Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 16:40:26 +0000 bdu:2023-04433 https://cve.radiocsirt.org/vuln/bdu:2023-04433 bdu:2023-04433 https://cve.radiocsirt.org/vuln/bdu:2023-04433 EUVD-2026-334948 https://cve.radiocsirt.org/vuln/euvd-2026-334948 EUVD-2026-334948 https://cve.radiocsirt.org/vuln/euvd-2026-334948 fkie_cve-2023-38952 https://cve.radiocsirt.org/vuln/fkie_cve-2023-38952 <p>Insecure access control in ZKTeco BioTime through 9.0.1 allows authenticated attackers to escalate their privileges due to the fact that session ids are not validated for the type of user accessing the application by default. Privilege restrictions between non-admin and admin users are not enforced and any authenticated user can leverage admin functions without restriction by making direct requests to administrative endpoints.</p> <p>Insecure access control in ZKTeco BioTime through 9.0.1 allows authenticated attackers to escalate their privileges due to the fact that session ids are not validated for the type of user accessing the application by default. Privilege restrictions between non-admin and admin users are not enforced and any authenticated user can leverage admin functions without restriction by making direct requests to administrative endpoints.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-38952 GHSA-7xfv-pf6f-p6v2 https://cve.radiocsirt.org/vuln/ghsa-7xfv-pf6f-p6v2 <p>Insecure access control in ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read sensitive backup files and access sensitive information such as user credentials via sending a crafted HTTP request to the static files resources of the system.</p> <p>Insecure access control in ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read sensitive backup files and access sensitive information such as user credentials via sending a crafted HTTP request to the static files resources of the system.</p> https://cve.radiocsirt.org/vuln/ghsa-7xfv-pf6f-p6v2 gsd-2023-38952 https://cve.radiocsirt.org/vuln/gsd-2023-38952 gsd-2023-38952 https://cve.radiocsirt.org/vuln/gsd-2023-38952