Lucene search
+L

172 matches found

Kitploit
Kitploit
•added 2026/10/23 1:42 a.m.•33 views

moukthar

Moukthar Remote adminitration tool for android Demo Features Permissions bypass android 12 below Keylogger Notifications listener SMS listener Phone call recording Image capturing and screenshots Video recording Persistence Read & write contacts List installed applications Download & upload files...

6.4AI score
SaveExploits0
NVD
NVD
•added 2026/10/12 7:16 a.m.•20 views

CVE-2026-108809

A vulnerability was identified in Eleveo Call Recording Software up to 10.3.0. This issue affects some unknown processing of the file /auth/realms/default/protocol/openid-connect/logout. The manipulation leads to session expiration. Remote exploitation of the attack is possible. The exploit is...

5.1CVSS0.0018EPSS
SaveExploits0References4
NVD
NVD
•added 2026/10/12 7:16 a.m.•19 views

CVE-2026-108808

A vulnerability was determined in Eleveo Call Recording Software up to 10.3.0. This vulnerability affects unknown code of the file /auth/realms/default/protocol/openid-connect/logout of the component JWT Token Handler. Executing a manipulation of the argument idtokenhint can lead to use of get...

2.6CVSS0.00184EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/10/12 6:45 a.m.•13 views

EUVD-2026-97262

A vulnerability was identified in Eleveo Call Recording Software up to 10.3.0. This issue affects some unknown processing of the file /auth/realms/default/protocol/openid-connect/logout. The manipulation leads to session expiration. Remote exploitation of the attack is possible. The exploit is...

5.1CVSS4.9AI score0.0018EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/10/12 6:45 a.m.•39 views

CVE-2026-108809 Eleveo Call Recording Software logout session expiration

A vulnerability was identified in Eleveo Call Recording Software up to 10.3.0. This issue affects some unknown processing of the file /auth/realms/default/protocol/openid-connect/logout. The manipulation leads to session expiration. Remote exploitation of the attack is possible. The exploit is...

5.1CVSS0.0018EPSS
SaveExploits0References4
CVE
CVE
•added 2026/10/12 6:45 a.m.•15 views

CVE-2026-108809

Eleveo Call Recording Software versions up to 10.3.0 is affected by a vulnerability related to the insufficient session expiration (CWE-613). The issue stems from unknown processing of the file /auth/realms/default/protocol/openid-connect/logout , where manipulation can lead to unintended session...

5.1CVSS4.9AI score0.0018EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/10/12 6:30 a.m.•36 views

CVE-2026-108808 Eleveo Call Recording Software JWT Token logout get request method with sensitive query strings

A vulnerability was determined in Eleveo Call Recording Software up to 10.3.0. This vulnerability affects unknown code of the file /auth/realms/default/protocol/openid-connect/logout of the component JWT Token Handler. Executing a manipulation of the argument idtokenhint can lead to use of get...

2.6CVSS0.00184EPSS
SaveExploits0References4
CVE
CVE
•added 2026/10/12 6:30 a.m.•19 views

CVE-2026-108808

A vulnerability exists in Eleveo Call Recording Software up to version 10.3.0 within the JWT Token Handler component. Specifically, the file /auth/realms/default/protocol/openid-connect/logout is affected. By manipulating the id_token_hint argument, an attacker may cause the application to use th...

2.6CVSS4.1AI score0.00184EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/10/12 6:30 a.m.•13 views

EUVD-2026-97261

A vulnerability was determined in Eleveo Call Recording Software up to 10.3.0. This vulnerability affects unknown code of the file /auth/realms/default/protocol/openid-connect/logout of the component JWT Token Handler. Executing a manipulation of the argument idtokenhint can lead to use of get...

2.6CVSS4.2AI score0.00184EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/12 12:00 a.m.•10 views

CVE-2026-108808: Use of GET Request Method With Sensitive Query Strings

A vulnerability was determined in Eleveo Call Recording Software up to 10.3.0. This vulnerability affects unknown code of the file /auth/realms/default/protocol/openid-connect/logout of the component JWT Token Handler. Executing a manipulation of the argument idtokenhint can lead to use of get...

2.6CVSS4.2AI score0.00184EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/12 12:00 a.m.•8 views

CVE-2026-108809: Insufficient Session Expiration

A vulnerability was identified in Eleveo Call Recording Software up to 10.3.0. This issue affects some unknown processing of the file /auth/realms/default/protocol/openid-connect/logout. The manipulation leads to session expiration. Remote exploitation of the attack is possible. The exploit is...

5.1CVSS4.9AI score0.0018EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/12 12:00 a.m.•20 views

PT-2026-110482

Name of the Vulnerable Software and Affected Versions Eleveo Call Recording Software versions prior to 10.3.1 Description An issue exists in the JWT Token Handler component within the file /auth/realms/default/protocol/openid-connect/logout. A remote attacker can manipulate the id token hint...

2.6CVSS5.2AI score0.00184EPSS
SaveExploits0References7
NVD
NVD
•added 2026/09/28 9:17 p.m.•22 views

CVE-2026-101145

A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/userAddAction.do of the component User Management. Such manipulation of the argument Username leads to ldap injection. The attack can be executed remotely. The...

5.3CVSS0.00221EPSS
SaveExploits0References5
NVD
NVD
•added 2026/09/28 9:17 p.m.•15 views

CVE-2026-101144

A vulnerability was determined in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/searchAction.do of the component Query Builder. This manipulation causes improper access controls. Remote exploitation of the attack is possible. The exploit has been publicly...

6.5CVSS0.00201EPSS
SaveExploits0References5
NVD
NVD
•added 2026/09/28 8:17 p.m.•23 views

CVE-2026-101141

A flaw has been found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/audio.jsp of the component Play Audio Page. Executing a manipulation of the argument viewRoleId/cfType can lead to cross site scripting. The attack can be launched remotely. The...

5.1CVSS0.00191EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/28 8:15 p.m.•33 views

CVE-2026-101145

A vulnerability exists in Eleveo Call Recording Software 9.7.0 within the User Management component. Specifically, the file /callrec/userAddAction.do is susceptible to ldap injection due to the improper handling of the Username argument. This flaw can be exploited remotely . An exploit is publicl...

5.3CVSS5.4AI score0.00221EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/28 8:15 p.m.•14 views

CVE-2026-101145 Eleveo Call Recording Software User Management userAddAction.do ldap injection

A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/userAddAction.do of the component User Management. Such manipulation of the argument Username leads to ldap injection. The attack can be executed remotely. The...

5.3CVSS5.7AI score0.00221EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/28 8:15 p.m.•18 views

EUVD-2026-88480

A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/userAddAction.do of the component User Management. Such manipulation of the argument Username leads to ldap injection. The attack can be executed remotely. The...

5.3CVSS5.4AI score0.00221EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/28 8:15 p.m.•58 views

CVE-2026-101145 Eleveo Call Recording Software User Management userAddAction.do ldap injection

A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/userAddAction.do of the component User Management. Such manipulation of the argument Username leads to ldap injection. The attack can be executed remotely. The...

5.3CVSS0.00221EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/28 8:00 p.m.•51 views

CVE-2026-101144 Eleveo Call Recording Software Query Builder searchAction.do access control

A vulnerability was determined in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/searchAction.do of the component Query Builder. This manipulation causes improper access controls. Remote exploitation of the attack is possible. The exploit has been publicly...

6.5CVSS0.00201EPSS
SaveExploits0References5
Rows per page
Query Builder