CVE-2026-48492: Missing Authorization

Snipe-IT is an IT asset/license management system. Prior to version 8.6.1, the GET /api/v1/object/selectlist API endpoint is missing an authorization check. Any user who can log into Snipe-IT - regardless of permissions - can retrieve a paginated list of all user accounts using only their web...

EUVD-2021-19440

Malware in sbrugna...

CVE-2022-30730

Improper authorization in Samsung Pass prior to 1.0.00.33 allows physical attackers to acess account list without authentication...

CVE-2022-36876

Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access account list without authentication...

PT-2025-14830 · Tenda · Tenda W18E

Name of the Vulnerable Software and Affected Versions: Tenda W18E version 16.01.0.11 Description: A problematic vulnerability was found in Tenda W18E, affecting the formSetAccountList function of the file /goform/setModules. The manipulation of the Password argument leads to a stack-based buffer...

CVE-2022-36876

Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access account list without authentication...

CVE-2022-36876

Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access account list without authentication...

PT-2022-23680 · Samsung · Samsung Pass

Name of the Vulnerable Software and Affected Versions: Samsung Pass versions prior to 4.0.04.10 Description: The issue is related to improper authorization in UPI payment, allowing physical attackers to access the account list without authentication. Recommendations: For versions prior to...

CVE-2022-36876: Improper Authorization

Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access account list without authentication...

CVE-2022-30730

Improper authorization in Samsung Pass prior to 1.0.00.33 allows physical attackers to acess account list without authentication...

Authorization

Improper authorization in Samsung Pass prior to 1.0.00.33 allows physical attackers to acess account list without authentication...

CVE-2022-30730

Samsung Pass contains an authorization issue in versions prior to 1.0.00.33 that could allow a physical attacker to access the account list without authentication. Affected software is Samsung Pass prior to 1.0.00.33; root cause is improper authorization. Evidence across sources (e.g., PT-2022-20...

CVE-2022-30730: Improper Authorization

Improper authorization in Samsung Pass prior to 1.0.00.33 allows physical attackers to acess account list without authentication...

PT-2022-20268 · Samsung · Samsung Pass

Name of the Vulnerable Software and Affected Versions: Samsung Pass versions prior to 1.0.00.33 Description: The issue is related to improper authorization, allowing physical attackers to access the account list without authentication. This could potentially expose sensitive information...

PT-2021-6854

Name of the Vulnerable Software and Affected Versions FortiOS versions 5.6.x FortiOS versions 6.0.x FortiOS versions 6.2.0 through 6.2.9 FortiOS versions 6.4.0 through 6.4.6 FortiOS version 7.0.0 Description The issue is related to insufficient access control in the FortiOS CLI, allowing a local...

DMXReady Account List Manager 1.2 - SQL Injection Vulnerability

No description provided by source. Exploit Title: DMXReady Account List Manager v1.2 SQL Injection Vulnerability Google Dork: inurl:incbillboardmanagersummarypopup.asphttp://demo.dmxready.com/applications/CatalogManager/inccatalogmanager.asp Date: 03.07.2011 Author: Bellatrix Software Link:...

PT-2013-2442

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Replication Server versions 9.7 through 10.2.0.0-b113 Description The issue allows remote attackers to obtain a list of all user accounts, along with information about whether each account requires a password. Recommendations Fo...

DMXReady Account List Manager v1.2 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: DMXReady Account List Manager v1.2 SQL Injection Vulnerability Google Dork: inurl:incbillboardmanagersummarypopup.asp Date: 03.07.2011 Author: Bellatrix Software Link: http://www.dmxready.com/?product=account-list-manager Versio...

DMXReady Account List Manager 1.2 - SQL Injection

DMXReady Account List Manager 1.2 - SQL Injection Exploit Title: DMXReady Account List Manager v1.2 SQL Injection Vulnerability Google Dork: inurl:incbillboardmanagersummarypopup.asp Date: 03.07.2011 Author: Bellatrix Software Link: http://www.dmxready.com/?product=account-list-manager Version:...

DMXReady Account List Manager 1.2 - SQL Injection

Exploit Title: DMXReady Account List Manager v1.2 SQL Injection Vulnerability Google Dork: inurl:incbillboardmanagersummarypopup.asp Date: 03.07.2011 Author: Bellatrix Software Link: http://www.dmxready.com/?product=account-list-manager Version: v1.2 Language: ASP Price : $99.97 Demo :...