1287 matches found
Powertek Firmware <3.30.30 - Authorization Bypass
Powertek firmware multiple brands before 3.30.30 running Power Distribution Units are vulnerable to authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface /cgi/getparam.cgi with the tmpToken cookie set to an...
Event Booking Manager for WooCommerce <= 5.3.6 - PHP Object Injection
Event Booking Manager for WooCommerce WordPress plugin = 5.3.6 contains an insecure deserialization vulnerability caused by deserialization of user-controlled input in event content fields, letting users with Contributor-level access inject PHP objects, potentially leading to arbitrary file...
androrat
androrat Remote Administration Tool for Android Androrat is a client/server application developed in Java Android for the client side and in Java/Swing for the Server. The name Androrat is a mix of Android and RAT Remote Access Tool. It has been developed in a team of 4 for a university project. ...
nmap
Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...
kyocera-cve-2022-1026_SOAP1.1
Kyocera cve-2022-1026 soap1.1 Authorized testing only. This project is provided for educational and defensive validation purposes in environments you own or have explicit permission to test. Do not use against systems you do not own or administer. A Kyocera printer exposure check and data-retriev...
CVE-2025-31161
CVE-2025-31161 is a critical severity vulnerability allowing attackers to control how user authentication is handled by CrushFTP managed file transfer MFT software. Affected versions: 10.0.0 through 10.8.3 and 11.0.0 through 11.3.0 Exploit summary: Remote and unauthenticated HTTP requests to...
EUVD-2026-122882
Winter CMS is a content management system built on the Laravel PHP framework. Prior to 1.2.14, the ImportExportController behavior applies userHasAccess only to the import and export page actions, while Backend\Classes\Controller::execAjaxHandlers dispatches onImport, onImportLoadForm,...
gdog
Gdog A stealthy Python based Windows backdoor that uses Gmail as a command and control server This project was inspired by the gcathttps://github.com/byt3bl33d3r/gcat from byt3bl33d3r. Requirements Python 2.x PyCrypto module WMI module Enum34 module Netifaces module Features Encrypted...
CVE-2026-124316 Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_linked_material_requests
Frappe ERPNext before 15.121.4 and 16.x before 16.36.0 contains a missing authorization vulnerability in the whitelisted erpnext.buying.utils.getlinkedmaterialrequests method lacking document or company permission checks. Authenticated users, including portal users or users without roles, can...
CVE-2026-124316
Frappe ERPNext versions prior to 15.121.4 and 16.36.0 are vulnerable to a missing authorization flaw in the erpnext.buying.utils.get_linked_material_requests method. The root cause is a lack of document or company permission checks, allowing authenticated users—including portal users or those wit...
CVE-2026-124316 Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_linked_material_requests
Frappe ERPNext before 15.121.4 and 16.x before 16.36.0 contains a missing authorization vulnerability in the whitelisted erpnext.buying.utils.getlinkedmaterialrequests method lacking document or company permission checks. Authenticated users, including portal users or users without roles, can...
CVE-2026-124316 Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_linked_material_requests
Frappe ERPNext before 15.121.4 and 16.x before 16.36.0 contains a missing authorization vulnerability in the whitelisted erpnext.buying.utils.getlinkedmaterialrequests method lacking document or company permission checks. Authenticated users, including portal users or users without roles, can...
CVE-2026-119499
Insertion of Sensitive Information Into Sent Data vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion allows Retrieve Embedded Sensitive Data.This issue affects FloristPress: from n/a through 7.8.4...
CVE-2026-108710
A flaw was found in NornicDB. An authorization bypass vulnerability allows an authenticated user to circumvent per-database read restrictions through search and similarity endpoints. By submitting search queries or specific node identifiers, a user who is otherwise restricted from reading databas...
Astra Linux – vulnerability in Chromium
In Google Chrome versions prior to 153.0.8010.47, a race condition in the Network component allowed a remote attacker who had compromised the renderer process to retrieve cross-origin data via a specially crafted HTML page. Chromium security severity: High...
Drupal Content Sync authorization issue vulnerability
Drupal Content Sync versions 0.0.0 through 3.2.2 contain an authorization issue vulnerability. This vulnerability stems from insecure storage of sensitive information, potentially allowing retrieval of embedded sensitive data...
Drupal Artificial Intelligence authorization issue vulnerability
Drupal Artificial Intelligence versions prior to 0.0.0 and 1.4.11, as well as versions prior to 1.5.0 and 1.5.2, contain an authorization issue vulnerability. This vulnerability stems from improper storage of sensitive information, potentially allowing unauthorized retrieval of embedded sensitive...
Linux Distros Unpatched Vulnerability : CVE-2026-118681
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - go-chi chi before 5.5.0 contains an authentication bypass in middleware.SupressNotFound, which calls Match with the live routing context and leaves a mounted...
UBUNTU-CVE-2026-118681
go-chi chi before 5.5.0 contains an authentication bypass in middleware.SupressNotFound, which calls Match with the live routing context and leaves a mounted router's parameter and child suffix in place for dispatch against the outer router. Unauthenticated attackers can request a mounted path...