The vulnerability of the IAM authentication service for the Kubernetes MinIO Operator STS allows a perpetrator to escalate their privileges and expose protected information.

The vulnerability of the IAM authentication service for the Kubernetes MinIO Operator STS is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to increase their privileges and expose sensitive information...

The vulnerability of the diagnostic logs of the Docker Desktop platform for developing and delivering container applications allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the diagnostic logs of the Docker Desktop platform for developing and delivering container applications is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of the yiisoft/yii2-redis framework in Yii, which allows attackers to expose protected information.

The vulnerability of the yiisoft/yii2-redis framework in Yii is related to the exposure of information through registration files. Exploiting this vulnerability allows a malicious actor to disclose protected information through the AUTH parameter...

CVE-2025-30133

An issue was discovered on IROAD Dashcam FX2 devices. Bypass of Device Pairing/Registration can occur. It requires device registration via the "IROAD X View" app for authentication, but its HTTP server lacks this restriction. Once connected to the dashcam's Wi-Fi network via the default password...

The vulnerability of the CI/CD application integration and delivery system provided by JetBrains TeamCity, related to insufficient protection of registration data, allows attackers to disclose protected information.

The vulnerability of the Continuous Integration and Deployment application delivery system CI/CD of TeamCity in JetBrains is related to insufficient protection for registration data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

The vulnerability of the Blitz Identity Provider software lies in its insufficient limit on authentication attempts. This allows a perpetrator to register an email account to which they have no access and then verify it.

The vulnerability of the Blitz Identity Provider software is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to register a mail account that they do not have access to and then verify it...

pentest-wiki

This repository is an online security knowledge library for pentesters/researchers, providing information on various topics related to information gathering. The repository contains documentation on how to gather whois and DNS information, as well as Linux system architecture, processes, and user...

CVE-2025-8156

A vulnerability was found in PHPGurukul User Registration & Login and User Management 3.3 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/lastsevendays-reg-users.php. The manipulation of the argument ID leads to sql injection. The attack may be...

CVE-2025-8157 PHPGurukul User Registration & Login and User Management lastthirtyays-reg-users.php sql injection

A vulnerability was found in PHPGurukul User Registration & Login and User Management 3.3. It has been classified as critical. This affects an unknown part of the file /admin/lastthirtyays-reg-users.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the...

Missing Authentication

backend.ai is vulnerable to Missing Authentication. The vulnerability is due to improper access control caused by lack of authentication checks in the registration feature, allowing arbitrary users to create accounts and access private data even when registration is disabled...

CVE-2015-10143

The Platform theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the ajaxsaveoptions function in all versions up to 1.4.4 exclusive. This makes it possible for unauthenticated attackers to update arbitra...

CVE-2025-6215

The Omnishop plugin for WordPress is vulnerable to Unauthenticated Registration Bypass in all versions up to, and including, 1.0.9. Its /users/register endpoint is exposed to the public permissioncallback always returns true and invokes wpcreateuser unconditionally, ignoring the site’s...

PHPGurukul User Registration & Login and User Management System Security Vulnerability

PHPGurukul User Registration & Login and User Management System is a user registration & login and user management system from PHPGurukul Inc. A security vulnerability exists in PHPGurukul User Registration & Login and User Management System version 3.3, which is caused by SQL injection due to...

PHPGurukul User Registration & Login and User Management System 注入漏洞

PHPGurukul User Registration & Login and User Management System is a user registration & login and user management system from PHPGurukul Inc. An injection vulnerability exists in version 3.3 of the PHPGurukul User Registration & Login and User Management System, which originates from a SQL...

PT-2025-30752 · Phpgurukul · Phpgurukul User Registration & Login +1

Name of the Vulnerable Software and Affected Versions: PHPGurukul User Registration & Login and User Management version 3.3 Description: A critical issue exists in PHPGurukul User Registration & Login and User Management. The vulnerability is due to SQL injection in the...

WordPress User Registration Plugin Cross-Site Scripting Vulnerability

WordPress User Registration Plugin is a plugin for extending the functionality of WordPress, mainly used to create custom user registration forms, manage user accounts and implement membership features. WordPress User Registration Plugin suffers from a cross-site scripting vulnerability that stem...

CVE-2025-8115

A vulnerability has been found in PHPGurukul Taxi Stand Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/new-autoortaxi-entry-form.php. The manipulation of the argument registrationnumber/licensenumber leads to cros...

CVE-2025-6831

The User Registration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's urcrrestrict shortcode in all versions up to, and including, 4.2.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

PHPGurukul Taxi Stand Management System 代码注入漏洞

Taxi Stand Management System is a cab stand management system. Taxi Stand Management System suffers from a cross-site scripting vulnerability that originates from the incorrect operation of the parameter registrationnumber/licensenumber in the file /admin/new-autoortaxi-entry-form.php, for which ...

The vulnerability of microprogrammed software in Canon’s imageRUNNER ADVANCE, imageRUNNER, imagePRESS V, imagePRESS, Satera series printers relates to insufficient protection of registration data, allowing attackers to disclose protected information.

The vulnerability of microprogrammed software in Canon’s imageRUNNER ADVANCE, imageRUNNER, imagePRESS V, imagePRESS, and Satera series printers relates to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...