Skip to content
OpenAdvisories

Vendor

go2ismail

7 known vulnerabilities.

Products

Asp.Net-Core-Inventory-Order-Management-System 5 Free-CRM 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-125383

    INDOTALENT WHMS before 10.20261109 Hard-Coded JWT Signing Key Authentication Bypass

    INDOTALENT WHMS (Asp.Net-Core-Inventory-Order-Management-System) before 10.20261109 contains an authentication bypass vulnerability caused by a hard-coded JWT signing key, issuer and audience in appsettings.json. Unauthenticated remote attackers can forge tok…

    go2ismail Asp.Net-Core-Inventory-Order-Management-System
  • Critical 9.8
    CVE-2026-125384

    INDOTALENT WHMS before 10.20261109 Default Administrator Credentials via UserAdminSeeder

    INDOTALENT WHMS before 10.20261109 contains a default credentials vulnerability that allows unauthenticated attackers to gain administrator access because UserAdminSeeder creates admin@root.com with password 123456. Attackers can log in with these credentials…

    go2ismail Asp.Net-Core-Inventory-Order-Management-System