149 matches found
CVE-2025-4040 IDOR in Turpak's Automatic Station Monitoring System
Authorization Bypass Through User-Controlled Key vulnerability in Turpak Automatic Station Monitoring System allows Privilege Escalation. This issue affects Automatic Station Monitoring System: before 5.0.6.51...
CVE-2025-4040 IDOR in Turpak's Automatic Station Monitoring System
Authorization Bypass Through User-Controlled Key vulnerability in Turpak Automatic Station Monitoring System allows Privilege Escalation. This issue affects Automatic Station Monitoring System: before 5.0.6.51...
CVE-2025-4040
CVE-2025-4040 affects Turpak Automatic Station Monitoring System (versions prior to 5.0.6.51). The issue is an Authorization Bypass Through a User-Controlled Key, enabling Privilege Escalation. Multiple sources (Red Hat, CVE ecosystem listings, and PT Security) corroborate the vulnerability and s...
Exploit for Code Injection in Crushftp
CVE-2024-4040 — CrushFTP Authentication Bypass Exploit This r...
Exploit for Path Traversal in Lakernote Easyadmin
CVE-2024-4040 — CrushFTP Authentication Bypass Exploit This r...
Linux Distros Unpatched Vulnerability : CVE-2010-4040
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Google Chrome before 7.0.517.41 does not properly handle animated GIF images, which allows remote attackers to cause a denial of service memory corruption or...
CVE-2020-4040
Bolt CMS before version 3.7.1 lacked CSRF protection in the preview generating endpoint. Previews are intended to be generated by the admins, developers, chief-editors, and editors, who are authorized to create content in the application. But due to lack of proper CSRF protection, unauthorized...
Debian: Security Advisory (DLA-4040-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-4040 affecting package bolt 0.9.2-2
CVE-2020-4040 affecting package bolt 0.9.2-2. This CVE either no longer is or was never applicable...
Exploit for Code Injection in Crushftp
EN GenCrushSSTIExploit is a PoC exploit tool targeting the...
Exploit for Code Injection in Crushftp
CVE-2024-4040 A server side template injection vulnerability i...
Exploit for Code Injection in Crushftp
CVE-2024-4040: CrushFTP File Read Vulnerability Overview...
CrushFTP Zero-Day Exploitation Due to CVE-2024-4040
Vulnerability Scope & Details CrushFTP disclosed a zero-day vulnerability in their software on April 19, 2024. The vulnerability is published on CVE-2024-4040. Affected versions: 9.x versions before 10.7.1 11.1.0 The CVSS score is 9.8. The vulnerability allows remote attackers to bypass the VFS...
Exploit for Code Injection in Crushftp
Exploit Code for CVE-2024-4040 Overview This exploit code t...
Exploit for Code Injection in Crushftp
CVE-2024-4040-CrushFTP-server CrushFTP is a proprietary multi...
CrushFTP < 10.7.1 / 11.x < 11.1.0 Sandbox Escape (CVE-2024-4040) (Direct Check)
Binary data crushftpcve-2024-4040.nbin...
Exploit for Code Injection in Crushftp
CVE-2024-4040 SSTI & LFI PoC - Exploitation | CrushFTP This...
Exploit for Code Injection in Crushftp
CVE-2024-4040 SSTI & LFI PoC - Exploitation | CrushFTP This...