studentmanager 安全漏洞

studentmanager is a student management system by the individual developers of ZeroWdd. A security vulnerability exists in studentmanager version 1.0, which stems from improper authorization in the file /getTeacherList...

PT-2025-16265 · Zerowdd · Studentmanager

Name of the Vulnerable Software and Affected Versions: ZeroWdd/code-projects studentmanager version 1.0 Description: A critical vulnerability was found in the studentmanager software, affecting unknown code of the file /getTeacherList. The manipulation leads to improper authorization. The attack...

db-hospital-drug 安全漏洞

db-hospital-drug is a hospital inventory management system by James Personal Developer. A security vulnerability exists in db-hospital-drug version 1.0, which stems from improper authorization in the file ShiroConfig.java...

Echo 安全漏洞

Echo is an open source community system with no separation of front and back end for Veal98 individual developers. A security vulnerability exists in Echo version 4.2, which stems from an improper authorization issue in the documentation...

StudentManager 安全漏洞

StudentManager is a student management system by huanfenz individual developer. A security vulnerability exists in StudentManager 1.0 and earlier versions, which is caused by improper authorization...

PT-2025-16202 · Wowjoy 浙江湖州华卓信息科技有限公司 · Internet Doctor Workstation System

Name of the Vulnerable Software and Affected Versions: wowjoy 浙江湖州华卓信息科技有限公司 Internet Doctor Workstation System version 1.0 Description: A vulnerability has been found in the Internet Doctor Workstation System, affecting an unknown functionality of the file "/v1/pushConfig/detail/". The...

PT-2025-16215 · Huanfenz/Code Projects · Studentmanager

Name of the Vulnerable Software and Affected Versions: huanfenz/code-projects StudentManager versions up to 1.0 Description: A problematic vulnerability has been found in the Teacher String Handler component, leading to improper authorization. The manipulation can be initiated remotely. The...

CVE-2025-3536

A vulnerability was found in Tutorials-Website Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/delete-user.php. The manipulation of the argument ID leads to improper authorization. The attack may be launched...

CVE-2025-3537 Tutorials-Website Employee Management System update-user.php improper authorization

A vulnerability was found in Tutorials-Website Employee Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/update-user.php. The manipulation of the argument ID leads to improper authorization. It is possible to initiate the attack remotely...

CVE-2025-3537

CVE-2025-3537 affects Tutorials-Website Employee Management System v1.0. The vulnerability exists in an unknown portion of the file /admin/update-user.php, where manipulating the ID argument enables improper authorization and remote attack capability. Public disclosure of the exploit is noted, wi...

CVE-2025-3537 Tutorials-Website Employee Management System update-user.php improper authorization

A vulnerability was found in Tutorials-Website Employee Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/update-user.php. The manipulation of the argument ID leads to improper authorization. It is possible to initiate the attack remotely...

CVE-2025-3536 Tutorials-Website Employee Management System delete-user.php improper authorization

A vulnerability was found in Tutorials-Website Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/delete-user.php. The manipulation of the argument ID leads to improper authorization. The attack may be launched...

CVE-2025-3536

CVE-2025-3536 affects Tutorials-Website Employee Management System 1.0. The vulnerability resides in the /admin/delete-user.php endpoint where manipulating the ID argument leads to improper authorization. The issue is exploitable remotely and the public exploit is available. No vendor response is...

Tutorials Website Employee Management System 安全漏洞

Tutorials Website Employee Management System is an employee management system from Tutorials Website, Inc. A security vulnerability exists in Tutorials Website Employee Management System version 1.0, which is caused by improper authorization...

Tutorials Website Employee Management System 安全漏洞

Tutorials Website Employee Management System is an employee management system from Tutorials Website, Inc. A security vulnerability exists in Tutorials Website Employee Management System version 1.0, which is caused by improper authorization...

Improper Authorization

Jenkins is vulnerable to Improper authorization. The vulnerability is due to missing permission checks in an HTTP endpoint, allowing attackers with only Computer/Create permission to copy an agent and gain unauthorized access to its configuration...

CVE-2025-27188

Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access...

CVE-2025-29794

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

The vulnerability of the FreeIPA identity management centralized system, related to improper authorization, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the FreeIPA identity management software lies in improper authorization. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment, related to incorrect authorization, allows a violator to disclose protected information.

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to improper authorization. Exploiting this vulnerability can allow a malicious actor to disclose protected information...