Privilege escalation.

BlackBeltTechnology pi-agent-dashboard Terminal terminal-handler.ts terminalManager.spawn improper authorization

• BlackBeltTechnology pi-agent-dashboard
• Privilege escalation
• Broken access control

Yungengxin Yun Jia Security Guard kgameprotect.sys sub_14000885C privileges management

• Yungengxin Yun Jia Security Guard
• Privilege escalation

yangzongzhuan RuoYi authDataScope checkRoleAllowed privileges management

• yangzongzhuan RuoYi
• Privilege escalation

agno-agi agno Delegation Feature _default_tools.py member_agent.run unnecessary privileges

• agno
• Privilege escalation

SEMCMS SEMCMS_User.php user improper authorization

• SEMCMS
• Privilege escalation
• Broken access control

Improper privilege management in Samsung Mobile Devices

• Samsung Mobile Devices
• Privilege escalation

ZKTeco BioTime System Settings API systemSettings access control

• ZKTeco BioTime
• Privilege escalation
• Broken access control

BerriAI LiteLLM Secret Resolution main.py get_secret improper authorization

• BerriAI LiteLLM
• Privilege escalation
• Broken access control

Crowdfundly <= 2.2.2 - Crowdfundly Manager+ Privilege Escalation

• Crowdfundly
• Privilege escalation

AI Content Generator Marketing <= 1.0.0 - Unauthenticated Privilege Escalation via Arbitrary Option Update and Deletion

• AI Content Generator Marketing
• Privilege escalation

Envira Gallery < 1.16.2 - Multisite Subsite Admin+ Arbitrary Plugin Installation via Onboarding Wizard

• Envira Gallery
• Privilege escalation

Mobile builder <= 1.4.2 - Subscriber+ Privilege Escalation to Admin

• Mobile builder
• Privilege escalation

WordPress Tonda Membership plugin <= 1.0.1 - Privilege Escalation vulnerability

• Select-Themes Tonda Membership
• Privilege escalation

WordPress AIWU plugin <= 1.5.9 - Privilege Escalation vulnerability

• Sergey AIWU
• Privilege escalation

WordPress miniorange otp verification plugin <= 5.5.7 - Privilege Escalation vulnerability

• miniorange otp verification
• Privilege escalation

WordPress Forminator plugin <= 1.57.3 - Privilege Escalation vulnerability

• WPMU DEV Forminator
• Privilege escalation

WordPress WooCommerce plugin 9.8.0-11.1.2 - Shop Manager+ Privilege Escalation vulnerability

• Automattic WooCommerce
• Privilege escalation

Unauthorized access vulnerability in ZTE Z80 Ultra product

• ZTE Z80 Ultra
• Privilege escalation

Information disclosure vulnerability in ZTE Z80 Ultra product

• ZTE Z80 Ultra
• Privilege escalation

Unauthorized information retrieval vulnerability in ZTE Z80 Ultra product

• ZTE Z80 Ultra
• Privilege escalation

Information disclosure vulnerability in ZTE Z80 Ultra product

• ZTE Z80 Ultra
• Privilege escalation

SMS Alert 3.9.6 - 4.0.2 - Unauthenticated Privilege Escalation via Arbitrary Password Reset

• SMS Alert
• Privilege escalation

Groundhogg <= 4.8.3 - Unauthenticated Privilege Escalation to Support User Identity Confusion

• trainingbusinesspros Groundhogg — CRM, Newsletters, and Marketing Automation
• Privilege escalation

FooSales <= 1.43.0 - Authenticated (Custom+) Privilege Escalation via create_update_customer REST Endpoint

• FooSales – Point of Sale (POS) for WooCommerce
• Privilege escalation

Groundhogg <= 4.9 - Authenticated (Custom+) Privilege Escalation to 'user' Parameter

• trainingbusinesspros Groundhogg — CRM, Newsletters, and Marketing Automation
• Privilege escalation

Appointment Booking Plugin <= 5.7.3 - Authenticated (Custom+) Privilege Escalation to 'settings[default_wp_role_for_customer]' Parameter

• Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress
• Privilege escalation

Unauthorized access vulnerability in ZTE Z80 Ultra product

• ZTE Z80 Ultra
• Privilege escalation

Blocksy Companion <= 2.1.58 - Unauthenticated Privilege Escalation to 'role' Parameter

• creativethemeshq Blocksy Companion
• Privilege escalation

Academy LMS <= 4.0.3 - Authenticated (Custom+) Privilege Escalation to add_child REST endpoint

• kodezen Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning
• Privilege escalation

Vikunja: Explicit lower-permission share on a sub-project is silently overridden by an inherited parent permission (broken access control / privilege-management regression in v2.6.0)

• Privilege escalation
• Broken access control

>=2.6.0, <2.7.0 · fixed in 2.7.0

Vikunja: Scoped API token can mint unrestricted OAuth session credentials

• Privilege escalation

>=2.3.0, <2.4.0 · fixed in 2.4.0

WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability

• Ultimate Member
• Privilege escalation

Redux Framework <= 4.5.11 – Authenticated (Subscriber+) Privilege Escalation via Users Extension

• davidanderson Redux Framework
• Privilege escalation

Privilege Escalation in Telerik Report Server Service-Agent Hub

• Progress Software Telerik Report Server
• Privilege escalation

FooSales < 1.43.3 - Subscriber+ Privilege Escalation via User Impersonation

• FooSales
• Privilege escalation

IBM Guardium Data Protection Privilege Escalation

• IBM Guardium Data Protection
• Privilege escalation

Zimbra Collaboration Suite GrantRightsRequest SOAP Handler Allows Self-Granting of Undocumented loginAs Mailbox Delegation Right

• Zimbra Collaboration Suite
• Privilege escalation

mJobTime 15.7.3.32 Unauthenticated SQL Execution RCE via Login.aspx

• mJobTime
• Privilege escalation
• Authentication bypass

Insights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-reader

• Red Hat OpenShift Container Platform 4.12
• Red Hat OpenShift Container Platform 4.14
• Privilege escalation

Authenticated argument injection in NIOS command line leading to privilege escalation

• Infoblox NIOS
• Command injection
• Privilege escalation

Frontend Dashboard 3.0.0 - 3.0.4 - Unauthenticated Privilege Escalation via Arbitrary Function Call

• Frontend Dashboard
• Privilege escalation

Improper privilege management in Brocade Fabric OS

• Brocade Fabric OS
• Privilege escalation

Improper privilege management in Brocade Fabric OS

• Brocade Fabric OS
• Privilege escalation

Local Privilege Escalation through Linux Package Upgrades in Splunk Enterprise

• Splunk Enterprise
• Privilege escalation

Ghost: Editors Could Promote Staff Users to Their Own Role

• Privilege escalation
• Broken access control

>=0.5.0, <6.64.0 · fixed in 6.64.0

Cluster-samples-operator: role reads all secrets in openshift-config, not just pull-secret

• Red Hat OpenShift Container Platform 4.19
• Red Hat OpenShift Container Platform 4.20
• Privilege escalation

Backstage: Improper preservation of access restrictions during service credential delegation

• Privilege escalation
• Broken access control

<0.17.8 · fixed in 0.17.8

wger: Trainer Privilege Escalation - Improper Privilege Management

• Privilege escalation

<=2.1 · no fixed version yet

Koinonia Link 1.1.2 - 1.1.4 - Subscriber+ Privilege Escalation to Administrator

• Koinonia Link
• Privilege escalation

Local Privilege Escalation in ClearPass Client Software

• Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
• Privilege escalation

Authenticated Local Privilege Escalation in ClearPass Policy Manager OnGuard Linux Agent

• Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
• Privilege escalation

Authenticated Privilege Escalation Vulnerability in the API of AOS-S

• Hewlett Packard Enterprise (HPE) AOS-Switch (AOS-S)
• Privilege escalation

Authentication Bypass in the Web Management Interface of AOS-S

• Hewlett Packard Enterprise (HPE) AOS-Switch (AOS-S)
• Privilege escalation

Improper privilege management in Google Chrome

• Google Chrome
• Privilege escalation

Execution with unnecessary privileges in Google Chrome

• Google Chrome
• Privilege escalation

Improper privilege management in Google Android

• Google Android
• Privilege escalation

Improper privilege management in Dell Container Storage Modules (CSM)

• Dell Container Storage Modules (CSM)
• Privilege escalation

Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation

• Code injection
• Privilege escalation

<1.10.1 · fixed in 1.10.1

WordPress Salon booking system plugin <= 10.31.7 - Privilege Escalation vulnerability

• Dimitri Grassi Salon booking system
• Privilege escalation

WordPress WP User Profiles plugin <= 2.7.3 - Privilege Escalation vulnerability

• John James Jacoby WP User Profiles
• Privilege escalation