Privilege escalation.

IObit Uninstaller IOCTL IUForceDelete.sys IRP_MJ_DEVICE_CONTROL privileges management

• IObit Uninstaller
• Privilege escalation

hulumi before v1.3.2 Privilege Escalation via IAM Policy

• kerberosmansour hulumi
• Privilege escalation

Colorful iGameCenter IOCTL Dispatch WinRing0x64.sys sub_11504 privileges management

• Colorful iGameCenter
• Privilege escalation

LogNet grpc-spring-boot-starter Annotation Processing improper authorization

• LogNet grpc-spring-boot-starter
• Privilege escalation
• Broken access control

sambitraj Student Management System Student Dashboard student_dashboard.php mysqli_query improper authorization

• sambitraj Student Management System
• Privilege escalation
• Broken access control

SiteServer SSCMS Agent Installation Workflow access control

• SiteServer SSCMS
• Privilege escalation
• Broken access control

Really Simple Security < 9.8.0 - Multisite Subsite Admin+ Arbitrary Plugin Installation via rsp_upgrade_install_plugin

• Really Simple Security
• Privilege escalation

Custom User Registration Fields for WooCommerce <= 2.2.3 - Unauthenticated Privilege Escalation via 'afreg_select_user_role' Parameter in Store API Checkout

• Addify Custom User Registration Fields for WooCommerce
• Privilege escalation

Uix UserCenter <= 1.0.3 - Unauthenticated Privilege Escalation

• Uix UserCenter
• Privilege escalation

Simple User Registration <= 6.9 - Unauthenticated Privilege Escalation to Administrator

• MemberHero
• Privilege escalation

Snipe-IT has an Improper Privilege Management issue

• Privilege escalation

<8.6.0 · fixed in 8.6.0

piccolo-admin has a privilege escalation issue - admin to superuser via session-token disclosure in GET /api/tables/sessions/.

• Information disclosure
• Privilege escalation

<1.14.0 · fixed in 1.14.0

User Registration & Membership < 5.2.6 - Authenticated Privilege Escalation via Login Settings

• User Registration & Membership
• Privilege escalation

Ultimate Member 2.6.7 - 2.12.1 - Unauthenticated Privilege Escalation via Role Field on Profile Forms

• Ultimate Member
• Privilege escalation

WatchGuard Dimension Session Hijack via Exposed Session Tokens in Diagnostic Logs

• WatchGuard Dimension
• Information disclosure
• Privilege escalation

Flowintel Organization Administrator Can Reset Full Administrator Password and Escalate Privileges

• flowintel
• Privilege escalation

WordPress FluentCRM Pro plugin <= 3.1.12 - Privilege Escalation vulnerability

• WP Manage Ninja FluentCRM Pro
• Privilege escalation

WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - Privilege Escalation vulnerability

• ACPT (Pro) - Custom Post Types Plugin for WordPress
• Privilege escalation

CMP - Coming Soon & Maintenance < 4.1.18 - Editor+ Privilege Escalation via cmp_ajax_import_settings

• CMP
• Privilege escalation

Arbitrary File Rename Leading to Privilege Escalation in Actions::renameFile() function in Veno File Manager Project 4.4.9 allows an authenticated attacker with 'reanme' permission to take over the s…

• Privilege escalation

An issue in the inviteController.js component in Bluewave Labs Checkmate <=3.3.0 allows remote authenticated administrators to escalate privileges to superadmin via the role parameter to the /api/v1/…

• Privilege escalation

Mang Board WP <= 2.3.7 - Authenticated (Subscriber+) Privilege Escalation to Forged Authentication Cookie

• kitae-park Mang Board WP
• Privilege escalation

Forminator Forms < 1.57.1 - Unauthenticated Multisite Site Creation and Privilege Escalation

• Forminator Forms
• Privilege escalation

Improper privilege management in Google Chrome

• Google Chrome
• Privilege escalation

Improper privilege management in Google Chrome

• Google Chrome
• Privilege escalation

Improper privilege management in Google Chrome

• Google Chrome
• Privilege escalation

Improper privilege management in Google Chrome

• Google Chrome
• Privilege escalation

Improper privilege management in Apple iOS and iPadOS

• Apple iOS and iPadOS
• Privilege escalation

phpMyFAQ privilege escalation: GroupController::updatePermissions lets a GROUP_EDIT admin grant rights they do not hold

• Privilege escalation

<4.1.5 · fixed in 4.1.5

ShopEngine Elementor WooCommerce Builder Addon <= 4.9.4 - Authenticated (Shop Manager+) Privilege Escalation to WXR Import '<wp_option>' Nodes

• roxnor ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widgets
• Privilege escalation

Improper privilege management in Octopus Deploy Codefresh

• Octopus Deploy Codefresh
• Privilege escalation

WordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerability

• Cozmoslabs TranslatePress
• Privilege escalation

WordPress Booking Hub plugin <= 1.3.0 - Privilege Escalation vulnerability

• LiquidThemes Booking Hub
• Privilege escalation

HCL Hive is affected by a broken access control vulnerability

• HCLSoftware HCL Hive
• Privilege escalation

WordPress Jawn theme <= 1.4.2 - Privilege Escalation vulnerability

• MVPThemes Jawn
• Privilege escalation

WordPress Affiliate Pro - Affiliate Program for WooCommerce & WordPress plugin <= 8.9.1 - Privilege Escalation vulnerability

• RedefiningTheWeb Affiliate Pro - Affiliate Program for WooCommerce & WordPress
• Privilege escalation

WordPress Digits plugin <= 9.2 - Privilege Escalation vulnerability

• UnitedOver, LLC Digits
• Privilege escalation

Open5GS AMF UEContextReleaseRequest Path improper authorization

• Open5GS
• Privilege escalation
• Broken access control

A local privilege escalation vulnerability exists in the Restricted Access (Kiosk) Mode implementation of Scheidt & Bachmann entervo HMI prior to V2 R5 P0 M5.

• Privilege escalation

SourceCodester Class and Exam Timetabling System User Account Update edit_user_account.php improper authorization

• SourceCodester Class and Exam Timetabling System
• Privilege escalation
• Broken access control

Content Mask 1.8.0 - 1.8.5.4 - Contributor Publish Capability Bypass via create_new_content_mask

• Content Mask
• Privilege escalation

RestrictMate < 1.3.0 - Unauthenticated Privilege Escalation to Administrator

• RestrictMate
• Privilege escalation

Security Hardener <= 2.4.4 - Authenticated (Subscriber+) Privilege Escalation via REST API '/wp/v2/users' permission_callback Overwrite

• marc4 Security Hardener
• Privilege escalation

Forminator Forms < 1.57.0.7 - Authenticated Privilege Escalation via Registration Form Role Bypass

• Forminator Forms
• Privilege escalation

WPeMatico RSS Feed Fetcher <= 2.8.24 - Authenticated (Subscriber+) Privilege Escalation via Arbitrary Option Update to wpematico_import_settings admin_action

• etruel WPeMatico RSS Feed Fetcher
• Privilege escalation

LeafWiki Vulnerable to Privilege Escalation via User Self-Service Update

• perber leafwiki
• Privilege escalation

Dromara RuoYi-Vue-Plus Workflow Endpoint TestLeaveController improper authorization

• Dromara RuoYi-Vue-Plus
• Privilege escalation
• Broken access control

Dolibarr Account card.php improper authorization

• Dolibarr
• Privilege escalation
• Broken access control

Apache CloudStack: Missing Privilege Check in Two-Factor Authentication Disable Flow

• Apache Software Foundation Apache CloudStack
• Privilege escalation

AI Engine 2.8.0 - 3.6.0 - Admin+ Multisite Network Administrator Account Takeover via MCP User Tools

• AI Engine
• Privilege escalation

Vulnerabilities in IBM AIX and PowerVM VIOS

• IBM AIX
• IBM PowerVM VIOS
• Privilege escalation

Vulnerabilities in IBM AIX and PowerVM VIOS

• IBM AIX
• IBM PowerVM VIOS
• Privilege escalation

Vulnerabilities in IBM AIX and PowerVM VIOS

• IBM AIX
• IBM PowerVM VIOS
• Privilege escalation

Vulnerabilities in IBM AIX and PowerVM VIOS

• IBM AIX
• IBM PowerVM VIOS
• Privilege escalation

Vulnerabilities in IBM AIX and PowerVM VIOS

• IBM AIX
• IBM PowerVM VIOS
• Privilege escalation

Execution with unnecessary privileges in Google Chrome

• Google Chrome
• Privilege escalation

Incorrect privilege assignment in the Amazon aws-athena-query-federation ClickHouse connector deployment template

• AWS Athena Federated Query Clickhouse Connector deployment template
• Privilege escalation

Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution

• Privilege escalation
• Broken access control

<0.37.8 || >=0.38.0, <0.39.6 || >=0.40.0, <0.42.1 || >=0.43.0, <0.48.0 · fixed in 0.37.8, 0.39.6, 0.42.1, 0.48.0

elunez eladmin GenConfigController improper authorization

• elunez eladmin
• Privilege escalation
• Broken access control

SourceCodester CET Automated Grading System with AI Predictive Analytics index.php add_grade improper authorization

• SourceCodester CET Automated Grading System with AI Predictive Analytics
• Privilege escalation
• Broken access control