RISE-Ultimate_Project_Manager_e_CRM

CVE-2025-3855 - RISE Ultimate Project Manager - IDOR Security vulnerability: IDOR Insecure Direct Object Reference Affected Component: profile image upload endpoint, teammembers controller Software: RISE - Ultimate Project Manager & CRM Vendor: codecanyon Version: 3.8.2 CVE ORG :...

CVE-2024-13479

CVE-2024-13479 LTL货运报价 – SEFL版 = 5.6 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause GTIDSUBSET Payload: action=enwdeditwarehouse&editid=1 AND GTIDSUBSETCONCAT0x7170787171,SELECT ELT3874=3874,1,0x717a627171,3874&wpnonce=13db5f2e7d Type: time-based blind Title: MySQL = 5.0.12 AND...

CVE-2024-13481

CVE-2024-13481 LTL Freight Quotes – R+L Carriers Edition = 5.6 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause GTIDSUBSET Payload: action=enwdeditwarehouse&editid=1 AND GTIDSUBSETCONCAT0x7170787171,SELECT ELT3874=3874,1,0x717a627171,3874&wpnonce=13db5f2e7d Type: time-based blind Titl...

CVE-2022-39196-

CVE-2022-39196 Black board CMS 权限提升 Blackboard Learn 1.10.1 版本允许远程认证用户通过输入学生凭证并直接访问特定 webapps/bbcms/execute/ URL 来读取非预期的文件。 附加信息 步骤1：使用学生凭证权限。用户名： 及密码： 进行登录。 步骤2：使用"学生"账户权限成功登录后。 步骤3：然后请求"漏洞的URL/位置"。 步骤4：无需任何权限要求，直接将会话从"学生"提升为"竞赛管理系统"权限。 漏洞类型 敏感数据泄露 产品供应商 Blackboard Learn LMS 受影响产品代码库 LMS - 1.10....

CVE-2026-100715

Froxlor through 2.3.10 is vulnerable to arbitrary file deletion via symlink following in the FTP data deletion cron task. Cron task 8 deleteFtpData, queued when an FTP account is deleted, calls FileDir::makeCorrectDir without the $fixedhomedir argument, so the symlink component walk is skipped, a...

CVE-2026-100685

Budibase before 3.45.0 fails to properly scope the GET /api/chat-links endpoint by workspace, allowing builders to enumerate chat identity link records across all workspaces in a tenant. Attackers with builder access to a single workspace can retrieve sensitive chat identity linking data includin...

CVE-2026-100673

The Grav Data Manager plugin getgrav/grav-plugin-datamanager versions 1.0.1 through 1.4.4 render stored data entries in the item-detail view admin/templates/partials/item.html.twig without escaping, applying Twig's raw filter — in some cases after a striptags'' call that PHP's striptags bypasses ...

CVE-2026-100669

Grav before 2.0.25 ships web server configuration samples whose access-control deny rules are matched case-sensitively. In webserver-configs/web.config IIS, every deny rule usersensitivefolders, useraccounts, userdata, usererrorredirect, userpages, system, vendor, ignorefolders sets...

CVE-2026-100632

Parse Server is an open-source backend server. In versions = 9.0.0 and 9.10.1-alpha.8, and in versions 8.6.89, LiveQuery evaluates the protectedFields class-level permission against an incompletely resolved caller identity: the subscriber's roles are not resolved, and when a subscription does not...

CVE-2026-100631

Parse Server is an open source backend server. In versions prior to 8.6.90 and in versions from 9.0.0 prior to 9.10.1-alpha.9, the device token deduplication logic for installation records does not validate the type of client-supplied installation fields before using them to build database querie...

CVE-2024-41290

CVE-2024-41290 发现 FlatPress CMS v1.3.1 1.3 使用不安全的方法存储认证数据 附加信息： FlatPress CMS 1.3.1 版本将包括用户名和密码哈希在内的认证相关数据不安全地直接存储在客户端 Cookie 中。这种做法使敏感信息面临攻击者未经授权访问和篡改的风险。 产品厂商： 在 Cookie 中不安全地存储认证数据 受影响产品代码库： FlatPress CMS version 1.3.1 - 1.3 受影响组件： Cookie 影响： 用户名和密码哈希暴露在客户端 Cookie 中，可能被未经授权方访问或修改。 如果攻击者获得这些...

[SECURITY] [DLA 4797-1] lemonldap-ng security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4797-1 [email protected] https://www.debian.org/lts/security/ Xavier Guimard September 26, 2026 https://wiki.debian.org/LTS -...

CVE-2026-100699

A flaw was found in nodemailer. The address parser incorrectly processes email addresses containing quoted local parts followed by comments, allowing trailing domain text to be retained in the normalized address. A remote attacker could supply a crafted recipient address to inject malformed domai...

CVE-2021-32789

CVE-2021-32789 认证盲SQL注入。WordPress woocommerce插件版本 = 2.5.0 安装 git clone https://github.com/DonVorrin/CVE-2021-32789.git cd CVE-2021-32789 sudo pip install -r requirements.txt 利用 python3 exploit.py Enter URL: Example: http://exploit.cve/ Enter number: 1 - Output tables | 2 - Output tables + columns...

BLE-TPMS

CVE-2024-39081 链接: https://vulners.com/cve/CVE-2024-39081 基于BLE的TREEL TPMS（自行车胎压监测系统） 在这里，我们执行并解释了通过蓝牙进行的TPMS数据操控。我们可以通过蓝牙向应用用户发送虚假警报。详细漏洞发现和分析结果已存储在仓库中。 文件名 - https://github.com/Amirasaiyad/BLE-TPMS/blob/main/TreelBLETPMSPenetrationTestingReport.pdf 关于产品 TREEL TPMS（由JK...

CVE-2025-2812

CVE-2025-2812 — Mydata Bilişim Ltd. Şti 开发的“Bilet Satış Otomasyonu”中的 SQL 注入漏洞 📌 CVE-ID: CVE-2025-2812 📢 USOM 公告: tr-25-0099 🛡️ 漏洞类型: CWE-89 - SQL 注入（基于布尔值的盲注） 🏢 受影响产品: Bilet Satış Otomasyonu – Mydata Bilişim Ltd. Şti 🌐 示例目标 URL: https://otobusfirmasi.com.tr/otobus-bileti/SifremiUnuttum.php 🔍 漏洞概述...

CVE-2023-43040

CVE-2023-43040 该仓库包含针对 RADOS Gateway RADOSGW 中发现的 CVE-2023-43040 漏洞的概念验证利用代码。该漏洞允许攻击者向指定访问密钥可访问的任何存储桶上传对象，可能导致未经授权的数据篡改或泄露。 $ pip install -r requirements.txt $ python CVE-2023-43040.py --accesskey 699GVXAYVZ5A3ZRYSCI0 --secretkey UZAHHNF3WzASPKCnDdQ8rCvAKaBvLlkZI2V8n7We --endpoint...

CVE-2026-100715

Froxlor versions through 2.3.10 are vulnerable to arbitrary file deletion due to a symlink following flaw in the FTP data deletion cron task (deleteFtpData ). The vulnerability occurs because the FileDir::makeCorrectDir() function is called without the $fixed_homedir argument, causing the symlink...

CVE-2026-100716 Froxlor before 2.3.12 Privilege Escalation via Symlink

Froxlor is a server administration panel. In versions 2.3.10 and earlier, the customer data-export DataDump cron fails to validate intermediate path components of the export destination: Froxlor\FileDir::makeCorrectDir contains an off-by-one in its path-component walk that skips the first segment...

EUVD-2026-87688

Froxlor through 2.3.10 is vulnerable to arbitrary file deletion via symlink following in the FTP data deletion cron task. Cron task 8 deleteFtpData, queued when an FTP account is deleted, calls FileDir::makeCorrectDir without the $fixedhomedir argument, so the symlink component walk is skipped, a...