Lucene search
+L

109906 matches found

EUVD
EUVD
•added 2026/09/27 12:31 a.m.•13 views

EUVD-2026-87814

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file viewresult.php. Performing a manipulation of the argument seno results in sql injection. Remote exploitation of the attack is...

7.5CVSS6.9AI score0.00254EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/27 12:00 a.m.•7 views

PT-2026-99694

Name of the Vulnerable Software and Affected Versions CloudClassroom-PHP-Project versions up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be Description A remote SQL injection is possible via the myfid argument in the updatedetailsfromfaculty.php file. SQL injection is a technique where an attacker...

7.5CVSS5.7AI score0.00254EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2026/09/27 12:00 a.m.•3 views

PT-2026-99695

Name of the Vulnerable Software and Affected Versions mathurvishal CloudClassroom-PHP-Project versions up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be Description An issue exists in the file loginlinkstudent.php where manipulating the umail argument allows for missing authentication. This flaw...

6.5CVSS5.6AI score0.00278EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/27 12:00 a.m.•9 views

CVE-2026-100876: Missing Authentication for Critical Function

A vulnerability was found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file loginlinkstudent.php. Performing a manipulation of the argument umail results in missing authentication. Remote exploitation of the atta...

6.5CVSS5.4AI score0.00278EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/27 12:00 a.m.•12 views

CVE-2026-81655: Improper Control of Generation of Code

The Ad Inserter WordPress plugin before 2.8.19 does not correctly restrict access to one of its settings pages, making it reachable by every logged in user under a configuration its own settings allow, and does not filter the content saved there, allowing users with a role as low as subscriber to...

7.5CVSS5.7AI score0.00228EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/27 12:00 a.m.•3 views

PT-2026-99693

Name of the Vulnerable Software and Affected Versions CloudClassroom-PHP-Project versions up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be Description A flaw in the file addnewstudent.php allows for remote SQL injection, a technique where malicious SQL statements are inserted into entry fields for...

7.5CVSS5.6AI score0.00254EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2026/09/27 12:00 a.m.•5 views

PT-2026-99697

Name of the Vulnerable Software and Affected Versions mathurvishal CloudClassroom-PHP-Project versions up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be Description A remote cross site scripting issue exists in the registrationform.php file. This occurs when the FName, LName, or Addrs arguments are...

5.3CVSS5.5AI score0.00263EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/27 12:00 a.m.•8 views

CVE-2026-100875: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file updatedetailsfromfaculty.php. Such manipulation of the argument myfid leads to sql injection. The attack may be launched remotely...

7.5CVSS5.6AI score0.00254EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/27 12:00 a.m.•8 views

CVE-2026-100874: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This affects an unknown function of the file addnewstudent.php. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been published and may be...

7.5CVSS5.5AI score0.00254EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/27 12:00 a.m.•10 views

CVE-2026-100873: Cross-Site Request Forgery (CSRF)

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The impacted element is an unknown function. The manipulation results in cross-site request forgery. The attack can be launched remotely. The exploit is now public and may be...

5.3CVSS5.3AI score0.00211EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/27 12:00 a.m.•7 views

CVE-2026-100877: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected by this vulnerability is an unknown functionality of the file registrationform.php. Executing a manipulation of the argument FName/LName/Addrs can lead to cross site...

5.3CVSS3.8AI score0.00263EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/27 12:00 a.m.•4 views

PT-2026-99692

Name of the Vulnerable Software and Affected Versions CloudClassroom-PHP-Project versions up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be Description A remote attack can be launched to trigger cross-site request forgery CSRF, a flaw where an attacker tricks a victim into performing actions they di...

5.3CVSS5.5AI score0.00211EPSS
SaveExploits0References9
NVD
NVD
•added 2026/09/26 10:16 p.m.•15 views

CVE-2026-100739

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file viewresult.php. Performing a manipulation of the argument seno results in sql injection. Remote exploitation of the attack is...

7.5CVSS0.00254EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/26 10:00 p.m.•25 views

CVE-2026-100739

A SQL injection vulnerability exists in the mathurvishal CloudClassroom-PHP-Project (up to commit 5dadec098bfbbf3300d60c3494db3fb95b66e7be). The flaw impacts an unknown function within the viewresult.php file, specifically allowing for exploitation via manipulation of the seno argument. This vuln...

7.5CVSS6.9AI score0.00254EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/26 10:00 p.m.•7 views

CVE-2026-100739 mathurvishal CloudClassroom-PHP-Project viewresult.php sql injection

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file viewresult.php. Performing a manipulation of the argument seno results in sql injection. Remote exploitation of the attack is...

7.5CVSS6.9AI score0.00254EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/26 10:00 p.m.•39 views

CVE-2026-100739 mathurvishal CloudClassroom-PHP-Project viewresult.php sql injection

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file viewresult.php. Performing a manipulation of the argument seno results in sql injection. Remote exploitation of the attack is...

7.5CVSS0.00254EPSS
SaveExploits0References5
GithubExploit
GithubExploit
•added 2026/09/26 8:45 p.m.•35 views

Exploit for CVE-2026-97160

CVE-2026-97160 — UP Plugin PHP Code Injection Joomla Python...

9.4CVSS6.1AI score0.01311EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/26 8:30 p.m.•17 views

CVE-2024-25600-EXPLOIT

CVE-2024-25600 - WordPress Bricks Builder 远程代码执行 RCE 🌐 WordPress 的 Bricks 主题被确认存在一个关键安全漏洞,编号为 CVE-2024-25600。该漏洞影响 Bricks Builder 插件的所有版本(包括 1.9.6)。此漏洞构成重大风险,因为它允许未经身份验证的攻击者在托管存在漏洞的 WordPress 网站的服务器上远程执行任意代码。CVE-2024-25600 属于远程代码执行 RCE 漏洞,使攻击者能够在无需任何身份验证的情况下操纵服务器执行恶意代码。该漏洞利用了 Bricks Builder...

10CVSS8.4AI score0.88234EPSS
SaveExploits20
NVD
NVD
•added 2026/09/26 3:16 p.m.•22 views

CVE-2026-94132

Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension 11.1.0 - MIME parts of incoming emails were saved to media/comacym/upload/ with no extension check, so anyone who could email the monitored mailbox could write a PH...

9.5CVSS0.00551EPSS
SaveExploits1References1
NVD
NVD
•added 2026/09/26 3:16 p.m.•16 views

CVE-2026-97160

Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29...

9.4CVSS0.01311EPSS
SaveExploits1References1
Rows per page
Query Builder