CVE-2026-82915 Path Traversal in Bimser Solution Software's eBA Plus

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Path Traversal. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.1...

CVE-2026-82915 Path Traversal in Bimser Solution Software's eBA Plus

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Path Traversal. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.1...

CVE-2026-82915

The eBA Plus Document and Workflow Management System by Bimser Solution Software Trade Inc. is vulnerable to a Path Traversal vulnerability. This issue affects versions from 6.7.141 before 10.0.11 . The flaw allows for improper limitation of a pathname to a restricted directory. No specific explo...

CVE-2026-85134 Arbitrary File Upload Leading to Remote Command Execution in Bimser's eBA Plus

Unrestricted upload of file with dangerous type vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Upload a Web Shell to a Web Server. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11...

CVE-2026-82969 Stored XSS in BİMSER's eBA Plus

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Stored XSS. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before...

CVE-2025-65320

CVE-2025-65320 标题 Abacre Restaurant Point of Sale POS 进程内存中以明文形式存储敏感许可材料 概览 在 Abacre Restaurant Point of Sale POS 版本 = 15.0.0.1656 中存在一个漏洞，其中敏感许可数据在软件激活工作流期间以进程内存中的明文形式 存储。 在许可证激活过程中，应用程序生成并处理设备绑定的许可证密钥 ，这些密钥旨在针对特定机器验证软件安装。然而，这些值在没有适当保护或安全内存处理机制的情况下分配到进程内存中。 因为这些值以明文形式...

PT-2026-102344

Name of the Vulnerable Software and Affected Versions Eleveo Call Recording Software version 9.7.0 Description Improper access controls exist within the Query Builder component, specifically affecting the '/callrec/searchAction.do' endpoint. This flaw allows for remote exploitation. Recommendatio...

CVE-2026-82915: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Path Traversal. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.1...

CVE-2026-101145: Improper Neutralization of Special Elements used in an LDAP Query

A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/userAddAction.do of the component User Management. Such manipulation of the argument Username leads to ldap injection. The attack can be executed remotely. The...

CVE-2026-101144: Improper Access Control

A vulnerability was determined in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/searchAction.do of the component Query Builder. This manipulation causes improper access controls. Remote exploitation of the attack is possible. The exploit has been publicly...

CVE-2026-101141: Improper Neutralization of Input During Web Page Generation

A flaw has been found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/audio.jsp of the component Play Audio Page. Executing a manipulation of the argument viewRoleId/cfType can lead to cross site scripting. The attack can be launched remotely. The...

PT-2026-102331

Name of the Vulnerable Software and Affected Versions Eleveo Call Recording Software version 9.7.0 Description A flaw in the Play Audio Page component allows remote attackers to perform cross-site scripting XSS, which is a technique used to inject malicious scripts into web pages viewed by other...

CVE-2023-43147

CVE-2023-43147 厂商：PHPJabbers 厂商主页：https://www.phpjabbers.com/ 软件链接：https://www.phpjabbers.com/limo-booking-software 版本：1.0 测试环境：Windows 10 Pro 影响：添加具有管理员权限的攻击者用户 CVE： limo-booking-software 中的跨站请求伪造漏洞允许远程攻击者执行添加用户操作并赋予管理员权限 POC 1 - 创建包含以下代码的文件并保存为 HTML。如果要保存新的请求以制造 CSRF，请确保将 roleid=0 改为 1 roleid=1...

CVE-2023-40868

CVE-2023-40868 mooSocial MooSocial Software v.Demo 中存在跨站请求伪造漏洞，远程攻击者可利用该漏洞通过“删除账户”和“停用账户”功能执行任意代码。 该漏洞是 mooSocial MooSocial Software v.Demo 应用程序中的一个跨站请求伪造（CSRF）漏洞。CSRF 漏洞是指恶意攻击者可以诱骗受害者执行其本无意执行的操作。在这种情况下，攻击者可以诱骗受害者点击包含恶意代码的链接或打开包含恶意代码的文件。该代码随后可用于删除或停用受害者的账户。 POC 1 - 创建一个包含以下代码的文件，并保存为 HTML 文件...

CVE-2023-40869

CVE-2023-40869 mooSocial mooSocial Software v.3.1.6 和 3.1.7 中存在跨站脚本（XSS）漏洞，远程攻击者可通过向 editmenu、copuon 和 groupcategorias 函数发送特制脚本执行任意代码 通过 CSRF 实现的存储型 XSS。 受影响的路径 http://admin-socialcommerce.moosocial.com/admin/group/groupcategories http://admin-socialcommerce.moosocial.com/admin/coupon/...

CVE-2021-3438

CVE-2021-3438 某些HP LaserJet产品和三星打印机产品的软件驱动程序中存在潜在的缓冲区溢出，可能导致权限提升。...

privacytools.io

加密以对抗全球大规模监控。 贡献 此项目已归档。 有关更多信息，请参阅我们的 欢迎来到 Privacy Guides 文章。我们的项目现已迁移至 Privacy Guides。 对于隐私相关的网站来说，保持内容更新非常重要。请留意 此处 所列应用程序的软件更新，并关注推荐服务商的最新动态。我们尽力保持同步，但我们并非完美，互联网瞬息万变。因此，如果您发现错误，或认为某个服务商不应被收录，或缺少某个合格的服务提供商，或某个浏览器插件不再是首选，或任何其他问题，欢迎开启 讨论 或 问题 来纠正错误。 和我们聊聊吧！ 如果您想提供帮助，欢迎加入我们的休息室聊天室...

WordPress WPeMatico RSS Feed Fetcher plugin < 2.8.27 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Philipp Doblhofer in WordPress Plugin WPeMatico RSS Feed Fetcher versions 2.8.27...

WordPress WebFacing Email Accounts for cPanel plugin 5.3-5.3.6 - Unauthenticated LFI vulnerability

Unauthenticated LFI vulnerability discovered by nobody in WordPress Plugin WebFacing Email Accounts for cPanel versions 5.3-5.3.6...

WordPress UpdraftPlus: WP Backup & Migration Plugin plugin 1.23.8-1.26.7 - Subscriber+ Remote Storage Credential Disclosure vulnerability

Subscriber+ Remote Storage Credential Disclosure vulnerability discovered by Jakub Herman in WordPress Plugin UpdraftPlus versions 1.23.8-1.26.7...