Lucene search
+L

3011 matches found

Kitploit
Kitploit
added 2026/08/29 3:01 p.m.2 views

CVE-2024-25169-Mezzanine-v6.0.0

Prodotto: Mezzanine CMS Versione: v6.0.0 Data di scoperta: 10.01.2024. Data di segnalazione: 10.01.2024. Tipo di vulnerabilità: Controllo degli accessi non corretto. ID CVE: CVE-2024-25169 Descrizione: Un problema in Mezzanine v6.0.0 consente agli attaccanti di aggirare i meccanismi di controllo...

9.8CVSS8.7AI score0.01096EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/29 10:10 a.m.2 views

CVE-2024-31719----AMI-Aptio-5-Vulnerability

Vulnerabilità AMI-Aptio-NvLock Informazioni CVE ID: CVE-2024-31719 Link Tipo di vulnerabilità: Controllo di accesso errato Fornitore del prodotto: American Megatrends International, LLC. Prodotto: AMI Aptio - 5 Tipo di attacco: Locale Vettore d'attacco L'attaccante può facilmente bypassare la...

5.9AI score
SaveExploits0
Nuclei
Nuclei
added 2026/08/29 10:07 a.m.164 views

H3C ER8300G2-X - Password Disclosure

H3C ER8300G2-X is vulnerable to Incorrect Access Control. The password for the router's management system can be accessed via the management system page login interface. id: CVE-2024-32238 info: name: H3C ER8300G2-X - Password Disclosure author: s4e-io,adeljck severity: critical description: | H3...

9.8CVSS7.2AI score0.52948EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/29 7:00 a.m.2 views

CVE-2020-10238

Made by HK CVE-2020-10238: Controllo di accesso errato in comtemplates - RCE CVE-2020-10239: Controllo di accesso errato in comfields SQL field - RCE Link https://developer.joomla.org/security-centre/804-20200303-core-incorrect-access-control-in-com-templates.html...

8.8CVSS7.2AI score0.04863EPSS
SaveExploits2
EUVD
EUVD
added 2026/08/29 12:31 a.m.6 views

EUVD-2026-68005

Incorrect access control in the getTracerouteCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain traceroute diagnostic logs via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

5.9AI score
SaveExploits0References5
EUVD
EUVD
added 2026/08/29 12:31 a.m.5 views

EUVD-2026-68008

Incorrect access control in the getTelnetCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain Telnet service enablement status information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

5.9AI score
SaveExploits0References5
NVD
NVD
added 2026/08/28 8:18 p.m.5 views

CVE-2026-51659

Incorrect access control in the getUrlFilterRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain DMZ configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

SaveExploits0References4
NVD
NVD
added 2026/08/28 8:18 p.m.7 views

CVE-2026-51657

Incorrect access control in the getSyslogCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain syslog-related configuration via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

SaveExploits0References4
NVD
NVD
added 2026/08/28 8:18 p.m.5 views

CVE-2026-51656

Incorrect access control in the getVpnPassCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain VPN pass-through and WAN ping filter settings via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

SaveExploits0References4
NVD
NVD
added 2026/08/28 8:18 p.m.6 views

CVE-2026-51646

Incorrect access control in the getParentalRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain parental-control rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

SaveExploits0References4
NVD
NVD
added 2026/08/28 8:18 p.m.6 views

CVE-2026-51649

Incorrect access control in the getDiagnosisCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain diagnostic configuration and ping log contents via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

SaveExploits0References4
NVD
NVD
added 2026/08/28 8:18 p.m.5 views

CVE-2026-51652

Incorrect access control in the getUPnPCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain UPnP enablement and parsed port-mapping information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

SaveExploits0References4
NVD
NVD
added 2026/08/28 8:18 p.m.4 views

CVE-2026-51655

Incorrect access control in the getMacFilterRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain MAC filter rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

SaveExploits0References4
NVD
NVD
added 2026/08/28 8:18 p.m.5 views

CVE-2026-51654

Incorrect access control in the getScheduleCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain schedule or scheduled-reboot configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

SaveExploits0References4
NVD
NVD
added 2026/08/28 8:18 p.m.6 views

CVE-2026-51643

Incorrect access control in the getNtpCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain NTP configuration and current time data via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

SaveExploits0References4
NVD
NVD
added 2026/08/28 8:18 p.m.5 views

CVE-2026-51645

Incorrect access control in the getPasswordCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain the administrative username via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

SaveExploits0References4
NVD
NVD
added 2026/08/28 8:18 p.m.5 views

CVE-2026-51639

Incorrect access control in the getApWiFiSchCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain AP-specific Wi-Fi scheduling rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

SaveExploits0References4
NVD
NVD
added 2026/08/28 8:18 p.m.6 views

CVE-2026-51644

Incorrect access control in the getCrpcConfig function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain cloud remote-control status and URL information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

SaveExploits0References4
NVD
NVD
added 2026/08/28 8:18 p.m.5 views

CVE-2026-51629

Incorrect access control in the getStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain static DHCP reservation rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

SaveExploits0References4
NVD
NVD
added 2026/08/28 8:18 p.m.4 views

CVE-2026-51632

Incorrect access control in the getWiFiAdvancedCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain advanced wireless settings via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

SaveExploits0References4
Rows per page
Query Builder