Lucene search
+L

2643 matches found

OSV
OSV
added 2025/02/01 4:15 a.m.7 views

CVE-2024-12171

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the 'ehcrmagentadduser' AJAX action in all versions up to, and including, 3.2.6. This makes it possible for authenticated attackers, with...

8.8CVSS5.8AI score0.00501EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2025/01/22 8:14 a.m.292 views

Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure

PoC for CVE-2025-0282 Remote Unauthenticated Stack Buffer O...

9CVSS7AI score0.99979EPSS
SaveExploits14
CVE
CVE
added 2025/01/20 3:43 p.m.81 views

CVE-2025-23044

PwnDoc (pwndoc) is affected by a CSRF vulnerability due to missing protection and SameSite cookies, enabling cross-site requests on behalf of authenticated users. The issue is associated with the project commit 14acb704891245bf1703ce6296d62112e85aa995, which patches the vulnerability. Public desc...

8.1CVSS6.6AI score0.00248EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/20 3:43 p.m.10 views

CVE-2025-23044 Cross-Site Request Forgery (CSRF) allows creating admin account with POST request

PwnDoc is a penetration test report generator. There is no CSRF protection in pwndoc, allowing attackers to send requests on a logged-in user's behalf. This includes GET and POST requests due to the missing SameSite= attribute on cookies and the ability to refresh cookies. Commit...

6.8CVSS6.6AI score0.00248EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/01/20 3:43 p.m.65 views

CVE-2025-23044 Cross-Site Request Forgery (CSRF) allows creating admin account with POST request

PwnDoc is a penetration test report generator. There is no CSRF protection in pwndoc, allowing attackers to send requests on a logged-in user's behalf. This includes GET and POST requests due to the missing SameSite= attribute on cookies and the ability to refresh cookies. Commit...

6.8CVSS0.00248EPSS
SaveExploits1References2
NVD
NVD
added 2024/12/02 3:15 p.m.37 views

CVE-2024-46908

In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated low-privileged user at least Report Viewer permissions required to achieve privilege escalation to the admin account...

8.8CVSS0.02241EPSS
SaveExploits0References3
NVD
NVD
added 2024/12/02 3:15 p.m.39 views

CVE-2024-46906

In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated low-privileged user at least Report Viewer permissions required to achieve privilege escalation to the admin account...

8.8CVSS0.40372EPSS
SaveExploits0References3
OSV
OSV
added 2024/12/02 3:15 p.m.14 views

CVE-2024-46905

In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated lower-privileged user at least Network Manager permissions required to achieve privilege escalation to the admin account...

8.8CVSS7.6AI score0.02241EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/12/02 2:45 p.m.16 views

CVE-2024-46905 WhatsUp Gold GetOrderByClause SQL Injection Privilege Escalation Vulnerability

In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated lower-privileged user at least Network Manager permissions required to achieve privilege escalation to the admin account...

8.8CVSS8AI score0.02241EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/12/02 2:44 p.m.39 views

CVE-2024-46906 WhatsUp Gold GetSqlWhereClause SQL Injection Privilege Escalation Vulnerability

In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated low-privileged user at least Report Viewer permissions required to achieve privilege escalation to the admin account...

8.8CVSS0.40372EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/12/02 2:42 p.m.55 views

CVE-2024-46907 WhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation Vulnerability

In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated low-privileged user at least Report Viewer permissions required to achieve privilege escalation to the admin account...

8.8CVSS0.02241EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/12/02 2:40 p.m.22 views

CVE-2024-46908 WhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation Vulnerability

In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated low-privileged user at least Report Viewer permissions required to achieve privilege escalation to the admin account...

8.8CVSS8AI score0.02241EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/11/27 9:54 a.m.11 views

CVE-2024-52323 Sensitive Data Exposure

Zohocorp ManageEngine Analytics Plus versions below 6100 are vulnerable to authenticated sensitive data exposure which allows the users to retrieve sensitive tokens associated to the org-admin account...

8.1CVSS6.8AI score0.01465EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/27 9:54 a.m.36 views

CVE-2024-52323 Sensitive Data Exposure

Zohocorp ManageEngine Analytics Plus versions below 6100 are vulnerable to authenticated sensitive data exposure which allows the users to retrieve sensitive tokens associated to the org-admin account...

8.1CVSS0.01465EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/23 12:00 a.m.15 views

PT-2024-39954 · WordPress · Wpgym

Name of the Vulnerable Software and Affected Versions: WPGYM - Wordpress Gym Management System plugin versions up to, and including, 67.1.0 Description: The issue is related to a missing capability check on the MJ gmgt add staff member function, which allows authenticated attackers with...

8.8CVSS9.2AI score0.00603EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2024/11/20 12:00 a.m.12 views

The vulnerability in the admin_account.cgi script of Netgear R8500’s integrated routing software allows a hacker to execute arbitrary commands.

The vulnerability of the adminaccount.cgi microprogramming system in Netgear R8500 routers exists due to the failure to take measures to neutralize special elements used in the operating system’s command for processing the sysNewPasswd parameter. Exploiting this vulnerability allows a malicious...

8CVSS5.9AI score0.00963EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2024/11/18 4:15 p.m.11 views

CVE-2021-1462

A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to elevate privileges on an affected system. To exploit this vulnerability, an attacker would need to have a valid Administrator account on an affected system. The vulnerability is due to...

6.7CVSS5.8AI score0.00163EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/15 11:15 a.m.39 views

CVE-2024-0787

phpIPAM version 1.5.1 contains a vulnerability where an attacker can bypass the IP block mechanism to brute force passwords for users by using the 'X-Forwarded-For' header. The issue lies in the 'getuserip' function in 'class.Common.php' at lines 1044 and 1045, where the presence of the...

5.9CVSS0.0046EPSS
SaveExploits1References2
OSV
OSV
added 2024/11/15 10:57 a.m.21 views

CVE-2024-0787 Improper Restriction of Excessive Authentication Attempts in phpipam/phpipam

phpIPAM version 1.5.1 contains a vulnerability where an attacker can bypass the IP block mechanism to brute force passwords for users by using the 'X-Forwarded-For' header. The issue lies in the 'getuserip' function in 'class.Common.php' at lines 1044 and 1045, where the presence of the...

5.3CVSS6.2AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/11/15 10:57 a.m.42 views

CVE-2024-0787 Improper Restriction of Excessive Authentication Attempts in phpipam/phpipam

phpIPAM version 1.5.1 contains a vulnerability where an attacker can bypass the IP block mechanism to brute force passwords for users by using the 'X-Forwarded-For' header. The issue lies in the 'getuserip' function in 'class.Common.php' at lines 1044 and 1045, where the presence of the...

5.3CVSS6.7AI score0.0046EPSS
SaveExploits1References2
Rows per page
Query Builder