Lucene search
+L

255 matches found

NVD
NVD
•added 2026/09/23 12:17 p.m.•17 views

CVE-2026-80444

URL redirection to untrusted site 'open redirect' vulnerability in Abis Technology Ltd. Co. AVESİS allows Input Data Manipulation. This issue affects AVESİS: from 202608201331 before 202608240351...

5.4CVSS0.00141EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/23 11:42 a.m.•12 views

CVE-2026-80444 Unauthenticated Open Redirect Vulnerability in Abis Technology's AVESİS

URL redirection to untrusted site 'open redirect' vulnerability in Abis Technology Ltd. Co. AVESİS allows Input Data Manipulation. This issue affects AVESİS: from 202608201331 before 202608240351...

5.4CVSS5.7AI score0.00141EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/23 11:42 a.m.•8 views

EUVD-2026-85259

URL redirection to untrusted site 'open redirect' vulnerability in Abis Technology Ltd. Co. AVESİS allows Input Data Manipulation. This issue affects AVESİS: from 202608201331 before 202608240351...

5.4CVSS5.7AI score0.00141EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/23 11:42 a.m.•39 views

CVE-2026-80444 Unauthenticated Open Redirect Vulnerability in Abis Technology's AVESİS

URL redirection to untrusted site 'open redirect' vulnerability in Abis Technology Ltd. Co. AVESİS allows Input Data Manipulation. This issue affects AVESİS: from 202608201331 before 202608240351...

5.4CVSS0.00141EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/23 11:42 a.m.•9 views

CVE-2026-80444

Abis Technology Ltd. Co. AVESİS is vulnerable to an open redirect vulnerability caused by Input Data Manipulation . This flaw allows an attacker to redirect users to an untrusted site. The issue specifically affects versions from 202608201331 before 202608240351 . Exploitation details are not pro...

5.4CVSS5.7AI score0.00141EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•3 views

PT-2026-97295

Name of the Vulnerable Software and Affected Versions AVESİS versions 202608201331 through 202608240351 Description An open redirect issue exists in Abis Technology Ltd. Co. AVESİS, which allows for input data manipulation by redirecting users to untrusted sites. Recommendations Update AVESİS to...

5.4CVSS5.7AI score0.00141EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•7 views

CVE-2026-80444: URL Redirection to Untrusted Site

URL redirection to untrusted site 'open redirect' vulnerability in Abis Technology Ltd. Co. AVESİS allows Input Data Manipulation. This issue affects AVESİS: from 202608201331 before 202608240351...

5.4CVSS5.7AI score0.00141EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•11 views

Astra Linux - Vulnerability in node-sha.js

There is a vulnerability in input validation in sha.js that allows for manipulation of input data. This issue affects sha.js version 2.4.11...

9.1CVSS7.2AI score0.00709EPSS
SaveExploits1References1
NVD
NVD
•added 2026/09/09 10:17 a.m.•11 views

CVE-2026-11838

Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation. This issue affects Library Reservation System: before v22.2...

4.3CVSS0.00185EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/09 9:14 a.m.•41 views

CVE-2026-11838 Improper Authorization in Yordam Informatics' Library Reservation System

Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation. This issue affects Library Reservation System: before v22.2...

4.3CVSS0.00185EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/09 9:14 a.m.•18 views

EUVD-2026-74781

Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation. This issue affects Library Reservation System: before v22.2...

4.3CVSS5.8AI score0.00185EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/09 9:14 a.m.•13 views

CVE-2026-11838 Improper Authorization in Yordam Informatics' Library Reservation System

Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation. This issue affects Library Reservation System: before v22.2...

4.3CVSS5.8AI score0.00185EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/09 9:14 a.m.•36 views

CVE-2026-11838

CVE-2026-11838 is a missing authentication vulnerability in the Library Reservation System developed by Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. The flaw allows input data manipulation in a critical function that lacks proper access contro...

4.3CVSS5.8AI score0.00185EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•21 views

PT-2026-88910

Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation. This issue affects Library Reservation System: before v22.2...

4.3CVSS5.7AI score0.00185EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•2 views

CVE-2026-11838: Missing Authentication for Critical Function

Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation. This issue affects Library Reservation System: before v22.2...

4.3CVSS5.8AI score0.00185EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/08 3:06 p.m.•35 views

CVE-2026-16025 Improper Payment Validation in PayTR's PayTR Virtual Pos iFrame API WHMCS Module

Improper validation of specified quantity in input vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API WHMCS Module allows Input Data Manipulation. This issue affects PayTR Virtual Pos iFrame API WHMCS Module: from v9.0.0 before v9.0.3...

7.5CVSS0.00324EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•3 views

CVE-2026-16025: Improper Validation of Specified Quantity in Input

Improper validation of specified quantity in input vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Input Data Manipulation. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...

7.5CVSS5.8AI score0.00324EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•17 views

PT-2026-87108

Improper validation of specified quantity in input vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Input Data Manipulation. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...

7.5CVSS5.7AI score0.00324EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/03 6:35 p.m.•40 views

CVE-2026-78583 Incorrect Authorization in Kibana Leading to Privilege Escalation

Incorrect Authorization CWE-863 in Kibana can lead to privilege escalation via Input Data Manipulation CAPEC-153. Elasticsearch cluster privilege declarations originating from integration packages were not validated before being used to mint credentials for enrolled Elastic Agents. A user holding...

8.1CVSS0.00386EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/03 6:35 p.m.•18 views

EUVD-2026-70657

Incorrect Authorization CWE-863 in Kibana can lead to privilege escalation via Input Data Manipulation CAPEC-153. Elasticsearch cluster privilege declarations originating from integration packages were not validated before being used to mint credentials for enrolled Elastic Agents. A user holding...

8.1CVSS5.8AI score0.00386EPSS
SaveExploits0References1
Rows per page
Query Builder