Lucene search
+L

88 matches found

Snyk
Snyk
•added 2026/01/20 3:30 a.m.•9 views

Insufficient Verification of Data Authenticity

Overview mineadmin/mineadmin is a Quickly build a background management system for web applications Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity via the refresh function of the /system/refresh in the JWT Token Handler component. An attacker ca...

7.5CVSS5.6AI score0.00257EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2026/01/20 3:30 a.m.•26 views

MineAdmin May Expose Sensitive Information to an Unauthorized Actor

A security vulnerability has been detected in MineAdmin 1.x/2.x. Affected is an unknown function of the file /system/getFileInfoById. Such manipulation of the argument ID leads to information disclosure. It is possible to launch the attack remotely. The attack requires a high level of complexity...

5.3CVSS4.3AI score0.00476EPSS
SaveExploits1References6Affected Software1
osv_ghsa
osv_ghsa
•added 2026/01/20 3:30 a.m.•20 views

GHSA-43RR-X62X-Q96W MineAdmin improperly refreshes tokens

A weakness has been identified in MineAdmin 1.x/2.x. This impacts the function refresh of the file /system/refresh of the component JWT Token Handler. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the attack remotely. The attack is considered ...

5CVSS4.6AI score0.00257EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
•added 2026/01/20 3:30 a.m.•34 views

MineAdmin improperly refreshes tokens

A weakness has been identified in MineAdmin 1.x/2.x. This impacts the function refresh of the file /system/refresh of the component JWT Token Handler. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the attack remotely. The attack is considered ...

7.5CVSS4.6AI score0.00257EPSS
SaveExploits1References6Affected Software1
osv_cve
osv_cve
•added 2026/01/20 1:15 a.m.•22 views

CVE-2026-1196

A security vulnerability has been detected in MineAdmin 1.x/2.x. Affected is an unknown function of the file /system/getFileInfoById. Such manipulation of the argument ID leads to information disclosure. It is possible to launch the attack remotely. The attack requires a high level of complexity...

5.3CVSS4.3AI score0.00476EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2026/01/20 1:15 a.m.•26 views

CVE-2026-1195

A weakness has been identified in MineAdmin 1.x/2.x. This impacts the function refresh of the file /system/refresh of the component JWT Token Handler. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the attack remotely. The attack is considered ...

7.5CVSS4.6AI score0.00257EPSS
SaveExploits1References4
NVD
NVD
•added 2026/01/20 1:15 a.m.•18 views

CVE-2026-1196

A security vulnerability has been detected in MineAdmin 1.x/2.x. Affected is an unknown function of the file /system/getFileInfoById. Such manipulation of the argument ID leads to information disclosure. It is possible to launch the attack remotely. The attack requires a high level of complexity...

5.3CVSS0.00476EPSS
SaveExploits1References4
NVD
NVD
•added 2026/01/20 1:15 a.m.•28 views

CVE-2026-1195

A weakness has been identified in MineAdmin 1.x/2.x. This impacts the function refresh of the file /system/refresh of the component JWT Token Handler. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the attack remotely. The attack is considered ...

7.5CVSS0.00257EPSS
SaveExploits1References4
NVD
NVD
•added 2026/01/20 1:15 a.m.•34 views

CVE-2026-1197

A vulnerability was detected in MineAdmin 1.x/2.x. Affected by this vulnerability is an unknown functionality of the file /system/downloadById. Performing a manipulation of the argument ID results in information disclosure. The attack can be initiated remotely. The attack's complexity is rated as...

3.1CVSS0.00361EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2026/01/20 1:15 a.m.•23 views

CVE-2026-1197

A vulnerability was detected in MineAdmin 1.x/2.x. Affected by this vulnerability is an unknown functionality of the file /system/downloadById. Performing a manipulation of the argument ID results in information disclosure. The attack can be initiated remotely. The attack's complexity is rated as...

2.3CVSS4.6AI score0.00361EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2026/01/20 12:32 a.m.•12 views

CVE-2026-1197 MineAdmin downloadById information disclosure

A vulnerability was detected in MineAdmin 1.x/2.x. Affected by this vulnerability is an unknown functionality of the file /system/downloadById. Performing a manipulation of the argument ID results in information disclosure. The attack can be initiated remotely. The attack's complexity is rated as...

3.1CVSS4.6AI score0.00361EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2026/01/20 12:32 a.m.•61 views

CVE-2026-1197 MineAdmin downloadById information disclosure

A vulnerability was detected in MineAdmin 1.x/2.x. Affected by this vulnerability is an unknown functionality of the file /system/downloadById. Performing a manipulation of the argument ID results in information disclosure. The attack can be initiated remotely. The attack's complexity is rated as...

3.1CVSS0.00361EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/01/20 12:32 a.m.•11 views

CVE-2026-1197

A vulnerability was detected in MineAdmin 1.x/2.x. Affected by this vulnerability is an unknown functionality of the file /system/downloadById. Performing a manipulation of the argument ID results in information disclosure. The attack can be initiated remotely. The attack's complexity is rated as...

3.1CVSS4.7AI score0.00361EPSS
SaveExploits1References4
CVE
CVE
•added 2026/01/20 12:32 a.m.•71 views

CVE-2026-1197

MineAdmin 1.x/2.x is affected by CVE-2026-1197 via information disclosure in /system/downloadById when the ID parameter is manipulated. The vulnerability is exploitable remotely with high attack complexity; public exploit appears available and the vendor has not responded to disclosure. Connected...

3.1CVSS4.6AI score0.00361EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/01/20 12:32 a.m.•8 views

CVE-2026-1196 MineAdmin getFileInfoById information disclosure

A security vulnerability has been detected in MineAdmin 1.x/2.x. Affected is an unknown function of the file /system/getFileInfoById. Such manipulation of the argument ID leads to information disclosure. It is possible to launch the attack remotely. The attack requires a high level of complexity...

3.1CVSS4.3AI score0.00476EPSS
SaveExploits1References4
CVE
CVE
•added 2026/01/20 12:32 a.m.•42 views

CVE-2026-1196

MineAdmin 1.x/2.x vulnerability: manipulating the argument ID in /system/getFileInfoById leads to information disclosure. Exploitable remotely with high complexity; likely confidentiality impact. Publicly disclosed exploit; no remediation details provided in the connected documents.

5.3CVSS4.3AI score0.00476EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2026/01/20 12:32 a.m.•44 views

CVE-2026-1196 MineAdmin getFileInfoById information disclosure

A security vulnerability has been detected in MineAdmin 1.x/2.x. Affected is an unknown function of the file /system/getFileInfoById. Such manipulation of the argument ID leads to information disclosure. It is possible to launch the attack remotely. The attack requires a high level of complexity...

3.1CVSS0.00476EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/01/20 12:32 a.m.•11 views

CVE-2026-1196

A security vulnerability has been detected in MineAdmin 1.x/2.x. Affected is an unknown function of the file /system/getFileInfoById. Such manipulation of the argument ID leads to information disclosure. It is possible to launch the attack remotely. The attack requires a high level of complexity...

5.3CVSS4.3AI score0.00476EPSS
SaveExploits1References4
Snyk
Snyk
•added 2026/01/20 12:30 a.m.•10 views

Files or Directories Accessible to External Parties

Overview mineadmin/mineadmin is a Quickly build a background management system for web applications Affected versions of this package are vulnerable to Files or Directories Accessible to External Parties via the Swagger component. An attacker can access sensitive information by sending crafted...

7.5CVSS5.7AI score0.00797EPSS
SaveExploits1References2
osv_ghsa
osv_ghsa
•added 2026/01/20 12:30 a.m.•27 views

GHSA-23HH-2F47-3P4H MineAdmin has Incorrect Privilege Assignment

A vulnerability was identified in MineAdmin 1.x/2.x. The impacted element is an unknown function of the file /system/cache/view of the component View Interface. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The exploit is publicly available a...

6.3CVSS6.2AI score0.00348EPSS
SaveExploits1References6
Rows per page
Query Builder