196 matches found
CVE-2026-29909-MRCMS-vulnerability
CVE-2026-29909: MRCMS V3.1.2 - 인증되지 않은 디렉터리 열거 CVE ID CVE-2026-29909 설명 MRCMS V3.1.2에는 파일 관리 모듈에 인증되지 않은 디렉터리 열거 취약점이 존재합니다. /admin/file/list.do 엔드포인트는 인증 제어 및 적절한 입력 검증이 부족하여, 원격 공격자가 자격 증명 없이 서버의 디렉터리 내용을 열거할 수 있습니다. 개념 증명PoC GET /admin/file/list.do?path=../../../src/main/resources/ HTTP/1.1...
CVE-2026-31272
MRCMS 3.1.2 contains an access control vulnerability. The save method in src/main/java/org/marker/mushroom/controller/UserController.java lacks proper authorization validation, enabling direct addition of super administrator accounts without authentication...
CVE-2026-31272
MRCMS 3.1.2 contains an access control vulnerability. The save method in src/main/java/org/marker/mushroom/controller/UserController.java lacks proper authorization validation, enabling direct addition of super administrator accounts without authentication...
CVE-2026-31272: Improper Access Control
MRCMS 3.1.2 contains an access control vulnerability. The save method in src/main/java/org/marker/mushroom/controller/UserController.java lacks proper authorization validation, enabling direct addition of super administrator accounts without authentication...
CVE-2026-31272
MRCMS 3.1.2 is affected by an access control vulnerability originating from a lack of proper authorization validation in the save() method located at src/main/java/org/marker/mushroom/controller/UserController.java. This flaw allows an unauthenticated attacker to directly add super administrator ...
CVE-2026-31272
MRCMS 3.1.2 contains an access control vulnerability. The save method in src/main/java/org/marker/mushroom/controller/UserController.java lacks proper authorization validation, enabling direct addition of super administrator accounts without authentication...
CVE-2026-31272
MRCMS 3.1.2 contains an access control vulnerability. The save method in src/main/java/org/marker/mushroom/controller/UserController.java lacks proper authorization validation, enabling direct addition of super administrator accounts without authentication...
EUVD-2026-17129
MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module. The /admin/file/list.do endpoint lacks authentication controls and proper input validation, allowing remote attackers to enumerate directory contents on the server without any credentials...
CVE-2026-29909
MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module. The /admin/file/list.do endpoint lacks authentication controls and proper input validation, allowing remote attackers to enumerate directory contents on the server without any credentials...
CVE-2026-29909: Improper Input Validation
MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module. The /admin/file/list.do endpoint lacks authentication controls and proper input validation, allowing remote attackers to enumerate directory contents on the server without any credentials...
EUVD-2018-9542
Malware in sbrugna...
EUVD-2025-4486
Malicious code in bioql PyPI...
EUVD-2025-4490
Malicious code in bioql PyPI...
EUVD-2025-13471
Malicious code in bioql PyPI...
EUVD-2025-7536
Malicious code in bioql PyPI...
EUVD-2025-13404
Malicious code in bioql PyPI...
EUVD-2025-13482
Malicious code in bioql PyPI...
EUVD-2025-13469
Malicious code in bioql PyPI...