90040 matches found
CVE-2026-56169
Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network...
CVE-2026-36214
osTicket versions from 1.10 up to 1.17.7 and from 1.18.0 up to 1.18.3 are vulnerable to a stored XSS due to a vulnerable Bootstrap Tooltip component and insufficient HTML sanitization, allowing remote attackers to execute arbitrary JavaScript in Agent or Admin sessions...
CVE-2026-15703
A vulnerability was detected in SourceCodester Simple and Nice Shopping Cart Script 1.0. This vulnerability affects unknown code of the file /admin/userproductdeletequery.php. Performing a manipulation of the argument userid results in sql injection. It is possible to initiate the attack remotely...
CVE-2026-15429
A privilege escalation vulnerability exists in the HTTP authentication component in Archer VX1800v v1. Improper handling of user-controlled input may allow newline characters to be injected into internally constructed configuration data. An authenticated user with sufficient privileges may be abl...
GHSA-5QMH-X653-G8QJ FacturaScripts: Authenticated SQL injection in the FacturaScripts REST API filter parameter via parenthesis bypass in `Where::sqlColumn`
Summary Live PoC verified 2026-04-30 against a stock FacturaScripts master at 127.0.0.1:8081. A scoped ApiKey with fullaccess=0 and an ApiAccess row granting allowget=1 on the clientes resource only no other rights, no UI session, no admin issued one GET /api/3/clientes?filter0UNION%20SELECT%20.....
CVE-2026-56197 Windows Admin Center (WAC) Remote Code Execution Vulnerability
...
CVE-2026-56197
The CVE-2026-56197 entry describes a remote code execution in Windows Admin Center caused by improper neutralization of special elements used in a command (command injection). The NVD entry states threat is network-based with an 8.8 CVSS v3.1 base score (High) and that an authenticated attacker w...
CVE-2026-56197 Windows Admin Center (WAC) Remote Code Execution Vulnerability
...
CVE-2026-56196 Windows Admin Center (WAC) Remote Code Execution Vulnerability
...
CVE-2026-56196
CVE-2026-56196 affects Windows Admin Center (WAC). It describes a relative path traversal vulnerability that allows an attacker with network access to execute code on the target system. The NVD entry lists CVSS v3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H with base score 8.8 (HIGH). Connected source...
EUVD-2026-44251
Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network...
CVE-2026-56196 Windows Admin Center (WAC) Remote Code Execution Vulnerability
...
CVE-2026-58631 Windows Admin Center (WAC) Remote Code Execution Vulnerability
...
CVE-2026-58631 Windows Admin Center (WAC) Remote Code Execution Vulnerability
...
CVE-2026-58631
CVE-2026-58631 involves Windows Admin Center where improper authorization allows an authorized attacker to execute code locally. The available sources describe a local attack vector with high impact (C:H/I:H/A:H) and a CVSS v3.1 base score of 7.8, indicating remote code execution risk within the ...
CVE-2026-57107
Summary: CVE-2026-57107 is an elevation-of-privilege flaw due to improper authentication in Windows Admin Center. An authorized local attacker can escalate privileges. The CVSS v3.1 base score is 7.8 (HIGH), with local attack vector, low complexity, and high impacts on confidentiality, integrity,...
CVE-2026-57107 Windows Admin Center Elevation of Privilege Vulnerability
...
CVE-2026-57107 Windows Admin Center Elevation of Privilege Vulnerability
...