CVE-2026-11405

creationtimestamp| type| source ---|---|--- 2026-07-07 04:31:58+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpzrjkh5ga2f 2026-07-07 04:31:59+00:00| seen| https://bsky.app/profile/potato.software/post/3mpzrjlnff724 2026-07-07 08:15:44+00:00| seen|...

CVE-2026-11405

The web server binary /bin/httpd contains a hidden backdoor authentication mechanism in the login function at 004c88b8. - The function contains a normal authentication path using MD5/hash-based password verification prodencode64/PasswordToMd5/checkrandkey. - After normal authentication fails, it...

CVE-2025-11405

A vulnerability was identified in SourceCodester Hotel and Lodge Management System 1.0. This vulnerability affects unknown code of the file /deltax.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be...

CVE-2025-11405

A vulnerability was identified in SourceCodester Hotel and Lodge Management System 1.0. This vulnerability affects unknown code of the file /deltax.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be...

CVE-2025-11405 SourceCodester Hotel and Lodge Management System del_tax.php sql injection

A vulnerability was identified in SourceCodester Hotel and Lodge Management System 1.0. This vulnerability affects unknown code of the file /deltax.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be...

CVE-2024-11405

The WP Front-end login and register plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the email and wpmpresetpasswordtoken parameters in all versions up to, and including, 2.1.0 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2024-11405

creationtimestamp| type| source ---|---|--- 2025-07-02 04:12:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20092...

CVE-2024-11405

WP Front-end login and register for WordPress is vulnerable to Reflected XSS via the email and wpmp_reset_password_token parameters in all versions up to 2.1.0. This allows unauthenticated attackers to inject scripts in pages executed when a user is tricked into clicking a link. The connected doc...

CVE-2017-11405

In CMS Made Simple CMSMS 2.2.2, remote authenticated administrators can upload a .php file via a CMSContentManager action to admin/moduleinterface.php, followed by a FilePicker action to admin/moduleinterface.php in which type=image is changed to type=file...

CVE-2019-11405

OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which may have caused insecurely resolved dependencies...

com.ethlo.lamebda:lamebda-core (>=0.4.0 <=0.5.3), com.ethlo.lamebda:lamebda-server (>=0.5.1 <=0.5.3) +33 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (>=3.0.0 <=4.0.0-beta3)

org.openapitools:openapi-generator MAVEN version =3.0.0, =0.4.0, =0.5.1, =0.4.0, =0.4.0, =0.4.0, =1.1.0, =1.2.0, =0.0.6, =1.1.0, =0.0.5, =1.4.0, =1.1.0, =1.1.0, =1.1.0, =1.3.0 and more Source cves: CVE-2019-11405 Source advisory: OSV:GHSA-27J5-2H6R-C9Q2...

CVE-2020-11405

This CVE-2020-11405 entry is rejected and not used.

CVE-2020-11405

...

CVE-2018-11405

Kliqqi 2.0.2 has CSRF in admin/adminusers.php...

CVE-2018-11405

Kliqqi 2.0.2 has a Cross-Site Request Forgery (CSRF) vulnerability in admin/admin_users.php. Multiple sources (NVD/NVDC-family and CNVD) describe CSRF affecting this version; CNVD explicitly states a remote attacker can exploit it to create administrator accounts. No further exploit details or fi...

CVE-2018-11405

Kliqqi 2.0.2 has CSRF in admin/adminusers.php...

CVE-2017-11405

CMS Made Simple (CMSMS) 2.2.2 is affected by CVE-2017-11405. Remote authenticated administrators can abuse a sequence of actions (CMSContentManager to admin/moduleinterface.php, then a FilePicker action that changes type=image to type=file) to upload a PHP file. The exact vulnerability chain enab...