CVE-2022-22063

CVE-2022-22063 CVE-2022-22063 es un problema de seguridad en el firmware del hipervisor de algunos conjuntos de chips antiguos de Qualcomm. Un componente de hardware desprotegido el "boot remapper" puede ser abusado para obtener acceso completo de lectura/escritura al hipervisor desde un sistema...

Sync_Breeze_Enterprise_10_6_24_-DOS

SyncBreezeEnterprise10624-DOS root@kitploit: Exploit Title: Sync Breeze Enterprise 10.6.24 - Denial Of Service Vulnerability Date: 03-09-2018 Exploit Author: Ege Balcı Vendor Homepage: http://www.syncbreeze.com Software Link: http://www.syncbreeze.com/setups/syncbreezeentsetupv10.6.24.exe Version...

CVE-2026-88939

knowns through 0.33.0 unconditionally exempts the project.set action from permission guard checks, allowing read-only agent sessions to bypass restrictions. An attacker with a read-only session can invoke project.set to repoint the server at another project directory, thereby obtaining write acce...

EUVD-2026-75582

knowns through 0.33.0 exempts the project.set action from permission guard checks unconditionally, allowing read-only agent sessions to bypass restrictions. Attackers can invoke project.set to repoint the server at another project directory and obtain write access capabilities...

CVE-2026-88939 knowns through 0.33.0 Authorization Bypass via project.set Bootstrap Exemption

knowns through 0.33.0 exempts the project.set action from permission guard checks unconditionally, allowing read-only agent sessions to bypass restrictions. Attackers can invoke project.set to repoint the server at another project directory and obtain write access capabilities...

CVE-2026-88939 knowns through 0.33.0 Authorization Bypass via project.set Bootstrap Exemption

knowns through 0.33.0 exempts the project.set action from permission guard checks unconditionally, allowing read-only agent sessions to bypass restrictions. Attackers can invoke project.set to repoint the server at another project directory and obtain write access capabilities...

EUVD-2026-75181

Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions...

CVE-2021-25741

About It's exploit for CVE-2021-25741 vulnerability. This vulnerability allows to mount Node filesystem inside of new POD with read-write privileges. You can read more about the vulnerability here: https://security.googleblog.com/2021/12/exploring-container-security-storage.html I'm not author of...

CVE-2026-87994 Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 until 0.11.1, the channel branch of chatcompletion in backend/openwebui/main.py checked channel write access and channel membership for a supplied messageid but did not verify that the calling user...

CVE-2026-50181

CVE-2026-50181 Recorrido de directorios en las herramientas de archivo de Langroid permitía lectura/escritura fuera del directorio actual configurado. Aviso principal: GHSA-fg23-3346-88f5 Base de datos de avisos de GitHub: github.com/advisories/GHSA-fg23-3346-88f5 Crédito al investigador:...

CVE-2022-22948

CVE-2022-22948 Information Disclosure in VMWare vCenter Pentera’s research group discovered a vulnerability in VMWare’s vCenter Server program affecting VMWare’s software installed in 500,000 organizations worldwide responsible to manage their most critical systems Our findings were proactively...

CVE-2017-7494_IT19115344

CVE-2017-7494IT19115344 Se encontró una falla de ejecución remota de código en Samba. Un cliente samba autenticado malicioso, con acceso de escritura al recurso compartido de samba, podría usar esta falla para ejecutar código arbitrario como root...

PT-2026-89174

Summary The chat-completions endpoint reads a folder id out of the request body and saves the newly created chat into that folder without checking that the caller is allowed to write there. Any authenticated user who knows a folder's id can put a chat of their own into another user's folder,...

CVE-2026-82068

A security issue in MongoDB Server allows an authenticated user with w...

CVE-2026-81997

Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victi...

EUVD-2026-74206

Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victi...

CVE-2026-81997

Acrobat Reader is affected by an Incorrect Authorization vulnerability (CWE-863) that can result in a security feature bypass , allowing an attacker to gain unauthorized write access . Exploitation requires user interaction — a victim must open a malicious file — and the attack vector is local wi...

CVE-2026-81997 Acrobat Reader | Incorrect Authorization (CWE-863)

Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victi...

CVE-2026-75726

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue require...

EUVD-2026-74145

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue require...