EUVD-2026-92136

A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file admin/donate.php. Executing a manipulation of the argument location can lead to sql...

CVE-2024-40617

CVE-2024-40617 针对 CVE-2024-40617 的利用 PoC 描述 有关详细描述，请参阅 Medium 文章 Fujitsu M2M GW1500：从 M2M 到 M2M2P0wn 用法 | / | \ | | \ / \ | |/| | | ' \ | | | | | \ \ /\ / / ' \ | | | |/ /| | | | | |/ /| /| || |\ V V /| | | | || |||| || |||| / // || || usage: CVE-2024-40617-PoC.py -h --version -t TARGET -p...

CVE-2026-76504-Proof-of-concept

Cisco Catalyst SD-WAN Manager — CVE-2026-76504 Bypass de autenticación no autenticado causado por un manejo incorrecto de la codificación de URL CWE-177 en la capa de gestión de sesiones de la API. Una solicitud manipulada alcanza un endpoint privilegiado y se trata como una sesión de administrad...

CVE-2026-105170

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected is an unknown function of the file admin/signup.php of the component Admin Signup. This manipulation of the argument sign causes...

CVE-2026-105168

A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file admin/admin.php of the component Order Assignment Block. The manipulation of the argument...

CVE-2026-105171

A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functionality of the file admin/admin.php of the component Role Attribute Handler...

CVE-2026-88397

ApiAdmin v.5.0 and before is vulnerable to SQL Injection in the user-list endpoint GET /admin/User/getUsers via the gid parameter...

EUVD-2026-92468

ApiAdmin v5.0 and before is vulnerable to Directory Traversal. The admin file-upload endpoint POST /admin/Index/upload in ApiAdmin takes the uploaded file's extension verbatim there is no whitelist, blacklist or content check and moveuploadedfile drops the file into the web-accessible directory...

CVE-2026-88396

ApiAdmin versions v5.0 and before are vulnerable to a Directory Traversal flaw in the admin file-upload endpoint (POST /admin/Index/upload ). The application fails to implement a whitelist, blacklist, or content check on uploaded files, accepting the provided file extension verbatim. Consequently...

PT-2026-106239

Name of the Vulnerable Software and Affected Versions Camunda versions 7.24.0 through 7.24.14 Description An incorrect authorization issue exists in the Admin web application's first-run setup endpoint. The SetupResource incorrectly determines if the setup process is available by counting only...

CVE-2026-88396

ApiAdmin v5.0 and before is vulnerable to Directory Traversal. The admin file-upload endpoint POST /admin/Index/upload in ApiAdmin takes the uploaded file's extension verbatim there is no whitelist, blacklist or content check and moveuploadedfile drops the file into the web-accessible directory...

EUVD-2026-92467

ApiAdmin v.5.0 and before is vulnerable to SQL Injection in the user-list endpoint GET /admin/User/getUsers via the gid parameter...

CVE-2026-88397

The software ApiAdmin version 5.0 and before is vulnerable to SQL Injection (CWE-89) within the user-list endpoint. The vulnerability is located in the GET /admin/User/getUsers functionality and is triggered via the gid parameter. An attacker could potentially exploit this to perform unauthorized...

DotCMS-CVE-2022-45782

CVE-2022-45782 – Previsibilidad del token de restablecimiento de contraseña de dotCMS PoC Este repositorio contiene un exploit de prueba de concepto para CVE-2022-45782, una vulnerabilidad en dotCMS donde los tokens de restablecimiento de contraseña se generan utilizando el método no criptográfic...

CVE-2024-57523.

CVE-2024-57523 - Vulnerabilidad CSRF en Users.php - SourceCodester Packers and Movers Management System 1.0 Descripción Este repositorio contiene una Prueba de Concepto PoC para una vulnerabilidad de Falsificación de Solicitudes entre Sitios CSRF en el Packers and Movers Management System 1.0 de...

CVE-2026-105171

A security vulnerability exists in the Role Attribute Handler component of the kishor-23 food-waste-management-system (specifically within the file admin/admin.php). The flaw is caused by improper authorization, where manipulation of the Name argument leads to an authorization bypass . This vulne...

CVE-2026-105171 kishor-23 food-waste-management-system Role Attribute admin.php authorization

A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functionality of the file admin/admin.php of the component Role Attribute Handler...

CVE-2026-105170 kishor-23 food-waste-management-system Admin Signup signup.php missing authentication

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected is an unknown function of the file admin/signup.php of the component Admin Signup. This manipulation of the argument sign causes...

CVE-2026-105170

A vulnerability exists in the kishor-23 food-waste-management-system within the Admin Signup component. An unknown function in the file admin/signup.php allows for missing authentication due to the manipulation of the sign argument. This flaw can be exploited remotely , and a public exploit is av...

CVE-2020-24033

La última versión de fs.com S3900 24T4S 1.7.1 y todas las versiones anteriores, CSRF en el administrador del backstage El formulario no cuenta con un mecanismo de autenticación ni de autenticación por token, por lo que existe una Cross-Site Request Forgery Agregar cuenta de usuario para añadir un...