Lucene search
+L

211 matches found

Kitploit
Kitploit
•added 2026/10/25 11:26 a.m.•22 views

CVE-2026-29909-MRCMS-vulnerability

CVE-2026-29909: MRCMS V3.1.2 - Unauthenticated Directory Enumeration CVE ID CVE-2026-29909 Description MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module. The /admin/file/list.do endpoint lacks authentication controls and proper input...

5.3CVSS6.3AI score0.00434EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2026/04/08 5:00 a.m.•21 views

CVE-2026-31272

MRCMS 3.1.2 contains an access control vulnerability. The save method in src/main/java/org/marker/mushroom/controller/UserController.java lacks proper authorization validation, enabling direct addition of super administrator accounts without authentication...

9.8CVSS5.8AI score0.00577EPSS
SaveExploits1References1
NVD
NVD
•added 2026/04/07 6:16 p.m.•38 views

CVE-2026-31272

MRCMS 3.1.2 contains an access control vulnerability. The save method in src/main/java/org/marker/mushroom/controller/UserController.java lacks proper authorization validation, enabling direct addition of super administrator accounts without authentication...

9.8CVSS0.00577EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2026/04/07 12:00 a.m.•17 views

CVE-2026-31272

MRCMS 3.1.2 contains an access control vulnerability. The save method in src/main/java/org/marker/mushroom/controller/UserController.java lacks proper authorization validation, enabling direct addition of super administrator accounts without authentication...

5.8AI score0.00577EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/07 12:00 a.m.•8 views

CVE-2026-31272: Improper Access Control

MRCMS 3.1.2 contains an access control vulnerability. The save method in src/main/java/org/marker/mushroom/controller/UserController.java lacks proper authorization validation, enabling direct addition of super administrator accounts without authentication...

9.8CVSS5.9AI score0.00577EPSS
SaveExploits1References1
CVE
CVE
•added 2026/04/07 12:00 a.m.•62 views

CVE-2026-31272

MRCMS 3.1.2 is affected by an access control vulnerability originating from a lack of proper authorization validation in the save() method located at src/main/java/org/marker/mushroom/controller/UserController.java. This flaw allows an unauthenticated attacker to directly add super administrator ...

9.8CVSS5.8AI score0.00577EPSS
SaveExploits1References1Affected Software1
osv_cve
osv_cve
•added 2026/04/07 12:00 a.m.•24 views

CVE-2026-31272

MRCMS 3.1.2 contains an access control vulnerability. The save method in src/main/java/org/marker/mushroom/controller/UserController.java lacks proper authorization validation, enabling direct addition of super administrator accounts without authentication...

9.8CVSS5.8AI score0.00577EPSS
SaveExploits1References3
EUVD
EUVD
•added 2026/03/30 6:31 p.m.•32 views

EUVD-2026-17129

MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module. The /admin/file/list.do endpoint lacks authentication controls and proper input validation, allowing remote attackers to enumerate directory contents on the server without any credentials...

5.3CVSS5.9AI score0.00434EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2026/03/30 12:00 a.m.•30 views

CVE-2026-29909

MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module. The /admin/file/list.do endpoint lacks authentication controls and proper input validation, allowing remote attackers to enumerate directory contents on the server without any credentials...

5.3CVSS6AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/30 12:00 a.m.•14 views

CVE-2026-29909: Improper Input Validation

MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module. The /admin/file/list.do endpoint lacks authentication controls and proper input validation, allowing remote attackers to enumerate directory contents on the server without any credentials...

5.3CVSS5.8AI score0.00434EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2018-9542

Malware in sbrugna...

9.8CVSS8.2AI score0.01537EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•27 views

EUVD-2025-13404

Malicious code in bioql PyPI...

5.4CVSS5.1AI score0.00337EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•24 views

EUVD-2025-7536

Malicious code in bioql PyPI...

6.1CVSS5.1AI score0.00362EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•25 views

EUVD-2025-13567

Malicious code in bioql PyPI...

5.3CVSS5.2AI score0.00301EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2025-4476

Malicious code in bioql PyPI...

5.4CVSS5.4AI score0.00337EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•24 views

EUVD-2025-4477

Malicious code in bioql PyPI...

4.8CVSS5.8AI score0.00331EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2025-13471

Malicious code in bioql PyPI...

4.8CVSS4AI score0.00398EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•24 views

EUVD-2025-13405

Malicious code in bioql PyPI...

5.4CVSS5.1AI score0.00337EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2025-7538

Malicious code in bioql PyPI...

6.1CVSS5.1AI score0.00409EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2024-21585

Malicious code in bioql PyPI...

7.5CVSS7.4AI score0.00689EPSS
SaveExploits1References1
Rows per page
Query Builder