146654 matches found
PT-2026-107300
Name of the Vulnerable Software and Affected Versions Backstage versions prior to 3.3.1 Backstage versions prior to 3.4.1 Backstage versions prior to 4.0.3 Backstage versions prior to 4.1.0 Description The @backstage/plugin-scaffolder-backend package contains an authorization bypass regarding...
PT-2026-107266
Name of the Vulnerable Software and Affected Versions @backstage/plugin-catalog-backend-module-gitlab versions prior to 0.8.7 Description Improper authorization exists during GitLab organizational user ingestion. Deployments that enable GitLab organization event ingestion and use scoped catalog...
CVE-2026-63691: Missing Authorization
Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authorization vulnerability in the Dell CSI Driver for PowerMax - csireverseproxy . An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Unauthorized access...
The vulnerability of Visual Studio Code’s source editor, related to the use of a name with an incorrect reference, allows attackers to gain unauthorized access to protected information.
The vulnerability of Visual Studio Code’s source editor is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker, working remotely, to gain unauthorized access to protected information...
ROS-20261006-73-0196
The vulnerability of the ksmbd component in the Linux operating system’s kernel is related to deficiencies in error handling. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...
CVE-2026-63688: Missing Authentication for Critical Function
Dell Container Storage Modules CSM, versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to...
Authentication & Authorization Header Spoofing Bypasses Brocade Fabric OS SANnav-Internal REST API Gate
: An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. The internal gate guarding restricted management endpoints relies exclusively on client-controlled HTTP headers. An authenticated user with any valid REST session can spoof these header...
cve-2020-25540
ThinkAdmin 비인가 디렉터리 목록/임의 파일 읽기 cve-2020-25540 사용 방법 python3 cve-2020-25540.py url...
CVE-2021-43471
CVE-2021-43471 Canon 프린터에 대한 무단 접근으로 인한 서비스 거부 취약점 영향 제품: LBP223 시간: 2021.11.3 시스템 관리자 모드 로그인에는 계정 비밀번호나 PIN이 필요하지 않습니다. 공격자는 백그라운드에 진입한 후 원격으로 장치를 종료하여 서비스 거부 취약점을 발생시킬 수 있습니다...
CVE-2023-43317
CVE-2023-43317 일반 사용자가 Session Storage 구성 요소의 userPermissionsList 매개변수를 통해 권한을 상승시켜 관리자 수준의 리소스 및 기능에 무단 접근할 수 있습니다. 이로 인해 일반적으로 관리자에게만 제한되는 무단 데이터 접근, 데이터 수정 및 기타 작업이 발생할 수 있습니다. 취약한 제품:- Coign Card 취약한 버전:- 06.06 참조:- https://nvd.nist.gov/vuln/detail/CVE-2023-43317 재현 단계 1. 일반 사용자 계정으로 로그인합니다. ...
CVE-2026-0461
Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade DFU download requests to overflow the DDR receive buffer into FSBL memory, potentially resulting in unauthorized code execution durin...
CVE-2025-36911-exploit
WhisperPair Python CLI 当社の機器をテストするための、Python製Fast Pair CVE-2025-36911 Exploit Tool 著者: Sébastien Dudek @FlUxIuS @ Penthertz クレジット: whisperpair.eu による発見と、実装時間を短縮してくれた @ZalexDev の素晴らしいAPK wpair-app ⚠️ 免責事項 許可されたセキュリティ研究のみを対象としています。 自分が所有するデバイスのみでテストしてください。 🐛 脆弱性 CVE-2025-36911...
CVE-2026-0461
The AMD Zynq™ UltraScale+ MPSoC and RFSoC devices are vulnerable to a buffer overflow due to insufficient boundary validation in the USB boot mode implementation. An attacker could send unbounded Device Firmware Upgrade (DFU) download requests, causing the DDR receive buffer to overflow into FSBL...
CVE-2026-0461
Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade DFU download requests to overflow the DDR receive buffer into FSBL memory, potentially resulting in unauthorized code execution durin...
CVE-2026-71299
A flaw was found in Maestro. Its REST API write endpoints were registered without proper authentication middleware. This allows a remote attacker to perform unauthorized write operations, such as creating, modifying, or deleting consumers and resource bundles. This could lead to data integrity...
CVE-2026-105681
Ghost is a Node.js content management system. From 5.9.0 until 6.44.1, an input validation issue allowed members to access comments they were not authorized to access. This issue is fixed in version 6.44.1...
EUVD-2026-92711
A flaw was found in the maestro gRPC broker. This vulnerability allows a remote attacker, with a valid client certificate, to bypass authentication. This bypass enables the attacker to subscribe to other consumers' event streams, leading to unauthorized information disclosure, or to publish forge...
EUVD-2026-92710
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the delete-share-link RPC retrieves a caller-selected share-link ID and verifies only that the caller can edit the parent file. It does not verify that the caller created the share link or has owner or administrator...
CVE-2018-9995-rs
概要 このリポジトリには、CVE-2018-9995を対象としたRustで実装された概念実証（PoC）エクスプロイトが含まれています。このコードは研究および教育目的のみに使用されます。 CVE詳細 識別子: CVE-2018-9995 概要: 脆弱性を示す概念実証エクスプロイト（技術的な詳細は公開アドバイザリを参照）。 必要条件 Rustツールチェーン（安定版） — rustc と cargo。 Linux または Rust がサポートする任意のプラットフォーム。 使用方法 このリポジトリはPoCです。一般的な使用例： cargo run -- IP PORT 例： cargo run ...