335 matches found
PT-2024-29329 · Unknown · Kashipara Responsive School Management System
Name of the Vulnerable Software and Affected Versions: Kashipara Responsive School Management System version 3.2.0 Description: An issue was found in the /smsa/admin teacher register approval.php and /smsa/admin teacher register approval submit.php API endpoints, allowing remote unauthenticated...
PT-2024-4295 · Red Hat · Keycloak
Name of the Vulnerable Software and Affected Versions: Keycloak versions prior to 24.0.5 Description: A flaw was found in Keycloak, where certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities. This issue presents a significant security...
keycloak: Unguarded admin REST API endpoints allows low privilege users to use administrative functionalities
A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perform actions reserved for administrators, potentially leading to data breaches or system compromise...
VulnCheck KEV: CVE-2023-26347
Adobe ColdFusion versions 2023.5 and earlier and 2021.11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An unauthenticated attacker could leverage this vulnerability to access the administration CFM and CFC endpoints...
CVE-2024-4308
SQL injection vulnerability in HubBank affecting version 1.0.2. This vulnerability could allow an attacker to send a specially crafted SQL query to the database through different endpoints...
CVE-2024-3195
A vulnerability was found in MailCleaner up to 2023.03.14. It has been classified as critical. This affects an unknown part of the component Admin Endpoints. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and...
CVE-2024-3193
A vulnerability has been found in MailCleaner up to 2023.03.14 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Admin Endpoints. The manipulation leads to os command injection. The attack can be launched remotely. The exploit has been disclos...
CVE-2024-3193
A vulnerability has been found in MailCleaner up to 2023.03.14 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Admin Endpoints. The manipulation leads to os command injection. The attack can be launched remotely. The exploit has been disclos...
CVE-2024-3195 MailCleaner Admin Endpoints path traversal
A vulnerability was found in MailCleaner up to 2023.03.14. It has been classified as critical. This affects an unknown part of the component Admin Endpoints. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and...
CVE-2024-3195 MailCleaner Admin Endpoints path traversal
A vulnerability was found in MailCleaner up to 2023.03.14. It has been classified as critical. This affects an unknown part of the component Admin Endpoints. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and...
CVE-2024-3195
The CVE-2024-3195 entry concerns MailCleaner, affecting the Admin Endpoints component. A path traversal vulnerability exists that can be exploited remotely, with details publicly disclosed. The issue is described as critical, and a patch is recommended to remediate. Specific affected versions are...
CVE-2024-3193
A vulnerability has been found in MailCleaner up to 2023.03.14 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Admin Endpoints. The manipulation leads to os command injection. The attack can be launched remotely. The exploit has been disclos...
CVE-2024-3193 MailCleaner Admin Endpoints os command injection
A vulnerability has been found in MailCleaner up to 2023.03.14 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Admin Endpoints. The manipulation leads to os command injection. The attack can be launched remotely. The exploit has been disclos...
CVE-2024-3193 MailCleaner Admin Endpoints os command injection
A vulnerability has been found in MailCleaner up to 2023.03.14 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Admin Endpoints. The manipulation leads to os command injection. The attack can be launched remotely. The exploit has been disclos...
CVE-2024-3193: Improper Neutralization of Special Elements used in an OS Command
A vulnerability has been found in MailCleaner up to 2023.03.14 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Admin Endpoints. The manipulation leads to os command injection. The attack can be launched remotely. The exploit has been disclos...
CVE-2024-3195: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in MailCleaner up to 2023.03.14. It has been classified as critical. This affects an unknown part of the component Admin Endpoints. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and...
PT-2024-24293
Name of the Vulnerable Software and Affected Versions MailCleaner versions up to 2023.03.14 Description A critical issue has been found in the Admin Endpoints component of MailCleaner, affecting an unknown functionality. This issue leads to os command injection, allowing remote attacks. The explo...
PT-2024-24312
Name of the Vulnerable Software and Affected Versions MailCleaner versions up to 2023.03.14 Description A critical issue affects an unknown part of the component Admin Endpoints, leading to path traversal. The manipulation can be initiated remotely. The issue has been disclosed publicly and may b...