136 matches found
CVE-2020-25540
CVE-2020-25540 ThinkAdmin CVE-2020-25540 poc Since the directory traversal vulnerability is too limited, only the file reading function has been implemented. Please go easy on the criticism, and I appreciate your guidance. The logic is based on the PHP source code; the key is the encryption metho...
ThinkAdmin-CVE-2020-25540
ThinkAdmin-CVE-2020-25540 ThinkAdmin CVE-2020-25540 POC Usage $ python3 exploit.py -t -c...
cve-2020-25540
ThinkAdmin Unauthorized Directory Listing/Arbitrary File Read cve-2020-25540 Usage python3 cve-2020-25540.py url...
ThinkAdmin 6 - Local File Inclusion
ThinkAdmin version 6 is affected by a local file inclusion vulnerability because an unauthorized attacker can read arbitrary files on a remote server via GET request encode parameter. id: CVE-2020-25540 info: name: ThinkAdmin 6 - Local File Inclusion author: geeknik severity: high description:...
CVE-2020-25540
cve-2020-25540 This script is used to exploit arbitrary file read vulnerabilities in ThinkAdmin v5 and v6 versions ==Note that the interface path may vary across different versions some are based on the original ThinkAdmin with secondary development== The original interface is:...
CVE-2026-111655
ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super administrators to read and overwrite other administrators' file records via admin/file.edit. Attackers holding the admin/file.edit node can request or POST a target id with...
CVE-2026-111655 ThinkAdmin think-plugs-admin through 1.0.81 IDOR via admin/file.edit
ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super administrators to read and overwrite other administrators' file records via admin/file.edit. Attackers holding the admin/file.edit node can request or POST a target id with...
CVE-2026-111655
The ThinkAdmin think-plugs-admin software (through version 1.0.81 ) is vulnerable to an Insecure Direct Object Reference (IDOR) flaw. The issue exists in the admin/file.edit endpoint, where non-super administrators can read or overwrite file records belonging to other administrators. By requestin...
CVE-2026-111655 ThinkAdmin think-plugs-admin through 1.0.81 IDOR via admin/file.edit
ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super administrators to read and overwrite other administrators' file records via admin/file.edit. Attackers holding the admin/file.edit node can request or POST a target id with...
EUVD-2026-103077
ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super administrators to read and overwrite other administrators' file records via admin/file.edit. Attackers holding the admin/file.edit node can request or POST a target id with...
CVE-2026-111655: Authorization Bypass Through User-Controlled Key
ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super administrators to read and overwrite other administrators' file records via admin/file.edit. Attackers holding the admin/file.edit node can request or POST a target id with...
PT-2026-116054
šØ CVE-2026-111655 ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super administrators to read and overwrite other administrators' file records via admin/file.edit. Attackers holding the admin/file.edit node can request or POS...
ThinkAdmin 6 - Local File Inclusion Detection
ThinkAdmin version 6 is affected by a local file inclusion vulnerability because an unauthorized attacker can read arbitrary files on a remote server via GET request encode parameter. !/usr/bin/env python3 -- coding: utf-8 -- """ThinkAdmin version 6 is affected by a local file inclusion...
EUVD-2021-1196
Malware in sbrugna...
EUVD-2023-3145
Malicious code in bioql PyPI...
EUVD-2024-33280
Malicious code in bioql PyPI...
EUVD-2023-38874
Malicious code in bioql PyPI...
EUVD-2023-52992
Malicious code in bioql PyPI...
EUVD-2022-5029
Malicious code in bioql PyPI...
CVE-2024-10749
A vulnerability, which was classified as critical, was found in ThinkAdmin up to 6.1.67. Affected is the function script of the file /app/admin/controller/api/Plugs.php. The manipulation of the argument uptoken leads to deserialization. It is possible to launch the attack remotely. The complexity...