Lucene search
+L

13 matches found

NVD
NVD
•added 2026/05/22 4:16 p.m.•34 views

CVE-2026-9251

Missing authorization in the entry status management feature in Devolutions Server allows a non-administrator authenticated user to bypass the administrator-enforced Pending Approval flow and gain access to an entry's data via a crafted status change request. This issue affects : Devolutions Serv...

5.4CVSS0.00237EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/05/22 3:29 p.m.•15 views

CVE-2026-9251

Missing authorization in the entry status management feature in Devolutions Server allows a non-administrator authenticated user to bypass the administrator-enforced Pending Approval flow and gain access to an entry's data via a crafted status change request. This issue affects : Devolutions Serv...

5.4CVSS5.8AI score0.00237EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2026/05/22 3:29 p.m.•57 views

CVE-2026-9251

A missing authorization vulnerability in the entry status management feature of Devolutions Server allows a non-administrator authenticated user to bypass the administrator-enforced Pending Approval flow. By sending a crafted status change request, an attacker can gain unauthorized access to an e...

5.4CVSS5.9AI score0.00237EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/05/22 3:29 p.m.•39 views

CVE-2026-9251

Missing authorization in the entry status management feature in Devolutions Server allows a non-administrator authenticated user to bypass the administrator-enforced Pending Approval flow and gain access to an entry's data via a crafted status change request. This issue affects : Devolutions Serv...

0.00237EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/05/22 3:29 p.m.•23 views

EUVD-2026-31463

Missing authorization in the entry status management feature in Devolutions Server allows a non-administrator authenticated user to bypass the administrator-enforced Pending Approval flow and gain access to an entry's data via a crafted status change request. This issue affects : Devolutions Serv...

5.4CVSS5.8AI score0.00237EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/22 12:00 a.m.•3 views

CVE-2026-9251: Missing Authorization

Missing authorization in the entry status management feature in Devolutions Server allows a non-administrator authenticated user to bypass the administrator-enforced Pending Approval flow and gain access to an entry's data via a crafted status change request. This issue affects : Devolutions Serv...

5.4CVSS5.8AI score0.00237EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/22 12:00 a.m.•36 views

PT-2026-42796

Missing authorization in the entry status management feature in Devolutions Server allows a non-administrator authenticated user to bypass the administrator-enforced Pending Approval flow and gain access to an entry's data via a crafted status change request. This issue affects : Devolutions Serv...

5.8AI score0.00237EPSS
SaveExploits0References1
CNVD
CNVD
•added 2023/09/11 12:00 a.m.•18 views

Logic flaw vulnerability in LiveGBS of Anhui Green Persimmon Information Technology Co., Ltd (CNVD-2023-78381)

LiveGBS is a national standard GB28181 streaming media service software , can provide to provide user management and Web visualization page management , open source front-end page source code ; to provide device status management , you can real-time view of whether the device is offline and other...

7.3AI score
SaveExploits0
CNVD
CNVD
•added 2023/09/11 12:00 a.m.•34 views

Logic flaw vulnerability in LiveGBS of Anhui Green Persimmon Information Technology Co., Ltd (CNVD-2023-78383)

LiveGBS is a national standard GB28181 streaming media service software , can provide to provide user management and Web visualization page management , open source front-end page source code ; to provide device status management , you can real-time view of whether the device is offline and other...

7.1AI score
SaveExploits0
zdt
zdt
•added 2016/06/13 12:00 a.m.•30 views

FRticket Ticket System - Persistent Cross-Site Scripting

Exploit for php platform in category web applications Exploit Title: FRticket - Ticket System - Stored XSS Google Dork: if applicable Date: 11.06.2016 Exploit Author: Hamit ABİŞ Vendor Homepage: http://codecanyon.net/item/frticket-ticket-system/16539836 Version: v1 About Get the world’s most...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2016/06/13 12:00 a.m.•31 views

FRticket Ticket System - Persistent Cross-Site Scripting

Exploit Title: FRticket - Ticket System - Stored XSS Google Dork: if applicable Date: 11.06.2016 Exploit Author: Hamit ABİŞ Vendor Homepage: http://codecanyon.net/item/frticket-ticket-system/16539836 Version: v1 About Get the world’s most popular customer support ticket system. FRticket is...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2016/06/13 12:00 a.m.•34 views

FRticket Ticket System 1 Cross Site Scripting

Exploit Title: FRticket - Ticket System - Stored XSS Google Dork: if applicable Date: 11.06.2016 Exploit Author: Hamit ABİŞ Vendor Homepage: http://codecanyon.net/item/frticket-ticket-system/16539836 Version: v1 About Get the world’s most popular customer support ticket system. FRticket is...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2005/02/25 12:00 a.m.•34 views

adpl33t.txt

Adp Elite system is an invoice/purchase order suite very common in car dealerships. It's a telnet based system. When a user logs in via telnet, adp dumps the user into the program where the user can check on a vehicle's status, generate PO's and RO's, etc.... The program is rather large and runs ...

7.4AI score
SaveExploits0
Rows per page
Query Builder