Lucene search
K

216337 matches found

NVD
NVD
‱added 2026/04/26 10:17 p.m.‱9 views

CVE-2026-7060

A vulnerability was determined in liyupi yu-picture up to a053632c41340152bf75b66b3c543d129123d8ec. This impacts the function PageRequest of the file yu-picture-backend/src/main/java/com/yupi/yupicturebackend/service/impl/PictureServiceImpl.java of the component MyBatis-Plus. Executing a...

7.5CVSS0.00263EPSS
Exploits0References6
Vulnrichment
Vulnrichment
‱added 2026/04/26 8:15 p.m.‱3 views

CVE-2026-7060 liyupi yu-picture MyBatis-Plus PictureServiceImpl.java PageRequest sql injection

A vulnerability was determined in liyupi yu-picture up to a053632c41340152bf75b66b3c543d129123d8ec. This impacts the function PageRequest of the file yu-picture-backend/src/main/java/com/yupi/yupicturebackend/service/impl/PictureServiceImpl.java of the component MyBatis-Plus. Executing a...

7.5CVSS7.1AI score0.00263EPSS
Exploits0References6
CVE
CVE
‱added 2026/04/26 8:15 p.m.‱13 views

CVE-2026-7060

Technical details (affected versions, exact file paths, patch info) are not publicly available in the provided documents. Monitor for updates.

7.5CVSS7.1AI score0.00263EPSS
Exploits0References6
NVD
NVD
‱added 2026/04/26 9:16 a.m.‱6 views

CVE-2026-7028

A security flaw has been discovered in CodeAstro Online Job Portal 1.0. The affected element is an unknown function of the file /admin/jobs-admins/delete-jobs.php of the component All Jobs Page. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

5.8CVSS0.00311EPSS
Exploits0References5
Vulnrichment
Vulnrichment
‱added 2026/04/26 8:45 a.m.‱4 views

CVE-2026-7028 CodeAstro Online Job Portal All Jobs delete-jobs.php sql injection

A security flaw has been discovered in CodeAstro Online Job Portal 1.0. The affected element is an unknown function of the file /admin/jobs-admins/delete-jobs.php of the component All Jobs Page. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

5.8CVSS5.1AI score0.00311EPSS
Exploits0References5
NVD
NVD
‱added 2026/04/26 7:16 a.m.‱15 views

CVE-2026-7023

A vulnerability was detected in ByteDance coze-studio up to 0.5.1. Affected by this vulnerability is the function ExecuteSQL of the file backend/domain/memory/database/service/databaseimpl.go of the component databaseTool. Performing a manipulation results in sql injection. The attack can be...

8.8CVSS0.00365EPSS
Exploits1References4
Cvelist
Cvelist
‱added 2026/04/26 6:30 a.m.‱30 views

CVE-2026-7023 ByteDance coze-studio databaseTool database_impl.go ExecuteSQL sql injection

A vulnerability was detected in ByteDance coze-studio up to 0.5.1. Affected by this vulnerability is the function ExecuteSQL of the file backend/domain/memory/database/service/databaseimpl.go of the component databaseTool. Performing a manipulation results in sql injection. The attack can be...

6.5CVSS0.00365EPSS
Exploits1References4
Vulnrichment
Vulnrichment
‱added 2026/04/26 6:30 a.m.‱0 views

CVE-2026-7023 ByteDance coze-studio databaseTool database_impl.go ExecuteSQL sql injection

A vulnerability was detected in ByteDance coze-studio up to 0.5.1. Affected by this vulnerability is the function ExecuteSQL of the file backend/domain/memory/database/service/databaseimpl.go of the component databaseTool. Performing a manipulation results in sql injection. The attack can be...

6.5CVSS6.4AI score0.00365EPSS
Exploits1References4
EUVD
EUVD
‱added 2026/04/26 6:30 a.m.‱10 views

EUVD-2026-25698

A vulnerability was detected in ByteDance coze-studio up to 0.5.1. Affected by this vulnerability is the function ExecuteSQL of the file backend/domain/memory/database/service/databaseimpl.go of the component databaseTool. Performing a manipulation results in sql injection. The attack can be...

6.5CVSS6.3AI score0.00365EPSS
Exploits1References4
CVE
CVE
‱added 2026/04/26 6:30 a.m.‱16 views

CVE-2026-7023

CVE-2026-7023 : ByteDance coze-studio

8.8CVSS6.4AI score0.00365EPSS
Exploits1References4Affected Software1
GithubExploit
GithubExploit
‱added 2026/04/26 2:17 a.m.‱117 views

ethical-hacking-ctf

🔐 Ethical Hacking CTF Writeup Coventry University — 7072SC...

10CVSS7.2AI score0.97485EPSS
Exploits14
VulnCheck KEV
VulnCheck KEV
‱added 2026/04/26 12:0 a.m.‱5 views

VulnCheck KEV: CVE-2023-3793

A vulnerability was found in Weaver e-cology. It has been rated as critical. This issue affects some unknown processing of the file filelFileDownloadForOutDoc.class of the component HTTP POST Request Handler. The manipulation of the argument fileid with the input 1+WAITFOR+DELAY leads to sql...

9.8CVSS5.9AI score0.00421EPSS
In wildExploits0References6
Positive Technologies
Positive Technologies
‱added 2026/04/26 12:0 a.m.‱6 views

PT-2026-35240

A vulnerability was determined in liyupi yu-picture up to a053632c41340152bf75b66b3c543d129123d8ec. This impacts the function PageRequest of the file yu-picture-backend/src/main/java/com/yupi/yupicturebackend/service/impl/PictureServiceImpl.java of the component MyBatis-Plus. Executing a...

7.5CVSS5.3AI score0.00263EPSS
Exploits0References6
Positive Technologies
Positive Technologies
‱added 2026/04/26 12:0 a.m.‱3 views

PT-2026-35209

A security flaw has been discovered in CodeAstro Online Job Portal 1.0. The affected element is an unknown function of the file /admin/jobs-admins/delete-jobs.php of the component All Jobs Page. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

5.8CVSS5AI score0.00311EPSS
Exploits0References6
CNNVD
CNNVD
‱added 2026/04/26 12:0 a.m.‱6 views

CodeAstro Online Job Portal æłšć…„æŒæŽž

CodeAstro Online Job Portal is an online job portal operated by CodeAstro Corporation. Version 1.0 of CodeAstro Online Job Portal has a vulnerability due to improper handling of ID parameters in the admin/jobs-admins/delete-jobs.php file within the All Jobs Page component, which may lead to SQL...

5.8CVSS5.9AI score0.00311EPSS
Exploits0References2
GithubExploit
GithubExploit
‱added 2026/04/25 11:44 p.m.‱105 views

Exploit for SQL Injection in Cmsmadesimple Cms_Made_Simple

-CVE-201...

8.1CVSS7.7AI score0.55958EPSS
Exploits37
Cvelist
Cvelist
‱added 2026/04/25 9:30 p.m.‱30 views

CVE-2026-7002 KLiK SocialMediaWebsite Private Message get_message_ajax.php sql injection

A vulnerability was determined in KLiK SocialMediaWebsite up to 1.0.1. This vulnerability affects unknown code of the file /includes/getmessageajax.php of the component Private Message Handler. Executing a manipulation of the argument cid can lead to sql injection. It is possible to launch the...

7.5CVSS0.00246EPSS
Exploits0References3
EUVD
EUVD
‱added 2026/04/25 9:30 p.m.‱3 views

EUVD-2026-25677

A vulnerability was determined in KLiK SocialMediaWebsite up to 1.0.1. This vulnerability affects unknown code of the file /includes/getmessageajax.php of the component Private Message Handler. Executing a manipulation of the argument cid can lead to sql injection. It is possible to launch the...

7.5CVSS7.3AI score0.00246EPSS
Exploits0References3
NVD
NVD
‱added 2026/04/25 6:16 p.m.‱6 views

CVE-2026-6991

A vulnerability was determined in colinhacks Zod up to 4.3.6. The impacted element is an unknown function of the file packages/zod/src/v4/core/regexes.ts of the component CUID Data Type Handler. Executing a manipulation can lead to sql injection. The attack can be launched remotely. The exploit h...

6.5CVSS0.00233EPSS
Exploits0References3
Vulnrichment
Vulnrichment
‱added 2026/04/25 5:45 p.m.‱4 views

CVE-2026-6991 colinhacks Zod CUID Data Type regexes.ts sql injection

A vulnerability was determined in colinhacks Zod up to 4.3.6. The impacted element is an unknown function of the file packages/zod/src/v4/core/regexes.ts of the component CUID Data Type Handler. Executing a manipulation can lead to sql injection. The attack can be launched remotely. The exploit h...

6.5CVSS6.4AI score0.00233EPSS
Exploits0References3
Rows per page
Query Builder