self-service-password

LDAP Tool Box Self Service Password 紹介 Self Service Password は、LDAP ディレクトリ内のパスワードをユーザーが変更できるようにする PHP アプリケーションです。 このアプリケーションは、標準的な LDAPv3 ディレクトリ（OpenLDAP、OpenDS、ApacheDS、Sun Oracle DSEE、Novell など）だけでなく、Active Directory でも使用できます。 次の機能があります: Samba パスワードを変更する Samba モード Active Directory モード...

aws-security-assessment-solution

Self-Service Security Assessment Solutions v2.0 사이버 보안은 여전히 많은 CIO, CISO 및 그들의 고객에게 매우 중요한 주제이자 우려 사항입니다. 이러한 중요한 우려를 해결하기 위해 AWS는 고객이 계정을 보호하는 데 사용해야 하는 핵심 서비스 세트를 개발했습니다. Amazon GuardDuty, AWS Security Hub, AWS Config, 그리고 AWS Well-Architected 리뷰는 고객이 AWS 계정 전반에 걸쳐 강력한 보안 태세를 유지하도록 도와줍니다. 더 많은...

CVE-2026-62183

CVE-2026-62183 — Apache Syncope ユーザーセルフサービス権限昇格 Apache Syncope における不適切な権限管理 CWE-269 。認証済みの低権限ユーザーが、ユーザーセルフサービス API を通じて任意のロール （およびグループメンバーシップ、外部リソース、新しいレルム）を自身に付与できます — 他のすべてのコードパスでは管理エンタイトルメントが必要な操作 — それによりアイデンティティストアの管理者になることができます。 このリポジトリは、この脆弱性の技術リファレンス です:...

CVE-2024-55963

CVE‑2024‑55963 Appsmith RCE PoC CVE‑2024‑55963 の PoC エクスプロイト。脆弱な Appsmith インスタンス上で任意のコマンドを実行したり、リバースシェルを生成します。 自動的に最新のサーバー（ environmentId 機能を持つ）とそれ以前の古い「レガシー」ビルドの両方を処理するため、v1.20 から最後の脆弱なリリース v1.51 までのすべてのバージョンで1つのスクリプトを使用できます。 クイックスタート Run an arbitrary command default is id python3 appsmith-rce.p...

EUVD-2026-90662

Ghost versions before 6.62.0 contain an authentication bypass vulnerability that allows suspended staff users to reactivate their accounts through self-service password reset. Attackers with suspended staff credentials can perform password reset operations to regain active account access and...

CVE-2026-83212

Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM component: Helpdesk/Training. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps - Self Service...

EUVD-2026-79564

Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM component: Helpdesk/Training. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Apps - Self Service...

CVE-2026-83212

Oracle Siebel CRM (component: Siebel Apps – Self Service, Helpdesk/Training) is affected by an easily exploitable vulnerability in supported versions 17.0 through 26.7 . A low-privileged attacker with network access via HTTP can achieve a full takeover of the application, resulting in high impact...

PT-2026-92735

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel Apps - Self Service versions 17.0 through 26.7 Description A flaw in the Helpdesk/Training component allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation can...

aws-security-assessment-solution v3.0.0

Self-Service Security Assessment Solutions v2.0 Cybersecurity remains a very important topic and point of concern for many CIOs, CISOs, and their customers. To meet these important concerns, AWS has developed a primary set of services customers should use to aid in protecting their accounts. Amaz...

CVE-2026-67395

A path traversal vulnerability exists in Sage Employee Self Service’s custom logo functionality due to improper validation of file path parameters. By leveraging directory traversal sequences and their encoded variants, an attacker may bypass directory restrictions and access files outside the...

CVE-2026-67395

A path traversal vulnerability exists in Sage Employee Self Service’s custom logo functionality due to improper validation of file path parameters. By leveraging directory traversal sequences and their encoded variants, an attacker may bypass directory restrictions and access files outside the...

CVE-2026-67395

A path traversal vulnerability exists in Sage Employee Self Service’s custom logo functionality due to improper validation of file path parameters. By leveraging directory traversal sequences and their encoded variants, an attacker may bypass directory restrictions and access files outside the...

CVE-2026-67395

A path traversal vulnerability in Sage Employee Self Service (part of Sage HRMS) arises from improper validation of file path parameters in the custom logo functionality. An unauthenticated remote attacker can leverage directory traversal sequences and their encoded variants to bypass directory r...

CVE-2026-67395: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability exists in Sage Employee Self Service’s custom logo functionality due to improper validation of file path parameters. By leveraging directory traversal sequences and their encoded variants, an attacker may bypass directory restrictions and access files outside the...

PT-2026-84073

A path traversal vulnerability exists in Sage Employee Self Service’s custom logo functionality due to improper validation of file path parameters. By leveraging directory traversal sequences and their encoded variants, an attacker may bypass directory restrictions and access files outside the...

CVE-2026-77142

The frontend company self-service editing feature relies on a template-level visibility flag to hide the edit form for company records a visitor does not own, but the corresponding write operation does not repeat this ownership check on the server side. As a result, a visitor who knows the...

CVE-2026-77133

The extension fails to restrict which frontend usergroups a logged-in user may assign to their own account when the profile edit plugin uses its default field configuration, allowing self-service privilege escalation into arbitrary frontend groups...

CVE-2026-77133 Broken Access Control in extension "femanager" (femanager)

The extension fails to restrict which frontend usergroups a logged-in user may assign to their own account when the profile edit plugin uses its default field configuration, allowing self-service privilege escalation into arbitrary frontend groups...

CVE-2026-77133

CVE-2026-77133 is a broken access control vulnerability in the TYPO3 extension femanager . When the profile edit plugin uses its default field configuration, it fails to restrict which frontend usergroups a logged-in user may assign to their own account, enabling self-service privilege escalation...