Lucene search
+L

6644961 matches found

NVD
NVD
added 2026/09/20 9:16 a.m.2 views

CVE-2026-93974

A flaw has been found in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the file /reviewer0/admins/assessments/databank/btnfunctions.php?action=remove. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched...

7.5CVSS
SaveExploits0References6
NVD
NVD
added 2026/09/20 9:16 a.m.1 views

CVE-2026-93973

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the file /reviewer0/admins/assessments/subject/btnfunctions.php?action=remove. Performing a manipulation of the argument ID results in sql injection. The attack can...

7.5CVSS
SaveExploits0References6
CVE
CVE
added 2026/09/20 9:15 a.m.2 views

CVE-2026-86555 Hardcoded Key Vulnerability in ZTE SmartLife APP

The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plaintext in the code. Once the key is obtained, the server information can be decrypted, thus exposing it...

6.2CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/20 9:15 a.m.1 views

CVE-2026-86555 Hardcoded Key Vulnerability in ZTE SmartLife APP

The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plaintext in the code. Once the key is obtained, the server information can be decrypted, thus exposing it...

6.2CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/20 9:00 a.m.3 views

CVE-2026-93974

A flaw has been found in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the file /reviewer0/admins/assessments/databank/btnfunctions.php?action=remove. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched...

7.5CVSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/20 9:00 a.m.4 views

CVE-2026-93974 SourceCodester Online Reviewer Management System btn_functions.php remove sql injection

A flaw has been found in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the file /reviewer0/admins/assessments/databank/btnfunctions.php?action=remove. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched...

7.5CVSS
SaveExploits0References6
Chainguard
Chainguard
added 2026/09/20 8:54 a.m.3 views

CVE-2026-77301 vulnerabilities

Vulnerabilities for packages: saf...

7.5CVSS0.00411EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/09/20 8:54 a.m.3 views

CVE-2026-85716 vulnerabilities

Vulnerabilities for packages: pinot...

3.7CVSS0.00316EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/09/20 8:53 a.m.3 views

CVE-2026-77301 vulnerabilities

Vulnerabilities for packages: saf...

7.5CVSS0.00411EPSS
SaveExploits0
CVE
CVE
added 2026/09/20 8:45 a.m.2 views

CVE-2026-93973

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the file /reviewer0/admins/assessments/subject/btnfunctions.php?action=remove. Performing a manipulation of the argument ID results in sql injection. The attack can...

7.5CVSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/20 8:45 a.m.6 views

CVE-2026-93973 SourceCodester Online Reviewer Management System btn_functions.php remove sql injection

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the file /reviewer0/admins/assessments/subject/btnfunctions.php?action=remove. Performing a manipulation of the argument ID results in sql injection. The attack can...

7.5CVSS
SaveExploits0References6
NVD
NVD
added 2026/09/20 8:16 a.m.8 views

CVE-2026-93972

A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/course/btnfunctions.php. Such manipulation of the argument courseID leads to sql injection. It is possible to...

7.5CVSS
SaveExploits0References7
NVD
NVD
added 2026/09/20 8:16 a.m.7 views

CVE-2026-93971

A weakness has been identified in aiyiyi121 SxDevOps 1.0/1.1. Impacted is an unknown function of the file backend/sxdevops/settings.py. This manipulation causes information disclosure. It is possible to initiate the attack remotely. Patch name: 2b4bf8585c3e731e7a8af30801ea46680bc783f9. It is...

6.9CVSS
SaveExploits0References7
NVD
NVD
added 2026/09/20 8:16 a.m.6 views

CVE-2026-93970

A security flaw has been discovered in aiyiyi121 SxDevOps 1.0/1.1. This issue affects some unknown processing of the file backend/sxdevops/settings.py of the component Settings Handler. The manipulation results in hard-coded credentials. The attack may be performed from remote. The patch is...

7.5CVSS
SaveExploits0References7
NVD
NVD
added 2026/09/20 8:16 a.m.5 views

CVE-2026-86554

SmartLife app dynamically generates brand‑new SmartLife application authentication parameters within its runtime process. With the obtained SmartLife application authentication parameters, attackers can directly invoke the backend interface /account/verify.serv to determine whether a target email...

4.3CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/20 7:55 a.m.2 views

EUVD-2026-83712

SmartLife app dynamically generates brand‑new SmartLife application authentication parameters within its runtime process. With the obtained SmartLife application authentication parameters, attackers can directly invoke the backend interface /account/verify.serv to determine whether a target email...

4.3CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/20 7:55 a.m.12 views

CVE-2026-86554 Email enumeration and account ID leakage vulnerabilities in ZTE SmartLife APP

SmartLife app dynamically generates brand‑new SmartLife application authentication parameters within its runtime process. With the obtained SmartLife application authentication parameters, attackers can directly invoke the backend interface /account/verify.serv to determine whether a target email...

4.3CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/20 7:55 a.m.7 views

CVE-2026-86554

SmartLife app dynamically generates brand‑new SmartLife application authentication parameters within its runtime process. With the obtained SmartLife application authentication parameters, attackers can directly invoke the backend interface /account/verify.serv to determine whether a target email...

4.3CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/20 7:45 a.m.9 views

CVE-2026-93972

A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/course/btnfunctions.php. Such manipulation of the argument courseID leads to sql injection. It is possible to...

7.5CVSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/09/20 7:45 a.m.11 views

CVE-2026-93972 SourceCodester Online Reviewer Management System btn_functions.php sql injection

A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/course/btnfunctions.php. Such manipulation of the argument courseID leads to sql injection. It is possible to...

7.5CVSS
SaveExploits0References7
Rows per page
Query Builder