173 matches found
CVE-2026-29909-MRCMS-vulnerability
CVE-2026-29909：MRCMS V3.1.2 - 未认证目录枚举漏洞 CVE ID CVE-2026-29909 描述 MRCMS V3.1.2 的文件管理模块中存在一个未认证目录枚举漏洞。/admin/file/list.do 端点缺乏认证控制及适当的输入验证，允许远程攻击者在无需任何凭据的情况下枚举服务器上的目录内容。 概念验证（PoC） root@kitploit: GET /admin/file/list.do?path=../../../src/main/resources/ HTTP/1.1 Host: target-server 影响 未经授权访问服务器目录结构...
CVE-2026-31272
MRCMS 3.1.2 contains an access control vulnerability. The save method in src/main/java/org/marker/mushroom/controller/UserController.java lacks proper authorization validation, enabling direct addition of super administrator accounts without authentication...
CVE-2026-31272
MRCMS 3.1.2 contains an access control vulnerability. The save method in src/main/java/org/marker/mushroom/controller/UserController.java lacks proper authorization validation, enabling direct addition of super administrator accounts without authentication...
CVE-2026-31272
MRCMS 3.1.2 has an access control vulnerability: the save() method in UserController.java lacks proper authorization validation, allowing direct creation of super administrator accounts without authentication. Impact is described as high across confidentiality, integrity, and availability; exploi...
CVE-2026-31272
MRCMS 3.1.2 contains an access control vulnerability. The save method in src/main/java/org/marker/mushroom/controller/UserController.java lacks proper authorization validation, enabling direct addition of super administrator accounts without authentication...
CVE-2026-31272
MRCMS 3.1.2 contains an access control vulnerability. The save method in src/main/java/org/marker/mushroom/controller/UserController.java lacks proper authorization validation, enabling direct addition of super administrator accounts without authentication...
EUVD-2026-17129
MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module. The /admin/file/list.do endpoint lacks authentication controls and proper input validation, allowing remote attackers to enumerate directory contents on the server without any credentials...
CVE-2026-29909
MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module. The /admin/file/list.do endpoint lacks authentication controls and proper input validation, allowing remote attackers to enumerate directory contents on the server without any credentials...
EUVD-2018-9542
Malware in sbrugna...
EUVD-2025-13404
Malicious code in bioql PyPI...
EUVD-2025-13469
Malicious code in bioql PyPI...
EUVD-2025-13482
Malicious code in bioql PyPI...
EUVD-2025-13471
Malicious code in bioql PyPI...
EUVD-2025-4490
Malicious code in bioql PyPI...
EUVD-2025-4486
Malicious code in bioql PyPI...
EUVD-2025-7536
Malicious code in bioql PyPI...
EUVD-2025-7538
Malicious code in bioql PyPI...
EUVD-2025-7535
Malicious code in bioql PyPI...