11586 matches found
lazywarden
Secure, Automated, and Multi-Cloud Bitwarden Backup and Import System Lazywarden is a Python automation tool designed to Backup and Restore data from your vault, including Bitwarden attachments. It allows you to upload backups to multiple cloud storage services and receive notifications across...
CRM Platform SQL Injection
The vulnerability of the platform for creating individual web applications in CRM involves the failure to take measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...
Directum RX Data Compromise
The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...
CVE-2024-41302-Bookea-tu-Mesa-is-vulnerable-to-SQL-Injection
CVE-2024-41302-Bookea-tu-Mesa-is-vulnerable-to-SQL-Injection- Bookea-tu-Mesa is susceptible to a SQL Injection SQLi vulnerability. This flaw allows attackers to inject malicious SQL commands that can manipulate the database, potentially compromising the application's data integrity and security...
CVE-2025-27893
CVE-2025-27893: External Control of Assumed-Immutable Web Parameter in Archer Platform Description In Archer Platform 6 through 6.14.00202.10024, an authenticated user with record creation privileges can manipulate immutable fields, such as the creation date, by intercepting and modifying a Copy...
pmanager
Pmanager Demo Description Store and retrieve your passwords from a secure offline database. Check if your passwords has leaked previously to prevent targeted password reuse attacks. Why develop another password manager ? This project was initially born from my desire to learn Rust. I was tired of...
CVE-2025-62950-PoC
Description This proof of concept PoC describes a Cross-Site Request Forgery CSRF vulnerability found in the Contest Gallery – Upload, Vote & Sell with PayPal and Stripe v. 26.1.2 plugin. The issue allows an attacker to trick an authenticated user into executing a crafted request that...
Mitel MiCollab - Authentication Bypass
A vulnerability in the NuPoint Unified Messaging NPM component of Mitel MiCollab through 9.8 SP1 FP2 9.8.1.201 could allow an unauthenticated attacker to conduct a path traversal attack, due to insufficient input validation. A successful exploit could allow unauthorized access, enabling the...
CVE-2026-0460
Improper authentication in Bootgen could result in the use of a fixed salt value for RSA padding instead of a randomly generated salt, potentially impacting data integrity...
RISE-Ultimate_Project_Manager_e_CRM
CVE-2025-3855 - RISE Ultimate Project Manager - IDOR Security vulnerability: IDOR Insecure Direct Object Reference Affected Component: profile image upload endpoint, teammembers controller Software: RISE - Ultimate Project Manager & CRM Vendor: codecanyon Version: 3.8.2 CVE ORG :...
CVE-2026-0460
A cryptographic vulnerability in AMD Bootgen (CVE-2026-0460) involves improper authentication that could lead to the use of a fixed salt value for RSA padding instead of a randomly generated salt. This flaw potentially impacts data integrity . While the vulnerability is documented, specific explo...
CVE-2026-0460
Improper authentication in Bootgen could result in the use of a fixed salt value for RSA padding instead of a randomly generated salt, potentially impacting data integrity...
EUVD-2026-124634
Improper authentication in Bootgen could result in the use of a fixed salt value for RSA padding instead of a randomly generated salt, potentially impacting data integrity...
BLE-TPMS
CVE-2024-39081 Link: https://vulners.com/cve/CVE-2024-39081 BLE BASED TREEL TPMS for bikes Here, we performed and explained TPMS data manipulation over bluetooth. we can send false alarm to App user over bluetooth. Detailed vulnerability findings and analysis are stored in the repository. File Na...
postgresql: postgresql: Incorrect trigger row processing via partitioned table MERGE
A flaw was found in PostgreSQL. An authenticated database user with table modification privileges can cause automated database rules AFTER triggers to process incorrect row data by running a MERGE operation on a partitioned table that inserts records before updating them. This failure to maintain...
python: python: Misinterpretation of HTTP responses via invalid chunk parsing
A flaw was found in Python. Its Hypertext Transfer Protocol HTTP response and chunk parsing logic incorrectly processes non-hexadecimal or negative integers. A remote server can exploit this by returning a specially crafted HTTP response to a client application. This flaw can cause the applicatio...
CVE-2026-116312
A flaw was found in PostgreSQL. An authenticated database user with table modification privileges can cause automated database rules AFTER triggers to process incorrect row data by running a MERGE operation on a partitioned table that inserts records before updating them. This failure to maintain...
kernel: kernel: Denial of service via unvalidated task tag in iSCSI Reject PDU
A flaw was found in the Linux kernel's SCSI subsystem within the libiscsi module. A malicious or compromised iSCSI storage target can trigger a denial of service DoS or data integrity issues by sending a crafted Reject Protocol Data Unit PDU containing an unvalidated Initiator Task Tag ITT. Becau...
kernel: kernel: Denial of service via unvalidated task tag in iSCSI Reject PDU
A flaw was found in the Linux kernel's SCSI subsystem within the libiscsi module. A malicious or compromised iSCSI storage target can trigger a denial of service DoS or data integrity issues by sending a crafted Reject Protocol Data Unit PDU containing an unvalidated Initiator Task Tag ITT. Becau...
