CVE-2024-47138

The administrative interface listens by default on all interfaces on a TCP port and does not require authentication when being accessed...

Arbitrary file read in administrative interface

...

PT-2024-33073 · Unknown · Dingfanzu Cms

Name of the Vulnerable Software and Affected Versions: dingfanzu CMS version 1.0 Description: The issue is related to a Cross-Site Request Forgery CSRF in the /admin/doAdminAction.php endpoint, specifically when the act parameter is set to editAdmin and the id parameter is set to 17. This allows...

Transport Management System 1.0 Insecure Direct Object Reference

==================================================================================================================================== | Title : Transport Management System 1.0 idor Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.0 64 bits | |...

Event Management System 1.0 Insecure Direct Object Reference

============================================================================================================================================= | Title : Event Management System v1.0 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.0 64 bi...

Simbarashe Financial Services 2.9.0 Insecure Direct Object Reference

==================================================================================================================================== | Title : Simbarashe Financial Services v2.9.0 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bit...

Bhojon Restaurant Management System 3.0 Insecure Direct Object Reference

==================================================================================================================================== | Title : Bhojon restaurant management system v3.0 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64...

Kortex 1.0 Insecure Direct Object Reference

==================================================================================================================================== | Title : Kortex v1.0 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bits | | Vendor :...

Gaati Track 1.0-2023 Insecure Direct Object Reference

==================================================================================================================================== | Title : Gaati track v1.0-2023 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bits | | Vendor :...

Bhojon Restaurant Management System 2.8 Insecure Direct Object Reference

==================================================================================================================================== | Title : Bhojon restaurant management system v2.9 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64...

Bhojan Restaurant Management System 2.8 Insecure Direct Object Reference

==================================================================================================================================== | Title : Bhojon restaurant management system v2.8 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64...

Bhojon Restaurant Management System 2.7 Insecure Direct Object Reference

==================================================================================================================================== | Title : Bhojon restaurant management system v2.7 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64...

UBM CMS 1.2 Insecure Direct Object Reference

==================================================================================================================================== | Title : UBM CMS v1.2 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 128.0.1 64 bits | | Vendor :...

Quick Job 2.4 Insecure Direct Object Reference

==================================================================================================================================== | Title : Quick Job v2.4 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bits | | Vendor :...

The vulnerability of the administrative web interface of the Microprogrammable Ethernet switches from the Moxa EDS-405A and Moxa EDS-408A series allows attackers to circumvent security restrictions and gain increased privileges.

The vulnerability of the administrative web interface of Microprogramming Software for Ethernet switches of the Moxa EDS-405A and Moxa EDS-408A series is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain...

The vulnerability of the Diagnosis Ping function in the administrative web interface of the Ethernet switch microprogramming software from Moxa, models Moxa EDS-405A and Moxa EDS-408A, allows a hacker to execute arbitrary code.

The vulnerability of the Diagnosis Ping function in the administrative web interface of Microprogrammed Ethernet switches of the Moxa EDS-405A and Moxa EDS-408A series is related to insufficient protection of the web page structure. Exploiting this vulnerability allows a remote attacker to execut...

The vulnerability of INPAS SOFT UniPORT Eslip software, related to insufficient validation of input data, allows a perpetrator to gain access to the application’s administrative web interface.

The vulnerability of INPAS SOFT UniPORT Eslip software is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain access to the application’s administrative web interface remotely...

GHSA-2CWW-FGMG-4JQC Keycloak's admin API allows low privilege users to use administrative functions

Users with low privileges just plain users in the realm are able to utilize administrative functionalities within Keycloak admin interface. This issue presents a significant security risk as it allows unauthorized users to perform actions reserved for administrators, potentially leading to data...

CVE-2024-36787

An issue in Netgear WNR614 JNR1010V2 N300-V1.1.0.541.0.1 allows attackers to bypass authentication and access the administrative interface via unspecified vectors...

CVE-2024-36787

The CVE-2024-36787 entry concerns Netgear WNR614 routers (versions 1.1.0.54 and 1.0.1) where the authentication procedure contains weaknesses that allow bypassing authentication and gaining access to the administrative interface via unspecified vectors. The vulnerability is described across multi...