CVE-2026-10243-AUTH

Smart Parking System 1.0 - Accès non authentifié aux fonctions administratives critiques Informations sur la vulnérabilité Champ| Détails ---|--- Produit| Smart Parking System Vendeur| code-projects.org Version| 1.0 Classe de vulnérabilité| Authentification manquante pour une fonction critique...

CVE-2025-55972-Remote-Unauthenticated-Denial-of-Service-DoS-in-TCL-Smart-TV-UPnP-DLNA-AVTransport

CVE-2025-55972-Remote-Unauthenticated-Denial-of-Service-DoS-in-TCL-Smart-TV-UPnP-DLNA-AVTransport Un téléviseur intelligent TCL exécutant une implémentation UPnP/DLNA MediaRenderer vulnérable est affecté par un déni de service DoS distant et non authentifié. Fournisseur : TCL Technology Group...

CVE-2025-55971-Blind-Unauthenticated-SSRF-in-TCL-Smart-TV-UPnP-DLNA-AVTransport

CVE-2025-55971-SSRF-Aveugle-Non-Authentifié-dans-TCL-Smart-TV-UPnP-DLNA-AVTransport Le téléviseur intelligent TCL 65C655, exécutant la version de firmware V8-R75PT01-LF1V269.001116 Android TV, Kernel 5.4.242+, est vulnérable à une Server-Side Request Forgery SSRF aveugle et non authentifiée via l...

CVE-2025-60500

CVE-2025-60500 — Téléversement de fichier non sécurisé / faille logique dans QDocs Smart School Smart School 7.1 Date de publication : 2025-10-17 Auteur / Découvreur : Lebas Vivien Statut : Réservé CVE : CVE-2025-60500 réservée Résumé Une faille de téléversement de fichier non sécurisé / faille...

GlacierCTF2023_writeups

Glacierctf 2023 Description Date du CTF : 24.11.2023 - 26.11.2023 Durée : 48 heures CTF Time : https://ctftime.org/event/1992 GlacierCTF 2023 était la deuxième édition du CTF de type jeopardy organisé par LosFuzzys. Le CTF proposait des épreuves dans diverses catégories, notamment pwn, rev, web,...

CVE-2026-67687-ICS-Park-Smart-Park-Management-System-v2.0

Ce depot n’a pas de fichier README...

pwnfb50

pwnfb50 انقل ملكية أي قفل ذكي FB50 إلى نفسك CVE-2019-13143 فيديو PoC الاستخدام $ python3 pwnfb50.py id mac حيث id هو معرّف المستخدم الخاص بك، و mac هو عنوان MAC الخاص بقفلك...

CVE-2023-20110

CVE-2023-20110 نص برمجي PoC لثغرة CVE-2023-20110 - ثغرة حقن SQL في Cisco Smart Software Manager On-Prem الاستخدام 1. حدّث عنوان IP وكوكيز المسؤول في السكربت، 2. شغّل السكربت باستخدام الأمر التالي: python3 exploit.py...

raptor

Raptor Raptor is a framework for auditing blockchain ecosystem contracts, protocols e.t.c. Overview Raptor provides structured approaches and tools for identifying security vulnerabilities in smart contracts and blockchain protocols. The framework helps auditors document findings consistently and...

WordPress Smart Casa theme <= 1.0.12 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Smart Casa versions = 1.0.12...

CVE-2026-107450

In Stump through 0.1.10, the updateSmartList and deleteSmartList GraphQL mutations crates/graphql/src/mutation/smartlists.rs depend only on the shared AccessSmartList permission and resolve the target list at Reader access lacking a creator check. Any authenticated user with that permission can...

CVE-2026-107450

In Stump through 0.1.10, the updateSmartList and deleteSmartList GraphQL mutations crates/graphql/src/mutation/smartlists.rs depend only on the shared AccessSmartList permission and resolve the target list at Reader access lacking a creator check. Any authenticated user with that permission can...

CVE-2026-107450

In Stump versions through 0.1.10 , an authorization flaw in the updateSmartList and deleteSmartList GraphQL mutations (located in crates/graphql/src/mutation/smart_lists.rs) allows for unauthorized data manipulation. The vulnerability exists because these mutations rely solely on the shared Acces...

EUVD-2026-94730

In Stump through 0.1.10, the updateSmartList and deleteSmartList GraphQL mutations crates/graphql/src/mutation/smartlists.rs depend only on the shared AccessSmartList permission and resolve the target list at Reader access lacking a creator check. Any authenticated user with that permission can...

Dahua Smart Park Management - Arbitrary File Upload

Dahua wisdom park integrated management platform is a comprehensive management platform, a park operations,resource allocation, and intelligence services,and other functions, including/emap/devicePointaddImgIco?. id: CVE-2023-3836 info: name: Dahua Smart Park Management - Arbitrary File Upload...

CVE-2026-76454

A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition on an affected application. This...

EUVD-2026-94454

A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition on an affected application. This...

CVE-2026-76454

A vulnerability exists in the Cisco Smart Licensing Utility API of Cisco License On-Prem (formerly Cisco Smart Software Manager On-Prem). Due to improper input validation and a lack of authentication in the management API, an unauthenticated remote attacker can send a crafted request to write arb...

CVE-2026-76454 Cisco Smart Software Manager On-Prem Unauthenticated API Vulnerability

A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition on an affected application. This...

Cisco License (Smart Software Manager) On-Prem Vulnerabilities

Multiple vulnerabilities in the web-based management interface and API endpoints of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow a remote attacker to gain unauthorized access, access sensitive information, cause a denial of service DoS condition, o...