18670 matches found
HotelDruid-CVE-2021-42948
CVE-2021-42948 HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's. The session token used to access authenticated pages of the application is passed using GET...
cve-2026-1731-scanner
CVE-2026-1731 — BeyondTrust RS/PRA Passive Vulnerability Scanner ╔═══════════════════════════════════════════════════════════════╗ ║ ║ ║ CVE-2026-1731 ║ ║ BeyondTrust RS/PRA Passive Vulnerability Scanner ║ ║ ║ ╠═══════════════════════════════════════════════════════════════╣ ║ PASSIVE SCANNER —...
CVE-2026-58415
Internal state files accessible to external parties in moddavfs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebDAV dead properties of resources it cannot author via a GET request for the .DAV state directory This issue affects...
DEBIAN-CVE-2026-58415
Internal state files accessible to external parties in moddavfs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebDAV dead properties of resources it cannot author via a GET request for the .DAV state directory This issue affects...
CVE-2026-30498
CVE-2026-30498 – CSRF Vulnerability AdminPanel 4.0 Overview CVE ID: CVE-2026-30498 Reserved by MITRE Discoverer: Mehdi Ben Hamou A Cross-Site Request Forgery CSRF vulnerability exists in the delete.php endpoint of AdminPanel 4.0. This vulnerability allows an attacker to trigger sensitive actions...
djust has broken object-level access control (IDOR)
Impactdjust's per-object authorization getobject + hasobjectpermission, ADR-017 was enforced on the WebSocket mount and event paths but not on three other render entry points: a the initial HTTP GET render, b SPA urlchange navigation, and c % liverender % embedded child views. An authenticated us...
tomcat: Apache Tomcat: Unauthorized resource access via FORM authentication bypass
A flaw was found in Apache Tomcat. This incorrect authorization vulnerability occurs within the FORM authentication process, allowing a user to bypass security constraints. This bypass enables unauthorized access to resources via a GET request, even when those resources are intended to be...
CVE-2026-58415
Internal state files accessible to external parties in moddavfs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebDAV dead properties of resources it cannot author via a GET request for the .DAV state directory This issue affects...
CVE-2026-58415 Apache HTTP Server: mod_dav_fs property database read access
Internal state files accessible to external parties in moddavfs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebDAV dead properties of resources it cannot author via a GET request for the .DAV state directory This issue affects...
CVE-2026-58415 Apache HTTP Server: mod_dav_fs property database read access
Internal state files accessible to external parties in moddavfs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebDAV dead properties of resources it cannot author via a GET request for the .DAV state directory This issue affects...
CVE-2026-58415
The Apache HTTP Server is vulnerable to an information disclosure flaw in the mod_dav_fs module (versions 2.4.0 through 2.4.68 ) on all platforms. A remote attacker can perform a GET request directly to the internal .DAV state directory to read internal state files. This allows unauthorized acces...
EUVD-2026-90897
Internal state files accessible to external parties in moddavfs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebDAV dead properties of resources it cannot author via a GET request for the .DAV state directory This issue affects...
CVE-2020-10257
/ \ \ / / || \ \ / |/ \ | | | \ V /| |/ / / / || | / /| \ / / | / || /// ||/|/// by darkcast CVE-2020-10257: WordPress TRX Addons Plugin Unauthenticated Remote Code Execution RCE Vulnerability Affected Plugin: TRX Addons Vulnerability Type: Unauthenticated Remote Code Execution RCE CVSS Score:...
CVE-2026-33340
CVE-2026-33340: SSRF en lollms-webui Descripción general Campo| Detalle ---|--- ID CVE| CVE-2026-33340 Vulnerabilidad| Falsificación de solicitudes del lado del servidor Server-Side Request Forgery, SSRF Producto afectado| ParisNeo/lollms-webui LoLLMS WEBUI Gravedad| Crítica — CVSS 9.1 Vector CVS...
S2-046_S2-045_POC
S2-046POC Uso: ./s2046.sh url ./s2045.sh url Ejemplo: 1. chmod +x ./s2046.sh 2. ./s2046.sh http://172.16.152.135/index.action SALIDA: ================HTTP GET Method================ uid=0root gid=0root groups=0root context=unconfinedu:unconfinedr:unconfinedjavat:s0-s0:c0.c1023 uid=0root gid=0root...
CVE-2024-3273-EXPLOIT
CVE-2024-3273 - Ejecución Remota de Código RCE en D-Link 💥 Se descubrió una vulnerabilidad crítica, clasificada como CVE-2024-3273, en varios dispositivos NAS de D-Link, incluidos DNS-320L, DNS-325, DNS-327L y DNS-340L, hasta la fecha 20240403. Esta vulnerabilidad afecta a una función desconocida...
CVE-2020-14882
CVE-2020-14882 Este script permite la ejecución remota de código RCE en Oracle WebLogic Server mediante una solicitud GET no autenticada. Explota la vulnerabilidad CVE-2020-14882. Al ejecutar comandos arbitrarios, un atacante puede obtener acceso no autorizado al servidor. Detalles del Exploit...
Zur-Go-GET-RCE-Solution
CVE-2018-6574-Solution...