Lucene search
+L

83 matches found

NVD
NVD
•added 2026/10/21 1:18 p.m.•8 views

CVE-2026-114245

A weakness has been identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected by this issue is some unknown functionality of the file /Admin/includes/Admin-Register-inc.php of the component Add New Admin Form...

7.5CVSS0.00377EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/21 12:45 p.m.•8 views

CVE-2026-114245 dhikshitha29 Insurance-Management-System Add New Admin Form Admin-Register-inc.php improper authorization

A weakness has been identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected by this issue is some unknown functionality of the file /Admin/includes/Admin-Register-inc.php of the component Add New Admin Form...

7.5CVSS6.8AI score0.00377EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/21 12:45 p.m.•23 views

CVE-2026-114245 dhikshitha29 Insurance-Management-System Add New Admin Form Admin-Register-inc.php improper authorization

A weakness has been identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected by this issue is some unknown functionality of the file /Admin/includes/Admin-Register-inc.php of the component Add New Admin Form...

7.5CVSS0.00377EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/21 12:45 p.m.•16 views

CVE-2026-114245

A vulnerability exists in the dhikshitha29 Insurance-Management-System within the Add New Admin Form component. Specifically, an improper authorization flaw in the /Admin/includes/Admin-Register-inc.php file allows for remote exploitation. An attacker can manipulate the submit/Admin_id/password a...

7.5CVSS6.8AI score0.00377EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/21 12:45 p.m.•11 views

EUVD-2026-107253

A weakness has been identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected by this issue is some unknown functionality of the file /Admin/includes/Admin-Register-inc.php of the component Add New Admin Form...

7.5CVSS6.8AI score0.00377EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/10/21 12:45 p.m.•10 views

CVE-2026-114245 dhikshitha29 Insurance-Management-System Add New Admin Form Admin-Register-inc.php improper authorization

A weakness has been identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected by this issue is some unknown functionality of the file /Admin/includes/Admin-Register-inc.php of the component Add New Admin Form...

6.9CVSS5.4AI score
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/10/21 12:00 a.m.•9 views

PT-2026-120572

A weakness has been identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected by this issue is some unknown functionality of the file /Admin/includes/Admin-Register-inc.php of the component Add New Admin Form...

7.5CVSS6.8AI score0.00377EPSS
SaveExploits0References7
attackerkb
attackerkb
•added 2026/01/30 10:07 p.m.•14 views

CVE-2020-37046

Sistem Informasi Pengumuman Kelulusan Online 1.0 contains a cross-site request forgery vulnerability that allows attackers to add unauthorized admin users through the tambahuser.php endpoint. Attackers can craft a malicious HTML form to submit admin credentials and create new administrative...

5.3CVSS5.8AI score0.00199EPSS
SaveExploits0References4
Veracode
Veracode
•added 2025/09/10 8:39 a.m.•14 views

Cross-site Scripting (XSS)

moonshine/moonshine is vulnerable to Cross-site Scripting XSS. The vulnerability is due to the application allowing malicious HTML payloads in the Name parameter when creating a new Admin, leading to arbitrary JavaScript execution...

4.9CVSS6.1AI score0.00559EPSS
SaveExploits2References4Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•13 views

Malicious code in new-admin (npm)

The package new-admin was found to contain malicious code...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/08/14 6:52 p.m.•8 views

MAL-2025-27340 Malicious code in new-admin (npm)

The package new-admin was found to contain malicious code...

7.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/22 4:57 p.m.•18 views

CVE-2020-22251

Cross Site Scripting XSS vulnerability in phpList 3.5.3 via the login name field in Manage Administrators when adding a new admin...

4.8CVSS5.5AI score0.00622EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/02/05 11:02 p.m.•17 views

CVE-2022-1248

A vulnerability was found in SAP Information System 1.0 which has been rated as critical. Affected by this issue is the file /SAPInformationSystem/controllers/addadmin.php. An unauthenticated attacker is able to create a new admin account for the web application with a simple POST request. Exploi...

7.5CVSS6.9AI score0.01353EPSS
SaveExploits2References1
Packet Storm
Packet Storm
•added 2024/08/22 12:00 a.m.•247 views

Online Shopping System Master 1.0 Cross Site Request Forgery

============================================================================================================================================= | Title : online shopping system master v1.0 CSRF Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 128.0.3...

7.4AI score
SaveExploits0
osv_cve
osv_cve
•added 2024/03/13 5:16 p.m.•21 views

CVE-2024-28195 Cross-Site Request Forgery (CSRF) vulnerability in API and login in your_spotify

yourspotify is an open source, self hosted Spotify tracking dashboard. YourSpotify versions 1.9.0 do not protect the API and login flow against Cross-Site Request Forgery CSRF. Attackers can use this to execute CSRF attacks on victims, allowing them to retrieve, modify or delete data on the...

8.1CVSS7.8AI score
SaveExploits0References4
GithubExploit
GithubExploit
•added 2024/03/02 9:09 p.m.•268 views

Exploit for Improper Authentication in Userproplugin Userpro

CVE-2023-2437 Hello, ALL , i m RxR I Coded Tool For Expl...

9.8CVSS8.6AI score0.06746EPSS
SaveExploits4
zdt
zdt
•added 2024/02/27 12:00 a.m.•447 views

Atlassian Confluence Data Center and Server - Authentication Bypass Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Atlassian Confluence Data Center and Server Authentication Bypass via Broken Access Control', 'Description' = %q This module exploits a broken...

9.8CVSS8.3AI score0.99223EPSS
SaveExploits43
GithubExploit
GithubExploit
•added 2024/02/04 1:40 a.m.•335 views

Exploit for Forced Browsing in Fortra Goanywhere_Managed_File_Transfer

CVE-2024-0204: Authentication Bypass in GoAnywhere MFT Script...

9.8CVSS8.6AI score0.95086EPSS
SaveExploits11
GithubExploit
GithubExploit
•added 2024/01/23 8:16 p.m.•98 views

Exploit for Forced Browsing in Fortra Goanywhere_Managed_File_Transfer

CVE-2024-0204: Authentication Bypass in GoAnywhere MFT Script...

9.8CVSS8.4AI score0.95086EPSS
SaveExploits11
Packet Storm
Packet Storm
•added 2023/08/02 12:00 a.m.•358 views

Courier Deprixa Pro Integrated Web System 3.2.5 Cross Site Request Forgery

==================================================================================================================================== | Title : Courier Deprixa Pro - Integrated Web System v3.2.5 CSRF Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla...

7.1AI score
SaveExploits0
Rows per page
Query Builder