Lucene search
+L

32 matches found

NVD
NVD
•added 2026/10/13 4:17 p.m.•10 views

CVE-2026-109526

A vulnerability has been found in HBAI-Ltd Toonflow-app up to 1.1.8. This affects an unknown function of the component exportData Endpoint. Such manipulation leads to information disclosure. An attack has to be approached locally. The exploit has been disclosed to the public and may be used...

4.8CVSS0.00103EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/13 3:30 p.m.•19 views

CVE-2026-109526

The HBAI-Ltd Toonflow-app is vulnerable to an information disclosure flaw in the exportData Endpoint affecting versions up to 1.1.8 . This issue requires local access to exploit. While the exploit has been publicly disclosed, the vendor states that the current version (2.0.4 ) is not affected due...

4.8CVSS4.3AI score0.00103EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/13 3:30 p.m.•38 views

CVE-2026-109526 HBAI-Ltd Toonflow-app exportData Endpoint information disclosure

A vulnerability has been found in HBAI-Ltd Toonflow-app up to 1.1.8. This affects an unknown function of the component exportData Endpoint. Such manipulation leads to information disclosure. An attack has to be approached locally. The exploit has been disclosed to the public and may be used...

4.8CVSS0.00103EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/13 3:30 p.m.•11 views

EUVD-2026-98814

A vulnerability has been found in HBAI-Ltd Toonflow-app up to 1.1.8. This affects an unknown function of the component exportData Endpoint. Such manipulation leads to information disclosure. An attack has to be approached locally. The exploit has been disclosed to the public and may be used...

4.8CVSS4.3AI score0.00103EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/10/13 3:30 p.m.•23 views

CVE-2026-109526 HBAI-Ltd Toonflow-app exportData Endpoint information disclosure

A vulnerability has been found in HBAI-Ltd Toonflow-app up to 1.1.8. This affects an unknown function of the component exportData Endpoint. Such manipulation leads to information disclosure. An attack has to be approached locally. The exploit has been disclosed to the public and may be used...

4.8CVSS4.9AI score
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•9 views

CVE-2026-109526: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been found in HBAI-Ltd Toonflow-app up to 1.1.8. This affects an unknown function of the component exportData Endpoint. Such manipulation leads to information disclosure. An attack has to be approached locally. The exploit has been disclosed to the public and may be used...

4.8CVSS4.3AI score0.00103EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•12 views

PT-2026-111657

Name of the Vulnerable Software and Affected Versions HBAI-Ltd Toonflow-app versions prior to 2.0.0 Description A flaw in the exportData endpoint allows for information disclosure. This issue requires local access to be exploited. Recommendations Upgrade to version 2.0.0 or later...

4.8CVSS5.1AI score0.00103EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2026/10/12 4:00 p.m.•6 views

HBAI-Ltd Toonflow had a vulnerability regarding information leakage

HBAI-Ltd Toonflow versions 1.1.8 and earlier have security vulnerabilities. These vulnerabilities stem from improper handling of unknown functions in the exportData endpoint component. Local attackers may exploit these vulnerabilities to cause information leakage...

4.8CVSS5.2AI score0.00103EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/25 5:45 a.m.•10 views

CVE-2026-97721 Sanluan PublicCMS exportExcel/exportData SysUserAdminController.java CmsContentAdminController authorization

A weakness has been identified in Sanluan PublicCMS up to 6.202506.e. This vulnerability affects the function CmsContentAdminController of the file publiccms-parent/publiccms-core/src/main/java/com/publiccms/controller/admin/sys/SysUserAdminController.java of the component exportExcel/exportData...

5.1CVSS5.4AI score0.00236EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/25 5:45 a.m.•49 views

CVE-2026-97721 Sanluan PublicCMS exportExcel/exportData SysUserAdminController.java CmsContentAdminController authorization

A weakness has been identified in Sanluan PublicCMS up to 6.202506.e. This vulnerability affects the function CmsContentAdminController of the file publiccms-parent/publiccms-core/src/main/java/com/publiccms/controller/admin/sys/SysUserAdminController.java of the component exportExcel/exportData...

5.1CVSS0.00236EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/25 5:45 a.m.•17 views

EUVD-2026-86525

A weakness has been identified in Sanluan PublicCMS up to 6.202506.e. This vulnerability affects the function CmsContentAdminController of the file publiccms-parent/publiccms-core/src/main/java/com/publiccms/controller/admin/sys/SysUserAdminController.java of the component exportExcel/exportData...

5.1CVSS5.1AI score0.00236EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/25 12:00 a.m.•15 views

CVE-2026-97721: Authorization Bypass Through User-Controlled Key

A weakness has been identified in Sanluan PublicCMS up to 6.202506.e. This vulnerability affects the function CmsContentAdminController of the file publiccms-parent/publiccms-core/src/main/java/com/publiccms/controller/admin/sys/SysUserAdminController.java of the component exportExcel/exportData...

5.1CVSS5.4AI score0.00236EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/25 12:00 a.m.•12 views

PT-2026-98355

Name of the Vulnerable Software and Affected Versions Sanluan PublicCMS versions prior to 6.202506.e Description An authorization bypass exists in the exportExcel/exportData component. The issue resides within the CmsContentAdminController function located in the...

5.1CVSS5.9AI score0.00236EPSS
SaveExploits0References9
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2020-15564

Malware in sbrugna...

9.8CVSS8.6AI score0.0128EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2018-9413

Malware in sbrugna...

8.8CVSS7.8AI score0.03918EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2018-6203

Malware in sbrugna...

8.8CVSS8AI score0.02737EPSS
SaveExploits0References3
CVE
CVE
•added 2021/04/29 6:17 p.m.•103 views

CVE-2020-22807

Vulnerability summary (CVE-2020-22807) : vtiger CRM 7.2 is affected by a SQL Injection in the calendar exportdata feature caused by a faulty input handling (described as a union SQL injection). This could allow a remote attacker to execute arbitrary SQL commands on the vulnerable system (no authe...

9.8CVSS9.6AI score0.0128EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/29 12:00 a.m.•17 views

CVE-2020-22807: Improper Neutralization of Special Elements used in an SQL Command

An issue was dicovered in vtiger crm 7.2. Union sql injection in the calendar exportdata feature...

9.8CVSS5.8AI score0.0128EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2019/01/24 4:29 a.m.•26 views

CVE-2018-17666

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.2AI score0.03918EPSS
SaveExploits0References2
NVD
NVD
•added 2019/01/24 4:29 a.m.•35 views

CVE-2018-17666

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS8.8AI score0.03918EPSS
SaveExploits0References2
Rows per page
Query Builder