Search Vulnerabilities

D-Link DNS-1550-04 system_mgr.cgi cgi_set_wto access control

D-Link DIR-823G goahead UpdateClientInfo access control

JawherKl node-api-postgres Profile Picture index.js path.extname unrestricted upload

D-Link DIR-816 goahead redirect.asp access control

Improper Access Control in github.com/ctfer-io/monitoring

IBM CICS Transaction Gateway for Multiplatforms Information Disclosure

Systemd: systemd: privilege escalation via improper access control in registermachine d-bus method

NEXULEAN API Key Leak

Winter: Privilege escalation by authenticated backend users

OliveTin Unauthorized Action Output Disclosure via EventStream

Dell Alienware Command Center (AWCC), versions prior to 6

Taskosaur Improper Role Assignment via Parameter Manipulation in User Registration

Parse Server has a protected fields bypass via dot-notation in query and sort

Org.keycloak.services.resources.account: improper access control leading to mfa deletion and account takeover in keycloak account rest api

Open Forms possible to view submission details of other people than intended

Umbraco Affected by Vertical Privilege Escalation via Missing Authorization Checks

django-unicorn affected by component state manipulation via unvalidated attribute access

Parse Server role escalation and CLP bypass via direct `_Join` table write

Parse Server has a protected fields bypass via logical query operators

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability