83267 matches found
CVE-2026-107102
This vulnerability exists in the ERP system due to improper validation of payment callback parameters and inadequate authentication controls in API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating the parameter to cause the application to establish an...
CVE-2026-107103
This vulnerability exists in the ERP system due to insufficient validation and parameterization of user supplied input in an API endpoint. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted input to the vulnerable endpoint. Successful exploitation o...
CVE-2022-2414
CVE-2022-2414 CVE-2022-2414 Preuve de concept 1. Remplacez YOURHOST par votre cible comme dans l'URL ci-dessous url = "https://example.com/ca/rest/certrequests"...
CVE-2026-107103 SQL Injection Vulnerability in Manacle Technologies ERP System
This vulnerability exists in the ERP system due to insufficient validation and parameterization of user supplied input in an API endpoint. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted input to the vulnerable endpoint. Successful exploitation o...
EUVD-2026-94218
This vulnerability exists in the ERP system due to insufficient validation and parameterization of user supplied input in an API endpoint. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted input to the vulnerable endpoint. Successful exploitation o...
CVE-2026-107103 SQL Injection Vulnerability in Manacle Technologies ERP System
This vulnerability exists in the ERP system due to insufficient validation and parameterization of user supplied input in an API endpoint. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted input to the vulnerable endpoint. Successful exploitation o...
CVE-2026-107103
A SQL Injection vulnerability exists in the Manacle Technologies ERP System due to insufficient validation and parameterization of user-supplied input in an API endpoint . An unauthenticated remote attacker can exploit this by providing specially crafted input to the vulnerable endpoint. Successf...
CVE-2026-107102
The Manacle Technologies ERP System contains an account takeover vulnerability due to improper validation of payment callback parameters and inadequate authentication controls within an API endpoint. An unauthenticated remote attacker can manipulate specific parameters to force the application to...
CVE-2026-107102 Account Takeover Vulnerability in Manacle Technologies ERP System
This vulnerability exists in the ERP system due to improper validation of payment callback parameters and inadequate authentication controls in API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating the parameter to cause the application to establish an...
CVE-2026-107102 Account Takeover Vulnerability in Manacle Technologies ERP System
This vulnerability exists in the ERP system due to improper validation of payment callback parameters and inadequate authentication controls in API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating the parameter to cause the application to establish an...
GoFileX
GoFileX Client TUI IRC de la fin des années 90 pour parcourir des wordlists contre un partage GoFile protégé par mot de passe. Il ne communique qu'avec l'API REST documentée et traite les limites de débit comme une règle absolue : requêtes séquentielles, intervalle par défaut conservateur,...
WordPress Geliver Akıllı Kargo Pazaryeri plugin 3.0.0-3.1.0 - Unauthenticated API Key Disclosure vulnerability
Unauthenticated API Key Disclosure vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Geliver Akıllı Kargo Pazaryeri versions 3.0.0-3.1.0...
CVE-2015-3073
CVE-2015-3073 Эта уязвимость позволяет удалённым злоумышленникам обходить ограничения API в уязвимых установках Adobe Reader. Для эксплуатации этой уязвимости требуется взаимодействие с пользователем: жертва должна посетить вредоносную страницу или открыть вредоносный файл. Конкретная ошибка...
CVE-2026-86816
The WPCafe WordPress plugin before 3.0.21 does not restrict access to some of its REST API endpoints, allowing unauthenticated attackers to read WooCommerce product data, including per-product sales counts, exact stock levels, and private product meta, that WooCommerce itself keeps behind...
CVE-2026-104049
The Academy LMS WordPress plugin before 4.0.0 does not verify course enrollment or object ownership when returning a lesson's content through one of its REST API routes, allowing users with a self-registerable student account to read the full content of arbitrary lessons, including lessons of pai...
CVE-2025-8110-Gogs-RCE-Exploit
Gogs CVE-2025-8110 RCE Exploit أداة استغلال آلية بلغة Python لـ CVE-2025-8110 في Gogs. تسمح هذه الثغرة بتنفيذ الأوامر عن بُعد RCE عن طريق استغلال واجهة برمجة التطبيقات PutContents، التي تفشل في التحقق مما إذا كان مسار الملف رابطًا رمزيًا. من خلال الكتابة فوق الملف الداخلي .git/config عبر رابط رمز...
CVE-2023-27742
CVE-2023-27742 Il a été découvert qu'IDURAR ERP/CRM v1 contient une vulnérabilité d'injection SQL via le composant /api/login. Description Il a été découvert qu'IDURAR ERP/CRM v1 contient une vulnérabilité d'injection SQL via le composant /api/login. Type de vulnérabilité Injection SQL Vendeur du...
CVE-2026-86816 WPCafe < 3.0.21 - Unauthenticated Product Data Disclosure via REST API
The WPCafe WordPress plugin before 3.0.21 does not restrict access to some of its REST API endpoints, allowing unauthenticated attackers to read WooCommerce product data, including per-product sales counts, exact stock levels, and private product meta, that WooCommerce itself keeps behind...
CVE-2026-86816
The WPCafe WordPress plugin, in versions before 3.0.21 , contains a vulnerability where certain REST API endpoints do not have proper access restrictions. This flaw allows unauthenticated attackers to access sensitive WooCommerce product data , including private product meta, exact stock levels, ...
CVE-2026-86816 WPCafe < 3.0.21 - Unauthenticated Product Data Disclosure via REST API
The WPCafe WordPress plugin before 3.0.21 does not restrict access to some of its REST API endpoints, allowing unauthenticated attackers to read WooCommerce product data, including per-product sales counts, exact stock levels, and private product meta, that WooCommerce itself keeps behind...