Leantime < 2.4 - Authenticated SQL Injection

Leantime is an open source project management system. A 'userId' variable in app/domain/files/repositories/class.files.php is not parameterized. An authenticated attacker can send a carefully crafted POST request to /api/jsonrpc to exploit an SQL injection vulnerability. Confidentiality is impact...

CVE-2026-97721

A weakness has been identified in Sanluan PublicCMS up to 6.202506.e. This vulnerability affects the function CmsContentAdminController of the file publiccms-parent/publiccms-core/src/main/java/com/publiccms/controller/admin/sys/SysUserAdminController.java of the component exportExcel/exportData...

CVE-2026-97721

A vulnerability exists in Sanluan PublicCMS up to version 6.202506.e . The flaw is located in the CmsContentAdminController function within the file publiccms-parent/publiccms-core/src/main/java/com/publiccms/controller/admin/sys/SysUserAdminController.java of the exportExcel/exportData component...

EUVD-2026-86467

A weakness has been identified in chillzhuang SpringBlade up to 5.0.2. This affects the function UserServiceImpl.userInfo of the file blade-service/blade-system/src/main/java/org/springblade/system/service/impl/UserServiceImpl.java of the component user-auth-info Endpoint. This manipulation of th...

CVE-2023-34732

CVE-2023-34732 認証済み機能の悪用によるアカウント乗っ取り 説明 攻撃者は、パスワード変更機能の userId パラメータを使用して、任意のユーザー（管理者を含む）のパスワードをブルートフォースし、ユーザーのパスワードを攻撃者が選択した新しいパスワードに更新することができます。 CVSS スコア: 8.8（高） 攻撃種別 リモート（認証済み） 影響を受けるバージョン v0.0.1 以前のバージョン 製品ベンダー Flytxt - NEON-dX 影響を受ける製品コードベース NEON-dX - v0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c...

CVE-2023-46980

CVE-2023-46980 Best Courier Management System v.1.000 における問題により、リモート攻撃者が細工したスクリプトを userID パラメータに渡すことで、任意のコードを実行し、特権を昇格させることが可能です。 追加情報 YT のビデオ POC リンク ; https://youtu.be/3Mz2lSElg7Y 脆弱性タイプ 不適切なアクセス制御 - アカウント乗っ取り 影響を受けるコンポーネント ユーザー名とパスワードを更新できるユーザー更新フォーム 攻撃ベクトル パスワードリセットで簡単に取得できるユーザーIDが必要です。 発見者...

CVE-2026-94532 lamp-cloud through 5.10.0 Unauthorized User Profile Access via getUserInfoById

lamp-cloud through 5.10.0 contains an authorization bypass vulnerability in the getUserInfoById endpoint that allows authenticated users to read any other user's full profile. Attackers can iterate the userId parameter to harvest sensitive user information including mobile numbers, email addresse...

easy-file-share-7.2-exploit-CVE-2018-9059

easy-file-share-7.2-exploit-CVE-2018-9059 Easy File Sharing Web Server 7.2 - 'UserID' を用いた自作 'DEP' バイパス版（私のバージョン） Win 7 Ultimate x86 でテスト済み...

CVE-2026-63647

CordysCRM (open-source AI-powered CRM) prior to 1.7.2 contains an authentication bypass in its SseController . The ShiroFilter.addPublicPathFilters method permits the /sse/subscribe, /sse/broadcast, and /sse/close endpoints to be accessed anonymously, and these endpoints trust a caller-controlled...

CVE-2026-52825: Improper Authorization

Kimai is an open-source time tracking application. Prior to 2.58.0, POST /api/teams/id/members/userId and POST /api/teams/id/activities/activityId verify that a teamlead may edit the Team but do not verify accessuser for the referenced User or view access for the referenced Activity. A teamlead c...

Astra Linux – Vulnerability in Apache2

A vulnerability in the Apache HTTP Server’s AllowOverride FileInfo directive allows for bypassing moduserdir+suexec. Users who have access to use the RequestHeader directive in htaccess can cause certain CGI scripts to run under an unexpected userid. This issue affects the Apache HTTP Server...

EUVD-2026-77128

A vulnerability was detected in jaygajera17 E-commerce-project-springBoot up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. The impacted element is the function UserController.updateUser of the file UserController.java. Performing a manipulation of the argument userid results in authorization bypas...

CVE-2026-90598

A vulnerability was detected in jaygajera17 E-commerce-project-springBoot up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. The impacted element is the function UserController.updateUser of the file UserController.java. Performing a manipulation of the argument userid results in authorization bypas...

CVE-2026-90598

This authorization bypass in jaygajera17 E-commerce-project-springBoot affects the UserController.updateUser function in UserController.java . An attacker with low privileges can remotely manipulate the userid argument to bypass authorization, resulting in low impact on confidentiality, integrity...

CVE-2026-90598 jaygajera17 E-commerce-project-springBoot UserController.java UserController.updateUser authorization

A vulnerability was detected in jaygajera17 E-commerce-project-springBoot up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. The impacted element is the function UserController.updateUser of the file UserController.java. Performing a manipulation of the argument userid results in authorization bypas...

CVE-2026-90598 jaygajera17 E-commerce-project-springBoot UserController.java UserController.updateUser authorization

A vulnerability was detected in jaygajera17 E-commerce-project-springBoot up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. The impacted element is the function UserController.updateUser of the file UserController.java. Performing a manipulation of the argument userid results in authorization bypas...

CVE-2026-90565

A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is an unknown function of the file dashboard.php. Performing a manipulation of the argument userid results in improper access controls. It is possible to initiate t...

CVE-2026-90565 Rizwan17 inventory-management-system dashboard.php access control

A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is an unknown function of the file dashboard.php. Performing a manipulation of the argument userid results in improper access controls. It is possible to initiate t...

CVE-2026-90565 Rizwan17 inventory-management-system dashboard.php access control

A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is an unknown function of the file dashboard.php. Performing a manipulation of the argument userid results in improper access controls. It is possible to initiate t...

EUVD-2026-77039

A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is an unknown function of the file dashboard.php. Performing a manipulation of the argument userid results in improper access controls. It is possible to initiate t...