CVE-2018-16373

CVE-2018-16373 There is a Upload vulnerability that can create file via /admin/?/plugin/filemanager/save,more detail see:https://github.com/philippe/FrogCMS/issues/13...

CVE-2026-27541-Analysis-Lab

CVE-2026-27541 — WooCommerce Wholesale Prices Authenticated Privilege Escalation Lab Overview This project is a local Docker lab for analyzing and reproducing the behavior of CVE-2026-27541 in the WooCommerce Wholesale Prices / Wholesale Suite plugin by comparing vulnerable and patched builds...

CVE-2026-116057

A vulnerability has been found in KodCloud KodExplorer up to 4.55. Affected by this vulnerability is an unknown functionality of the file app/controller/editor.class.php of the component Online Editor Save Endpoint. Such manipulation of the argument path/filestr leads to unrestricted upload. It i...

EUVD-2026-109551

A vulnerability has been found in KodCloud KodExplorer up to 4.55. Affected by this vulnerability is an unknown functionality of the file app/controller/editor.class.php of the component Online Editor Save Endpoint. Such manipulation of the argument path/filestr leads to unrestricted upload. It i...

CVE-2026-116057

KodCloud KodExplorer (versions up to 4.55 ) is vulnerable to an unrestricted upload flaw in the Online Editor Save Endpoint component. The vulnerability exists within the app/controller/editor.class.php file, where the manipulation of the path/filestr argument allows for remote file uploads. The ...

CVE-2026-116057 KodCloud KodExplorer Online Editor Save Endpoint editor.class.php unrestricted upload

A vulnerability has been found in KodCloud KodExplorer up to 4.55. Affected by this vulnerability is an unknown functionality of the file app/controller/editor.class.php of the component Online Editor Save Endpoint. Such manipulation of the argument path/filestr leads to unrestricted upload. It i...

PT-2026-123055

A vulnerability has been found in KodCloud KodExplorer up to 4.55. Affected by this vulnerability is an unknown functionality of the file app/controller/editor.class.php of the component Online Editor Save Endpoint. Such manipulation of the argument path/filestr leads to unrestricted upload. It i...

CVE-2026-110287

Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with general Edit but without Edit asset permission to modify the asset contact password via a crafted direct request to the partial-save endpoint...

CVE-2026-110287

An improper access control vulnerability in Devolutions Server 2026.3.8.0 and earlier versions allows an authenticated user with general Edit privileges, but lacking specific Edit asset permissions, to modify the asset contact password . This is achievable by sending a crafted direct request to t...

CVE-2026-110287

Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with general Edit but without Edit asset permission to modify the asset contact password via a crafted direct request to the partial-save endpoint...

EUVD-2026-102874

Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with general Edit but without Edit asset permission to modify the asset contact password via a crafted direct request to the partial-save endpoint...

CVE-2026-110287

Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with general Edit but without Edit asset permission to modify the asset contact password via a crafted direct request to the partial-save endpoint...

PT-2026-115606

Name of the Vulnerable Software and Affected Versions Devolutions Server versions prior to 2026.3.8.1 Description Improper access control regarding asset contact passwords allows an authenticated user who possesses general Edit permissions but lacks specific Edit asset permissions to modify the...

CVE-2026-110287: Incorrect Authorization

Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with general Edit but without Edit asset permission to modify the asset contact password via a crafted direct request to the partial-save endpoint...

Devolutions Server Authorization Issue Vulnerability

Devolutions Server 2026.3.8.0 and earlier versions have an authorization issue vulnerability. This vulnerability stems from improper access control of asset contact passwords. Certified users who have regular editing permissions but do not have editing rights for assets can modify asset contact...

CVE-2026-103536

A vulnerability was identified in ZongXR Supermarket 1.0.0.0. Affected by this vulnerability is the function OrderController.addOrder of the file order/src/main/java/com/supermarket/order/controller/OrderController.java of the component save Endpoint. Such manipulation of the argument userId lead...

CVE-2026-103536 ZongXR Supermarket save Endpoint OrderController.java OrderController.addOrder missing authentication

A vulnerability was identified in ZongXR Supermarket 1.0.0.0. Affected by this vulnerability is the function OrderController.addOrder of the file order/src/main/java/com/supermarket/order/controller/OrderController.java of the component save Endpoint. Such manipulation of the argument userId lead...

CVE-2026-103536

A vulnerability exists in ZongXR Supermarket 1.0.0.0 within the save Endpoint component. Specifically, the OrderController.addOrder function located in order/src/main/java/com/supermarket/order/controller/OrderController.java fails to perform proper authentication. An attacker can remotely execut...

EUVD-2026-90476

A vulnerability was identified in ZongXR Supermarket 1.0.0.0. Affected by this vulnerability is the function OrderController.addOrder of the file order/src/main/java/com/supermarket/order/controller/OrderController.java of the component save Endpoint. Such manipulation of the argument userId lead...

CVE-2026-103536 ZongXR Supermarket save Endpoint OrderController.java OrderController.addOrder missing authentication

A vulnerability was identified in ZongXR Supermarket 1.0.0.0. Affected by this vulnerability is the function OrderController.addOrder of the file order/src/main/java/com/supermarket/order/controller/OrderController.java of the component save Endpoint. Such manipulation of the argument userId lead...