17 matches found
Exploit for CVE-2026-11405
cve-id ⚡ Simple Usage Use this project only in safe and...
CVE-2026-11405
creationtimestamp| type| source ---|---|--- 2026-07-07 04:31:58+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpzrjkh5ga2f 2026-07-07 04:31:59+00:00| seen| https://bsky.app/profile/potato.software/post/3mpzrjlnff724 2026-07-07 08:15:44+00:00| seen|...
CVE-2026-11405
The web server binary /bin/httpd contains a hidden backdoor authentication mechanism in the login function at 004c88b8. - The function contains a normal authentication path using MD5/hash-based password verification prodencode64/PasswordToMd5/checkrandkey. - After normal authentication fails, it...
CVE-2025-11405
A vulnerability was identified in SourceCodester Hotel and Lodge Management System 1.0. This vulnerability affects unknown code of the file /deltax.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be...
CVE-2025-11405
A vulnerability was identified in SourceCodester Hotel and Lodge Management System 1.0. This vulnerability affects unknown code of the file /deltax.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be...
CVE-2025-11405 SourceCodester Hotel and Lodge Management System del_tax.php sql injection
A vulnerability was identified in SourceCodester Hotel and Lodge Management System 1.0. This vulnerability affects unknown code of the file /deltax.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be...
CVE-2024-11405
The WP Front-end login and register plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the email and wpmpresetpasswordtoken parameters in all versions up to, and including, 2.1.0 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2024-11405
creationtimestamp| type| source ---|---|--- 2025-07-02 04:12:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20092...
CVE-2024-11405
WP Front-end login and register for WordPress is vulnerable to Reflected XSS via the email and wpmp_reset_password_token parameters in all versions up to 2.1.0. This allows unauthenticated attackers to inject scripts in pages executed when a user is tricked into clicking a link. The connected doc...
CVE-2017-11405
In CMS Made Simple CMSMS 2.2.2, remote authenticated administrators can upload a .php file via a CMSContentManager action to admin/moduleinterface.php, followed by a FilePicker action to admin/moduleinterface.php in which type=image is changed to type=file...
CVE-2019-11405
OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which may have caused insecurely resolved dependencies...
CVE-2020-11405
This CVE-2020-11405 entry is rejected and not used.
CVE-2018-11405
Kliqqi 2.0.2 has CSRF in admin/adminusers.php...
CVE-2018-11405
Kliqqi 2.0.2 has CSRF in admin/adminusers.php...
CVE-2018-11405
Kliqqi 2.0.2 has a Cross-Site Request Forgery (CSRF) vulnerability in admin/admin_users.php. Multiple sources (NVD/NVDC-family and CNVD) describe CSRF affecting this version; CNVD explicitly states a remote attacker can exploit it to create administrator accounts. No further exploit details or fi...
CVE-2017-11405
CMS Made Simple (CMSMS) 2.2.2 is affected by CVE-2017-11405. Remote authenticated administrators can abuse a sequence of actions (CMSContentManager to admin/moduleinterface.php, then a FilePicker action that changes type=image to type=file) to upload a PHP file. The exact vulnerability chain enab...