Lucene search
+L

185 matches found

Positive Technologies
Positive Technologies
•added 2026/05/12 12:00 a.m.•32 views

PT-2026-40000

Authorization bypass through User-Controlled key vulnerability in ABIS Technology Ltd. Co. BAPSİS allows Exploitation of Trusted Identifiers. This issue affects BAPSİS: before v.202604152042...

8.8CVSS5.8AI score0.00419EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/02/14 7:22 p.m.•29 views

CVE-2026-1619

Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc. FlexCity/Kiosk allows Exploitation of Trusted Identifiers.This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36...

8.3CVSS5.4AI score0.00337EPSS
SaveExploits0References1
OSV
OSV
•added 2026/02/13 2:16 p.m.•13 views

CVE-2026-1619

Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc. FlexCity/Kiosk allows Exploitation of Trusted Identifiers.This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36...

8.3CVSS5.8AI score
SaveExploits0References1
CVE
CVE
•added 2026/02/13 1:20 p.m.•38 views

CVE-2026-1619

CVE-2026-1619 is an authorization bypass in Universal Software Inc.'s FlexCity/Kiosk (versions 1.0 up to 1.0.35). The vulnerability stems from a user-controlled key that enables exploitation of trusted identifiers, with CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L (base score 8.3). Affected prod...

8.3CVSS5.8AI score0.00337EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/02/13 12:00 a.m.•31 views

PT-2026-7990

Name of the Vulnerable Software and Affected Versions Universal Software Inc. FlexCity/Kiosk versions prior to 1.0.36 Description An authorization bypass exists in FlexCity/Kiosk due to exploitation of trusted identifiers through a user-controlled key. This allows unauthorized access...

8.3CVSS5.4AI score0.00337EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/02/13 12:00 a.m.•26 views

Universal FlexCity/Kiosk 安全漏洞

Universal FlexCity/Kiosk is a smart city self-service terminal system developed by the Turkish company Universal. Versions of Universal FlexCity/Kiosk from 1.0 to 1.0.36 contained security vulnerabilities. These vulnerabilities stemmed from bypassing authorization using user control keys,...

8.3CVSS5.8AI score0.00337EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/13 12:00 a.m.•8 views

CVE-2026-1619: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in Universal Software Inc. FlexCity/Kiosk allows Exploitation of Trusted Identifiers. This issue affects FlexCity/Kiosk: from 1.0 before 1.0.36...

8.3CVSS5.8AI score0.00337EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/02/11 7:44 p.m.•12 views

CVE-2025-7347

Authorization Bypass Through User-Controlled Key vulnerability in Dinibh Puzzle Software Solutions Dinibh Patrol Tracking System allows Exploitation of Trusted Identifiers.This issue affects Dinibh Patrol Tracking System: through 10022026. NOTE: The vendor was contacted early about this disclosur...

8.8CVSS5.5AI score0.00311EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/10 2:08 p.m.•11 views

CVE-2025-7347

Authorization Bypass Through User-Controlled Key vulnerability in Dinibh Puzzle Software Solutions Dinibh Patrol Tracking System allows Exploitation of Trusted Identifiers. This issue affects Dinibh Patrol Tracking System: through 10022026. NOTE: The vendor was contacted early about this disclosu...

8.8CVSS5.4AI score0.00311EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/02/10 2:08 p.m.•47 views

CVE-2025-7347 IDOR in Dinibh Puzzle's Dinibh Patrol Tracking System

Authorization Bypass Through User-Controlled Key vulnerability in Dinibh Puzzle Software Solutions Dinibh Patrol Tracking System allows Exploitation of Trusted Identifiers. This issue affects Dinibh Patrol Tracking System: through 10022026. NOTE: The vendor was contacted early about this disclosu...

8.8CVSS0.00311EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/10 12:00 a.m.•4 views

CVE-2025-7347: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in Dinibh Puzzle Software Solutions Dinibh Patrol Tracking System allows Exploitation of Trusted Identifiers. This issue affects Dinibh Patrol Tracking System: through 10022026. NOTE: The vendor was contacted early about this disclosu...

8.8CVSS5.8AI score0.00311EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/02/10 12:00 a.m.•18 views

Dinibh Patrol Tracking System 安全漏洞

Dinibh Patrol Tracking System is an inspection management platform developed by the Turkish company Dinibh. The versions of Dinibh Patrol Tracking System 10022026 and earlier contained security vulnerabilities. These vulnerabilities stemmed from bypassing authorization using user control keys,...

8.8CVSS5.8AI score0.00311EPSS
SaveExploits0References1
OSV
OSV
•added 2026/01/29 2:16 p.m.•18 views

CVE-2025-7013

Authorization Bypass Through User-Controlled Key vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Exploitation of Trusted Identifiers.This issue affects Menu Panel: through 29012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

9.8CVSS5.8AI score0.00374EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/29 2:16 p.m.•18 views

CVE-2025-7013

Authorization Bypass Through User-Controlled Key vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Exploitation of Trusted Identifiers. This issue affects Menu Panel: through 29012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

9.8CVSS0.00374EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/29 1:40 p.m.•15 views

EUVD-2025-206543

Authorization Bypass Through User-Controlled Key vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Exploitation of Trusted Identifiers.This issue affects Menu Panel: through 29012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

5.7CVSS5.9AI score0.00374EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/29 1:40 p.m.•11 views

CVE-2025-7013

Authorization Bypass Through User-Controlled Key vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Exploitation of Trusted Identifiers. This issue affects Menu Panel: through 29012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

9.8CVSS5.4AI score0.00374EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/01/29 12:00 a.m.•26 views

QRMenümPro Menu Panel security vulnerabilities

QRMenümPro Menu Panel is a backend management panel for the intelligent menu system developed by the Turkish company QRMenümPro. The QRMenümPro Menu Panel versions dated 29012026 and earlier contained security vulnerabilities. These vulnerabilities were caused by user-controllable keys that allow...

9.8CVSS5.8AI score0.00374EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/29 12:00 a.m.•3 views

CVE-2025-7013: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Exploitation of Trusted Identifiers. This issue affects Menu Panel: through 29012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

9.8CVSS5.8AI score0.00374EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/01/23 3:21 p.m.•14 views

CVE-2025-10855

Authorization Bypass Through User-Controlled Key vulnerability in Solvera Software Services Trade Inc. Teknoera allows Exploitation of Trusted Identifiers.This issue affects Teknoera: through 01102025...

7.5CVSS5.3AI score0.00421EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/22 1:16 p.m.•14 views

CVE-2025-10855

Authorization Bypass Through User-Controlled Key vulnerability in Solvera Software Services Trade Inc. Teknoera allows Exploitation of Trusted Identifiers. This issue affects Teknoera: through 01102025...

7.5CVSS0.00421EPSS
SaveExploits0References2
Rows per page
Query Builder