Search Vulnerabilities

Unauthorized Access to Admin Functionality via Forced Browsing

HCL Aftermarket EPC is vulnerable to attack since the Application is vulnerable to Lucky 13

agentejo Cockpit CMS htaccess config.yaml YAMLLoad file access

Authenticated unintended access to critical program parameters

Multiple Vulnerabilities in IBM Datacap

Unauthenticated direct access to web data in Wertheim SafeController Software exposes files

Keycloak-rest-admin-ui-ext: authorization bypass vulnerability in the admin-ui-ext bulk role-mapping-delete endpoints of keycloak

Concrete CMS 9.5.0 and below is vulnerable to authorization bypass in Calendar Block since action_get_events does not check canView on the calendar

Org.keycloak.keycloak-services: improper access control on keycloak server when the account account api feature is disabled

Vision Helpdesk before 5.7.0 (patched in 5.6.10) allows attackers to read user profiles via modified serialized cookie data to vis_client_id

code-projects Online Food Ordering System localhost.sql privilege escalation

OpenEMR has a Privilege Escalation that Allows a Low-Level User to View Admin-Only Data

OpenEMR has Improper ACL On Import/Export Popup

code-projects Simple Food Ordering System Database Backup food.sql file access

OPEXUS eComplaint unauthenticated file upload

Credentials exposure in tinycontrol devices

kalyan02 NanoCMS User Information pagesdata.txt direct request

ALGO 8180 IP Audio Alerter Web UI Direct Request Information Disclosure Vulnerability

OpenFlagr <= 1.1.18 Authentication Bypass via Prefix Whitelist Path Normalization

PbootCMS SQLite Database pbootcms.db file access