Lucene search
+L

92921 matches found

NVD
NVD
added 2026/09/04 4:18 a.m.3 views

CVE-2026-85405

A flaw has been found in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/roleAddAction.do. Executing a manipulation of the argument name/username can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may b...

5.1CVSS
SaveExploits0References5
CVE
CVE
added 2026/09/04 4:15 a.m.4 views

CVE-2026-85408

Eleveo Quality Management 9.7.0 is affected in the Conversation Handler component (file /enc-fwk-data/api/v3/conversations//events). Manipulating the createdBy argument causes dynamically-determined object attributes , leading to a low integrity impact with no effect on confidentiality or availab...

5.3CVSS5.5AI score
SaveExploits0References5
EUVD
EUVD
added 2026/09/04 4:00 a.m.3 views

EUVD-2026-70880

A vulnerability was found in Eleveo Quality Management 9.7.0. This issue affects some unknown processing of the file /enc-fwk-data/api/v3/conversations//events of the component Conversation Handler. The manipulation of the argument labels results in denial of service. The attack can be executed...

5.3CVSS
SaveExploits0References5
CVE
CVE
added 2026/09/04 4:00 a.m.4 views

CVE-2026-85407

A denial of service vulnerability exists in Eleveo Quality Management 9.7.0 , specifically in the Conversation Handler component at the endpoint /enc-fwk-data/api/v3/conversations//events. Manipulation of the labels argument leads to DoS. The attack is remote and requires low privileges (authenti...

5.3CVSS5.5AI score
SaveExploits0References5
CVE
CVE
added 2026/09/04 3:30 a.m.2 views

CVE-2026-85405

Eleveo Call Recording Software 9.7.0 contains a cross-site scripting (XSS) vulnerability in the /callrec/roleAddAction.do endpoint. Manipulating the name/username argument allows a remote, authenticated attacker with user interaction to inject scripts, resulting in a low integrity impact. The exp...

5.1CVSS4.2AI score
SaveExploits0References5
EUVD
EUVD
added 2026/09/04 3:30 a.m.5 views

EUVD-2026-70875

A flaw has been found in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/roleAddAction.do. Executing a manipulation of the argument name/username can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may b...

5.1CVSS
SaveExploits0References5
NVD
NVD
added 2026/09/04 3:17 a.m.3 views

CVE-2026-85399

A security flaw has been discovered in code-projects Hospital Information System 1.0. Affected by this vulnerability is the function getSinglePresp of the file includes/presp/PrespController.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated...

7.5CVSS
SaveExploits0References6
NVD
NVD
added 2026/09/04 3:17 a.m.3 views

CVE-2026-85398

A vulnerability was identified in code-projects Hospital Information System 1.0. Affected is the function viewReq of the file viewReq.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used...

7.5CVSS
SaveExploits0References6
NVD
NVD
added 2026/09/04 3:17 a.m.4 views

CVE-2026-85401

A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functionality of the file htdocs/core/filemanagerdol/connectors/php/config.inc.php of the component Legacy File Manager. Executing a manipulation can lead to improper access controls. The...

6.5CVSS
SaveExploits0References9
NVD
NVD
added 2026/09/04 3:17 a.m.3 views

CVE-2026-85402

A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient/booking.php. The manipulation of the argument docid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

7.5CVSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/04 3:02 a.m.4 views

CVE-2022-4944

「💥」CVE-2022-4944 説明 問題として分類された脆弱性が、kalcaddle KodExplorer バージョン4.49までで発見されました。これは未知の部分に影響を与えます。操作によりクロスサイトリクエストフォージェリが発生します。この脆弱性はCVE-2022-4944として一意に識別されています。リモートから攻撃を開始することが可能です。さらに、エクスプロイトが利用可能です。影響を受けるコンポーネントをアップグレードすることを推奨します。 デモ 使用方法 root@kitploit: pip install requests git clone...

8.8CVSS4.5AI score0.02666EPSS
SaveExploits6
EUVD
EUVD
added 2026/09/04 3:00 a.m.4 views

EUVD-2026-70873

A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient/booking.php. The manipulation of the argument docid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

7.5CVSS5.8AI score
SaveExploits0References6
CVE
CVE
added 2026/09/04 3:00 a.m.4 views

CVE-2026-85402

A SQL injection vulnerability exists in the code-projects Doctor Appointment System 1.0 , specifically in the file /patient/booking.php . The root cause is the unsanitized manipulation of the doc_id argument, allowing a remote attacker to inject SQL commands without requiring authentication or us...

7.5CVSS7AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/04 2:46 a.m.4 views

CVE-2017-7529-Nginx---Remote-Integer-Overflow-Exploit

このリポジトリには README がありません。...

7.5CVSS6.5AI score0.62597EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/04 2:45 a.m.2 views

CVE-2014-0224

このリポジトリには README がありません。...

7.4CVSS6.9AI score0.95326EPSS
SaveExploits9
EUVD
EUVD
added 2026/09/04 2:45 a.m.4 views

EUVD-2026-70872

A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functionality of the file htdocs/core/filemanagerdol/connectors/php/config.inc.php of the component Legacy File Manager. Executing a manipulation can lead to improper access controls. The...

6.5CVSS5.5AI score
SaveExploits0References9
CVE
CVE
added 2026/09/04 2:45 a.m.7 views

CVE-2026-85401

CVE-2026-85401 affects Dolibarr (versions up to 21.0.4, 22.0.5, and 23.0.3) in the Legacy File Manager component, specifically in the file htdocs/core/filemanagerdol/connectors/php/config.inc.php. The vulnerability is an improper access control flaw exploitable remotely with low privileges, yield...

6.5CVSS6.2AI score
SaveExploits0References9
EUVD
EUVD
added 2026/09/04 2:30 a.m.3 views

EUVD-2026-70867

A security flaw has been discovered in code-projects Hospital Information System 1.0. Affected by this vulnerability is the function getSinglePresp of the file includes/presp/PrespController.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated...

7.5CVSS5.8AI score
SaveExploits0References6
NVD
NVD
added 2026/09/04 2:17 a.m.3 views

CVE-2026-85397

A vulnerability was determined in code-projects Hospital Information System 1.0. This impacts the function findBySearch of the file addReq.php. This manipulation of the argument Search causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

7.5CVSS
SaveExploits0References6
NVD
NVD
added 2026/09/04 2:17 a.m.3 views

CVE-2026-85383

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/invdel.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be us...

6.5CVSS
SaveExploits0References6
Rows per page
Query Builder