Lucene search
+L

90676 matches found

ATTACKERKB
ATTACKERKB
added 2026/06/04 11:30 p.m.11 views

CVE-2026-10876

A weakness has been identified in SourceCodester Ship Ferry Ticket Reservation System 1.0. This affects an unknown function of the file /admin/. This manipulation of the argument page causes improper authorization. Remote exploitation of the attack is possible. The exploit has been made available...

6.5CVSS6.3AI score0.0027EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2026/06/04 11:16 p.m.14 views

CVE-2026-10874

A vulnerability was identified in projectworlds Online Art Gallery Shop Project 1.0. The affected element is an unknown function of the file /admin/adminHome.php. The manipulation of the argument socialinsta leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

6.5CVSS0.00303EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/06/04 11:0 p.m.47 views

CVE-2026-10875 projectworlds Online Art Gallery Shop Project adminHome.ph sql injection

A security flaw has been discovered in projectworlds Online Art Gallery Shop Project 1.0. The impacted element is an unknown function of the file /admin/adminHome.ph. The manipulation of the argument socialtwitter results in sql injection. The attack may be launched remotely. The exploit has been...

6.5CVSS0.00303EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/06/04 10:45 p.m.48 views

CVE-2026-10874 projectworlds Online Art Gallery Shop Project adminHome.php sql injection

A vulnerability was identified in projectworlds Online Art Gallery Shop Project 1.0. The affected element is an unknown function of the file /admin/adminHome.php. The manipulation of the argument socialinsta leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

6.5CVSS0.00303EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2026/06/04 7:36 p.m.21 views

Shopware: SSRF in Media External-Link Endpoint Bypasses IP Validation

Summary The /api/action/media/external-link endpoint allows authenticated admin users to make server-side HTTP HEAD requests to arbitrary internal IP addresses. While the parallel uploadFromURL flow validates target IPs against private/reserved ranges via FileUrlValidator, the linkURL flow only...

4.1CVSS5.9AI score0.00214EPSS
SaveExploits0References3Affected Software2
Github Security Blog
Github Security Blog
added 2026/06/04 7:33 p.m.23 views

Shopware: Admin API ACL Bypass in Order State Transition Endpoints

Summary This is a vertical authorization bypass in the Admin API affecting order state transition features /api/action/order/orderId/state/transition and similar transaction/delivery transition routes. The root cause is that the transition action routes do not declare required server-side ACL...

6.5CVSS5.9AI score0.00233EPSS
SaveExploits0References4Affected Software2
OSV
OSV
added 2026/06/04 7:33 p.m.16 views

GHSA-F8Q6-3G5W-JJR6 Shopware: Admin API ACL Bypass in Order State Transition Endpoints

Summary This is a vertical authorization bypass in the Admin API affecting order state transition features /api/action/order/orderId/state/transition and similar transaction/delivery transition routes. The root cause is that the transition action routes do not declare required server-side ACL...

6.5CVSS5.9AI score0.00233EPSS
SaveExploits0References4
OSV
OSV
added 2026/06/04 7:31 p.m.15 views

GHSA-7W52-7JVM-M9VW Shopware: Timing-attack on admin panel allowing enumeration of administrator usernames

Summary There is a Proof of Concept which is able to enumerate the usernames of administrator users. This was possible by performing a timing attack. Details The faulty code exists in src/Core/Framework/Api/OAuth/UserRepository.php: public function getUserEntityByUserCredentials string $username,...

3.7CVSS5.8AI score0.00223EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2026/06/04 7:31 p.m.16 views

Shopware: Timing-attack on admin panel allowing enumeration of administrator usernames

Summary There is a Proof of Concept which is able to enumerate the usernames of administrator users. This was possible by performing a timing attack. Details The faulty code exists in src/Core/Framework/Api/OAuth/UserRepository.php: public function getUserEntityByUserCredentials string $username,...

3.7CVSS5.8AI score0.00223EPSS
SaveExploits0References5Affected Software2
OSV
OSV
added 2026/06/04 7:28 p.m.14 views

GHSA-V39M-97P8-GQG7 Shopware: Privilege escalation: non-admin user with user:create ACL can create admin accounts

UserController::upsertUser writes user data in SYSTEMSCOPE and does not filter the admin field. A non-admin API user with user:create or user:update ACL permission can set admin: true on new or existing users, escalating to full admin access. The Problem In...

6.5CVSS5.8AI score0.00264EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/06/04 7:28 p.m.25 views

Shopware: Privilege escalation: non-admin user with user:create ACL can create admin accounts

UserController::upsertUser writes user data in SYSTEMSCOPE and does not filter the admin field. A non-admin API user with user:create or user:update ACL permission can set admin: true on new or existing users, escalating to full admin access. The Problem In...

6.5CVSS5.8AI score0.00264EPSS
SaveExploits0References4Affected Software2
Snyk
Snyk
added 2026/06/04 7:28 p.m.11 views

Improper Privilege Management

Overview shopware/core is a Shopware platform is the core for all Shopware ecommerce products. Affected versions of this package are vulnerable to Improper Privilege Management via the upsertUser function. An attacker can gain unauthorized administrative privileges by creating or updating user...

8.5CVSS5.8AI score0.00264EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/04 7:27 p.m.8 views

Weak Password Recovery Mechanism for Forgotten Password

Overview shopware/platform is a Shopware e-commerce core. Affected versions of this package are vulnerable to Weak Password Recovery Mechanism for Forgotten Password in the userrecovery process. An attacker can gain unauthorized access to any admin account by triggering a password recovery for th...

7.6CVSS5.8AI score0.00272EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/04 7:27 p.m.7 views

Weak Password Recovery Mechanism for Forgotten Password

Overview shopware/core is a Shopware platform is the core for all Shopware ecommerce products. Affected versions of this package are vulnerable to Weak Password Recovery Mechanism for Forgotten Password in the userrecovery process. An attacker can gain unauthorized access to any admin account by...

7.6CVSS5.8AI score0.00272EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/06/04 7:27 p.m.17 views

Shopware: Admin Account Takeover via User Recovery Hash Exposure

Summary A low-privilege admin user with userrecovery:read ACL can take over any admin account. The attacker triggers password recovery for the victim unauthenticated endpoint, reads the recovery hash from the Admin API search endpoint, then uses the hash to reset the victim's password another...

6.8CVSS5.8AI score0.00272EPSS
SaveExploits0References4Affected Software2
OSV
OSV
added 2026/06/04 7:27 p.m.17 views

GHSA-8V9P-G828-V98F Shopware: Admin Account Takeover via User Recovery Hash Exposure

Summary A low-privilege admin user with userrecovery:read ACL can take over any admin account. The attacker triggers password recovery for the victim unauthenticated endpoint, reads the recovery hash from the Admin API search endpoint, then uses the hash to reset the victim's password another...

6.8CVSS5.8AI score0.00272EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/06/04 7:23 p.m.21 views

Shopware: Privilege Escalation via Sync API Integration Admin Flag Bypass

Summary A non-admin API user with integration:create ACL privilege can escalate to full administrator by creating an integration with admin: true through the Sync API POST /api/action/sync. The regular integration endpoint POST /api/integration correctly blocks this, but the Sync API bypasses the...

6.5CVSS5.9AI score0.00264EPSS
SaveExploits0References4Affected Software2
OSV
OSV
added 2026/06/04 7:23 p.m.16 views

GHSA-GV8P-48FR-4FXG Shopware: Privilege Escalation via Sync API Integration Admin Flag Bypass

Summary A non-admin API user with integration:create ACL privilege can escalate to full administrator by creating an integration with admin: true through the Sync API POST /api/action/sync. The regular integration endpoint POST /api/integration correctly blocks this, but the Sync API bypasses the...

6.5CVSS5.9AI score0.00264EPSS
SaveExploits0References4
Snyk
Snyk
added 2026/06/04 7:23 p.m.9 views

Missing Authorization

Overview shopware/core is a Shopware platform is the core for all Shopware ecommerce products. Affected versions of this package are vulnerable to Missing Authorization via the Sync API process. An attacker can gain unauthorized administrative privileges by creating an integration with elevated...

8.5CVSS5.8AI score0.00264EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/04 6:57 p.m.11 views

Cross-site Scripting (XSS)

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Cross-site Scripting XSS via the pagetitle parameter in the WebSocket connection URL, which is broadcast to all connected clients without proper validation or...

9.6CVSS5.9AI score0.00303EPSS
SaveExploits0References2
Rows per page
Query Builder