PT-2022-12553

Name of the Vulnerable Software and Affected Versions Sourcecodester Vehicle Service Management System version 1.0 Description A Privilege Escalation issue exists, allowing staff account users to access admin resources and perform CRUD operations. Recommendations For Sourcecodester Vehicle Servic...

CVE-2021-46075: Missing Authorization

A Privilege Escalation vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. Staff account users can access the admin resources and perform CRUD Operations...

Exploit for Missing Authorization in Vehicle_Service_Management_System_Project Vehicle_Service_Management_System

CVE-2021-46075 Exploit Title: Vehicle Service Management...

PT-2021-23249

Name of the Vulnerable Software and Affected Versions ECOA BAS controller affected versions not specified Description The ECOA BAS controller has a Cross-Site Request Forgery issue, allowing an authenticated attacker to remotely place a forged request at a malicious web page. This enables the...

Purchase Order Management System 1.0 Shell Upload

Exploit Title: Purchase Order Management System 1.0 - Remote File Upload Date: 2021-09-14 Exploit Author: Aryan Chehreghani Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/14935/purchase-order-management-system-using-php-free-source-code.html...

Code injection

In Apache OpenMeetings 3.0.0 - 4.0.1, CRUD operations on privileged users are not password protected allowing an authenticated attacker to deny service for privileged users...

CVE-2018-1286

In Apache OpenMeetings 3.0.0 - 4.0.1, CRUD operations on privileged users are not password protected allowing an authenticated attacker to deny service for privileged users...

CVE-2018-1286

In Apache OpenMeetings 3.0.0 - 4.0.1, CRUD operations on privileged users are not password protected allowing an authenticated attacker to deny service for privileged users...

PT-2018-11442

Name of the Vulnerable Software and Affected Versions Apache OpenMeetings versions 3.0.0 through 4.0.1 Description The issue allows an authenticated attacker to deny service for privileged users due to the lack of password protection for CRUD operations on these users. Recommendations For version...

MongoDB Security Audit: mongoaudit

MongoDB Security Audit mongoaudit is a CLI tool for auditing MongoDB servers, detecting poor security settings and performing automated penetration testing. It is widely known that there are quite a few holes in MongoDB’s default configuration settings. This fact, combined with abundant lazy syst...