CVE-2024-51032

CVE-2024-51032 Beschreibung Eine Cross-Site-Scripting-Sicherheitslücke XSS in managerecipient.php des Sourcecodester Toll Tax Management System 1.0 ermöglicht es authentifizierten Remote-Benutzern, über das Eingabefeld "owner" beliebige Web-Skripte einzuschleusen. Schwachstellentyp Cross Site...

CVE-2026-35585-poc

CVE-2026-35585: File Browser OS-Befehlseinschleusung PoC English version Zusammenfassung Dieses Repository enthält einen Proof of Concept PoC für die kritische OS-Befehlseinschleusungs-Schwachstelle CVE-2026-35585 , die in File Browser Version 2.0.0 bis 2.33.1 entdeckt wurde. Die Schwachstelle...

Sakai Profile Image Deletion has an IDOR

Summary The Sakai REST API endpoint DELETE /api/users/userId/profile/image does not verify that the requesting user is authorized to modify the target user's profile. Any authenticated user can delete the profile image of any other user, including administrators, by supplying a different userId i...

cve-2023-30253

CVE-2023-30253 विवरण Dolibarr 17.0.1 से पहले के संस्करण में, एक प्रमाणित उपयोगकर्ता अपरकेस हेरफेर के माध्यम से दूरस्थ कोड निष्पादन की अनुमति देता है: इंजेक्ट किए गए डेटा में ?PHP को ?php के बजाय उपयोग करना। दस्तावेज़ीकरण CVE-2023-30253 GitHub Advisory: GHSA-9wqr-5jp4-mjmh सेटअप root@kitploit: git...

CVE-2025-25460

FlatPress CMS Gespeichertes XSS in v1.3.1 CVE-2025-25460 Autor: Athul S Beschreibung Eine gespeicherte Cross-Site Scripting XSS Sicherheitslücke wurde in FlatPress 1.3.1 in der "Add Entry" Funktion identifiziert. Diese Sicherheitslücke erlaubt es authentifizierten Angreifern , bösartige...

CVE-2025-25163

CVE-2025-25163 Plugin A/B Image Optimizer = 3.3 - Authentifizierter Abonnent+ Beliebiger Datei-Download Beschreibung Das Plugin A/B Image Optimizer für WordPress ist in allen Versionen bis einschließlich 3.3 anfällig für Directory Traversal. Dadurch können authentifizierte Angreifer mit Zugriff a...

CVE-2026-71511 Dolibarr < 24.0.0 Members REST API Sensitive Data Exposure via Member Endpoints

Dolibarr before 24.0.0 contains a sensitive data exposure vulnerability in the Members REST API that allows authenticated attackers with member-read rights to retrieve bcrypt password verifiers by querying member endpoints. Attackers can call the individual member or member list endpoints to obta...

CVE-2026-71511 Dolibarr < 24.0.0 Members REST API Sensitive Data Exposure via Member Endpoints

Dolibarr before 24.0.0 contains a sensitive data exposure vulnerability in the Members REST API that allows authenticated attackers with member-read rights to retrieve bcrypt password verifiers by querying member endpoints. Attackers can call the individual member or member list endpoints to obta...

CVE-2026-71510

Dolibarr versions prior to 24.0.0 are affected by a SQL injection in the users REST API. The root cause is that unsanitized filter parameters are spliced directly into SQL WHERE clauses without column restrictions, enabling authenticated users with user-read rights to extract sensitive data not e...

EUVD-2026-65083

Dolibarr before 24.0.0 contains a SQL injection vulnerability in the users REST API that allows authenticated attackers with user-read rights to extract sensitive data by splicing unsanitized filter parameters into SQL WHERE clauses without column restrictions. Attackers can perform binary search...

CVE-2026-71510 Dolibarr < 24.0.0 Users REST API SQL Injection via filter parameter

Dolibarr before 24.0.0 contains a SQL injection vulnerability in the users REST API that allows authenticated attackers with user-read rights to extract sensitive data by splicing unsanitized filter parameters into SQL WHERE clauses without column restrictions. Attackers can perform binary search...

CVE-2026-71510 Dolibarr < 24.0.0 Users REST API SQL Injection via filter parameter

Dolibarr before 24.0.0 contains a SQL injection vulnerability in the users REST API that allows authenticated attackers with user-read rights to extract sensitive data by splicing unsanitized filter parameters into SQL WHERE clauses without column restrictions. Attackers can perform binary search...

CVE-2026-71510 Dolibarr < 24.0.0 Users REST API SQL Injection via filter parameter

Dolibarr before 24.0.0 contains a SQL injection vulnerability in the users REST API that allows authenticated attackers with user-read rights to extract sensitive data by splicing unsanitized filter parameters into SQL WHERE clauses without column restrictions. Attackers can perform binary search...

CVE-2026-71509 Dolibarr < 24.0.0 Expense Report REST API Improper Authorization via Update Endpoint

Dolibarr before 24.0.0 contains an improper authorization vulnerability in the expense report REST API update endpoint that allows authenticated attackers with expense-creation rights to bypass the approval workflow by directly setting approval status and approver identity fields. Attackers can...

CVE-2026-71507 Dolibarr < 24.0.0 REST API Broken Object-Level Authorization via Bank Account Routes

Dolibarr before 24.0.0 contains a broken object-level authorization vulnerability in the REST API company bank account write routes that allows authenticated attackers with third-party creation rights to create, replace, or delete bank account details of any company without requiring read access ...

CVE-2026-71506 Dolibarr < 24.0.0 Payments REST API Improper Authorization via Delete Endpoint

Dolibarr before 24.0.0 contains an improper authorization vulnerability in the payments REST API delete endpoint that allows authenticated attackers with invoice-deletion rights to permanently delete any payment record by bypassing the intended payment-issuance rights check. Attackers can exploit...

CVE-2025-67435-PoC

CVE-2025-67435 शोधकर्ता : Chowdhury Faizal Ahammed PluckCMS Zip Slip दूरस्थ कोड निष्पादन भेद्यता रिपोर्ट कार्यकारी सारांश यह रिपोर्ट PluckCMS में पाई गई एक गंभीर सुरक्षा भेद्यता का दस्तावेजीकरण करती है जो प्रमाणित हमलावरों को Zip Slip आक्रमण वेक्टर के माध्यम से दूरस्थ कोड निष्पादन प्राप्त करने की...

Gitea-Forgejo-CVE-2025-68937

Vulnerabilità di espansione arbitraria dei template in Gitea e Forgejo Quest'opera è distribuita con licenza Creative Commons Attribution-ShareAlike 4.0 International License. Sommario Durante l'analisi del codice sorgente di Forgejo e Gitea per comprendere meglio come viene eseguito il templatin...

KrayinCRM-RCE-Exploit-CVE-2026-38526

🔓 Krayin CRM v2.2.x - Exploração de Execução Remota de Código Autenticada ⚠️ APENAS PARA TESTES DE SEGURANÇA AUTORIZADOS - O uso não autorizado é ilegal e antiético. 📋 Visão Geral Esta ferramenta de exploração demonstra uma vulnerabilidade crítica de execução remota de código RCE autenticada...

CVE-2026-71938

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the switchlangvrp function. The vulnerability is caused by unsafe copying of the portList field into an undersized buffer. A remote attacker can trigger this vulnerability via crafted input, causing a denial of service...