privilege management vulnerability in the update function of the UserSerializer component (file backend/rbac/serializers.py). A remote attacker with high privileges can manipulate the update function to alter user privileges, res...

CVE-2026-13610

CVE-2026-13610 KiviCare – Clinic & Patient Management System CWE-269 Improper Privilege Management | 攻撃者が選択したスタッフロールでの未認証登録 → 患者PHIの開示 概要 KiviCare – Clinic & Patient Management System WordPressプラグイン（バージョン4.5.1以下）における重大な脆弱性で、未認証の攻撃者 がdoctor （kiviCaredoctor）またはreceptionist...

BOF-pack-1

BOF-pack-1 レッドチームのエンゲージメントに役立つBOFのケアパッケージ GetAppLockerPolicy ドメインのEffective AppLockerPolicyを出力します TokenElevate winlogonのトークンを使用してプロセスを作成しますデフォルトで有効なTcb Privilegeや、その他のwinlogon固有の特権を含みます。SCMを使用せずに管理者コンテキストからSYSTEMへ昇格する別の方法です。 PrivChanger 現在またはリモートのプロセスで複数のトークン特権を無効化・有効化します。...

sudo-cve-2019-14287

sudo の哲学 sudo は、システム管理者が限定された root 権限をユーザーに付与し、 root の操作を記録できるように設計されたプログラムです。基本理念は、可能な限り少ない 権限で、しかもユーザーが自分の作業を完了できるようにすることです。 sudo の入手先 sudo をビルドする前に、 必ず 現在の バージョンであることを確認してください。最新の sudo は、匿名 FTP で ftp.sudo.ws の /pub/sudo/ ディレクトリ、または sudo ウェブサイト、 https://www.sudo.ws/ からいつでも入手できます。 配布物は...

CVE-2026-84089

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-82893

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-84089 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

EUVD-2026-83441

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2026-82893 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management...