Lucene search
+L

176 matches found

Kitploit
Kitploit
•added 2026/10/09 10:01 p.m.•19 views

CVE-2024-39211

CVE-2024-39211 Enumeración de usuarios en Kaiten Kaiten - un sistema de gestión de flujos de trabajo, es vulnerable a ataques de fuerza bruta sin restricciones sobre los nombres de usuario y las direcciones de correo electrónico registradas en el sistema mediante una simple petición POST...

5.3CVSS6.3AI score0.01136EPSS
SaveExploits1References2
Kitploit
Kitploit
•added 2026/10/09 11:44 a.m.•17 views

CVE-2024-41276

CVE-2024-41276 Bypass de Autenticación en Kaiten Kaiten - un sistema de gestión de flujos de trabajo. Una vulnerabilidad en Kaiten permite a los atacantes omitir el mecanismo de autenticación por código PIN. La aplicación requiere que los usuarios ingresen un código PIN de 6 dígitos enviado a su...

9.8CVSS6.2AI score0.01073EPSS
SaveExploits1
NVD
NVD
•added 2026/09/28 9:17 a.m.•12 views

CVE-2026-82915

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Path Traversal. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.1...

6.5CVSS0.00295EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/28 9:17 a.m.•14 views

CVE-2026-82969

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Stored XSS. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before...

5.4CVSS0.00148EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/28 9:17 a.m.•13 views

CVE-2026-85134

Unrestricted upload of file with dangerous type vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Upload a Web Shell to a Web Server. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11...

8.8CVSS0.00266EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/28 8:32 a.m.•37 views

CVE-2026-82915 Path Traversal in Bimser Solution Software's eBA Plus

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Path Traversal. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.1...

6.5CVSS0.00295EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/28 8:32 a.m.•9 views

EUVD-2026-88173

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Path Traversal. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.1...

6.5CVSS5.8AI score0.00295EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/28 8:32 a.m.•21 views

CVE-2026-82915

The eBA Plus Document and Workflow Management System by Bimser Solution Software Trade Inc. is vulnerable to a Path Traversal vulnerability. This issue affects versions from 6.7.141 before 10.0.11 . The flaw allows for improper limitation of a pathname to a restricted directory. No specific explo...

6.5CVSS5.8AI score0.00295EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/28 8:32 a.m.•14 views

CVE-2026-82915 Path Traversal in Bimser Solution Software's eBA Plus

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Path Traversal. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.1...

6.5CVSS5.8AI score0.00295EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/28 8:28 a.m.•16 views

CVE-2026-85134

The eBA Plus Document and Workflow Management System by Bimser Solution Software Trade Inc. is vulnerable to an unrestricted upload of files with dangerous types . This flaw allows an attacker to upload a web shell to the web server, potentially leading to Remote Command Execution . The issue imp...

8.8CVSS5.8AI score0.00266EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/28 8:28 a.m.•34 views

CVE-2026-85134 Arbitrary File Upload Leading to Remote Command Execution in Bimser's eBA Plus

Unrestricted upload of file with dangerous type vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Upload a Web Shell to a Web Server. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11...

8.8CVSS0.00266EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/28 8:28 a.m.•9 views

EUVD-2026-88171

Unrestricted upload of file with dangerous type vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Upload a Web Shell to a Web Server. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11...

8.8CVSS5.8AI score0.00266EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/28 8:24 a.m.•10 views

CVE-2026-82969 Stored XSS in BİMSER's eBA Plus

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Stored XSS. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before...

5.4CVSS5.8AI score0.00148EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/28 8:24 a.m.•17 views

CVE-2026-82969

The eBA Plus Document and Workflow Management System by Bimser Solution Software Trade Inc. is vulnerable to a Stored XSS flaw due to improper neutralization of input during web page generation. This vulnerability affects versions 6.7.141 through 10.0.11 . The impact allows for the storage of mal...

5.4CVSS5.8AI score0.00148EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/28 8:24 a.m.•13 views

EUVD-2026-88169

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Stored XSS. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before...

5.4CVSS5.8AI score0.00148EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/28 8:24 a.m.•35 views

CVE-2026-82969 Stored XSS in BİMSER's eBA Plus

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Stored XSS. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before...

5.4CVSS0.00148EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/28 12:00 a.m.•4 views

PT-2026-99810

Name of the Vulnerable Software and Affected Versions eBA Plus Document and Workflow Management System versions 6.7.141 through 10.0.10 Description An unrestricted upload of files with dangerous types allows an attacker to upload a web shell to the web server, which can lead to remote command...

8.8CVSS5.9AI score0.00266EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/28 12:00 a.m.•7 views

CVE-2026-82969: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Stored XSS. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before...

5.4CVSS5.9AI score0.00148EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/28 12:00 a.m.•5 views

CVE-2026-85134: Unrestricted Upload of File with Dangerous Type

Unrestricted upload of file with dangerous type vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Upload a Web Shell to a Web Server. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11...

8.8CVSS5.9AI score0.00266EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/28 12:00 a.m.•6 views

PT-2026-99808

Name of the Vulnerable Software and Affected Versions eBA Plus Document and Workflow Management System versions 6.7.141 through 10.0.10 Description An improper limitation of a pathname to a restricted directory, known as Path Traversal, exists in the system. This flaw allows an attacker to access...

6.5CVSS5.7AI score0.00295EPSS
SaveExploits0References4
Rows per page
Query Builder