913 matches found
CVE-2023-53914 UliCMS 2023.1 Authentication Bypass via Mass Assignment Vulnerability
UliCMS 2023.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to create admin users through mass assignment in the UserController. Attackers can send a crafted POST request to the admin index.php endpoint with specific parameters to generate an administrative...
CVE-2023-53914
CVE-2023-53914 affects UliCMS 2023.1. An authentication bypass exists due to mass assignment in the UserController, enabling unauthenticated attackers to create admin users by sending a crafted POST to the admin/index.php endpoint with specific parameters, yielding full system access. Root cause:...
CVE-2023-53914 UliCMS 2023.1 Authentication Bypass via Mass Assignment Vulnerability
UliCMS 2023.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to create admin users through mass assignment in the UserController. Attackers can send a crafted POST request to the admin index.php endpoint with specific parameters to generate an administrative...
CVE-2023-53914: Authorization Bypass Through User-Controlled Key
UliCMS 2023.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to create admin users through mass assignment in the UserController. Attackers can send a crafted POST request to the admin index.php endpoint with specific parameters to generate an administrative...
PT-2025-51952
Name of the Vulnerable Software and Affected Versions UliCMS version 2023.1 Description An authentication bypass allows unauthenticated attackers to create administrative users. This is possible through mass assignment in the UserController by sending a crafted POST request to the ''index.php''...
poc
Filament Demo PoC — mass-assignment Purpose Minimal reprod...
CVE-2025-52656
HCL MyXalytics: 6.6. is affected by Mass Assignment vulnerability. Mass Assignment occurs when user input is automatically bound to application objects without proper validation or access controls, potentially allowing unauthorized modification of sensitive fields...
EUVD-2008-7262
Malware in sbrugna...
EUVD-2019-7931
Malware in sbrugna...
EUVD-2021-1016
Malware in sbrugna...
EUVD-2012-2060
Malware in sbrugna...
EUVD-2025-28232
Malicious code in bioql PyPI...
EUVD-2025-7099
Malicious code in bioql PyPI...
EUVD-2025-6434
Malicious code in bioql PyPI...
EUVD-2022-3007
Malicious code in bioql PyPI...
EUVD-2022-2574
Malicious code in bioql PyPI...
EUVD-2022-4406
Malicious code in bioql PyPI...
EUVD-2022-1108
Malicious code in bioql PyPI...