📦 Mineadmin

Insecure permissions in MineAdmin v3.x scheduled tasks allow attackers to execute arbitrary commands, leading to remote code execution and full account takeover. This affects all MineAdmin v3.x instal...

This vulnerability in MineAdmin's JWT token refresh function allows attackers to bypass authentication by manipulating insufficiently verified data. It affects all MineAdmin 1.x and 2.x installations,...

A security vulnerability in MineAdmin 1.x/2.x allows remote attackers to exploit the Swagger component to disclose sensitive information. This affects all systems running vulnerable versions of MineAd...

This vulnerability in MineAdmin 1.x/2.x allows attackers to bypass authorization controls via the /system/cache/view interface, potentially accessing unauthorized system functions. The attack can be p...

This vulnerability in MineAdmin 1.x/2.x allows remote attackers to disclose sensitive information by manipulating the ID parameter in the /system/downloadById endpoint. The attack complexity is high a...

This vulnerability in MineAdmin 1.x/2.x allows remote attackers to access sensitive information through manipulation of the ID parameter in the /system/getFileInfoById endpoint. The attack requires hi...