Lucene search
+L

391100 matches found

EUVD
EUVD
added 2026/09/18 7:00 p.m.2 views

EUVD-2017-19014

Caucho Resin contains a path traversal vulnerability in the documentation webapp resin-doc that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig tutorial servlet. Attackers can craft requests...

8.7CVSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/18 7:00 p.m.6 views

CVE-2017-20284 Caucho Resin resin-doc Unauthenticated Path Traversal via jndi-appconfig Servlet

Caucho Resin contains a path traversal vulnerability in the documentation webapp resin-doc that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig tutorial servlet. Attackers can craft requests...

8.7CVSS
SaveExploits0References4
CVE
CVE
added 2026/09/18 7:00 p.m.4 views

CVE-2017-20284

Caucho Resin contains a path traversal vulnerability in its resin-doc documentation webapp. The flaw resides in the jndi-appconfig tutorial servlet , where the inputFile request parameter accepts relative paths with directory traversal sequences, allowing remote unauthenticated attackers to read ...

8.7CVSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/18 6:59 p.m.7 views

CVE-2021-48008 Chanjet CRM SQL Injection via get_usedspace.php

Chanjet CRM contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by manipulating the siteid GET parameter in the webservice endpoint. Attackers can exploit the lack of input sanitization or parameterization through UNION-based...

8.7CVSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/18 6:59 p.m.2 views

EUVD-2021-34882

Chanjet CRM contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by manipulating the siteid GET parameter in the webservice endpoint. Attackers can exploit the lack of input sanitization or parameterization through UNION-based...

8.7CVSS
SaveExploits0References4
CVE
CVE
added 2026/09/18 6:59 p.m.4 views

CVE-2021-48008

Chanjet CRM is affected by an unauthenticated SQL injection vulnerability in the site_id GET parameter of the get_usedspace.php webservice endpoint. The root cause is the lack of input sanitization or parameterization, which allows remote attackers to use UNION-based injection techniques to execu...

8.7CVSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/18 6:59 p.m.2 views

EUVD-2019-20203

Weaver E-cology contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by submitting malicious input through the userIdentifiers GET parameter in the mobile plugin endpoint. Attackers can bypass space-based filter controls by wrapping...

8.7CVSS
SaveExploits0References4
CVE
CVE
added 2026/09/18 6:59 p.m.3 views

CVE-2019-25776

Weaver E-cology contains an unauthenticated SQL injection in the mobile plugin endpoint (SyncUserInfo.jsp), reachable via the userIdentifiers GET parameter . Attackers bypass space-based WAF filters by wrapping SQL keywords in parentheses, enabling UNION-based injection that exposes administrator...

8.7CVSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/18 6:59 p.m.7 views

CVE-2019-25776 Weaver E-cology SQL Injection via SyncUserInfo.jsp

Weaver E-cology contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by submitting malicious input through the userIdentifiers GET parameter in the mobile plugin endpoint. Attackers can bypass space-based filter controls by wrapping...

8.7CVSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/18 6:58 p.m.7 views

CVE-2023-54399 Hongjing e-HR < 8.2 SQL Injection via /servlet/codesettree

Hongjing e-HR before 8.2 contains a SQL injection vulnerability in the /servlet/codesettree endpoint where the categories query parameter is passed to a database query without sanitization after HRMS-encoding is stripped. An unauthenticated remote attacker can supply a crafted UNION SELECT payloa...

9.8CVSS
SaveExploits0References5
CVE
CVE
added 2026/09/18 6:58 p.m.6 views

CVE-2023-54399

Hongjing e-HR before 8.2 is affected by a SQL injection in the /servlet/codesettree endpoint. The categories query parameter is passed to a database query without sanitization after HRMS-encoding is stripped, allowing an unauthenticated remote attacker to supply a crafted UNION SELECT payload and...

9.8CVSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/18 6:58 p.m.2 views

EUVD-2023-60694

Hongjing e-HR before 8.2 contains a SQL injection vulnerability in the /servlet/codesettree endpoint where the categories query parameter is passed to a database query without sanitization after HRMS-encoding is stripped. An unauthenticated remote attacker can supply a crafted UNION SELECT payloa...

9.8CVSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/18 6:57 p.m.2 views

EUVD-2026-83275

In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization on its update and delete operations PUT /v2/leases/leaseid and DELETE /v2/leases/leaseid. The policy authorize wrapper attempts to load the target lease to build the authorization target from its owner...

7.2CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/18 6:57 p.m.7 views

CVE-2026-93854

In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization on its update and delete operations PUT /v2/leases/leaseid and DELETE /v2/leases/leaseid. The policy authorize wrapper attempts to load the target lease to build the authorization target from its owner...

7.2CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/18 6:57 p.m.6 views

CVE-2026-93854

In OpenStack Blazar before 17.0.1 , the V2 lease API fails to enforce object-level authorization on update and delete operations due to a parameter name mismatch : the authorize() wrapper looks up the lease under the keyword "lease_id" while the controller methods name the parameter "id" (deliver...

7.2CVSS
SaveExploits0References1
Wordfence Blog
Wordfence Blog
added 2026/09/18 6:22 p.m.2 views

Wordfence Argus Discovers Critical Vulnerability in libheif, the Library That Opens iPhone Photos on Your Server

On September 1, 2026, the libheif project released version 1.23.3, closing a critical heap buffer overflow that the Wordfence Threat Intelligence team, using Wordfence Argus, discovered and reported four days earlier. The libheif maintainer, Dirk Farin, gave it a score of 9.8 out of 10 on the CVS...

SaveExploits0
NVD
NVD
added 2026/09/18 6:17 p.m.4 views

CVE-2026-63445

Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-rc.0, list endpoints used with the file-system database bind the request-controlled project query parameter into the resource Query structure without validating it against directory traversal...

7.1CVSS
SaveExploits0References3
NVD
NVD
added 2026/09/18 6:17 p.m.4 views

CVE-2026-63458

Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-beta.3, an authenticated user with viewer access to one project can supply another project through the project query parameter on project-scoped list endpoints, including...

7.1CVSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2026/09/18 5:57 p.m.8 views

Exploit for CVE-2026-75827

abraxaslabs.tech · github.com/abraxas ·&...

9.3CVSS0.00777EPSS
SaveExploits1
OSV
OSV
added 2026/09/18 5:40 p.m.1 views

GHSA-VR5F-W35Q-98JP Perses's unvalidated project parameter enables filesystem path traversal

Impact When Perses is using the file system database, on the list endpoints, the project value is bound from the request into the resource Query struct and is never validated against directory-traversal characters validation/Flatten only runs for Create/Update bodies, not list queries. The path i...

7.1CVSS
SaveExploits0References4
Rows per page
Query Builder