81 matches found
CVE-2026-2093
Docpedia developed by Flowring has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...
CVE-2026-2093
Docpedia developed by Flowring has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...
CVE-2026-2093
creationtimestamp| type| source ---|---|--- 2026-02-06 11:13:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10698-1ab75-2.html 2026-02-10 07:19:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meigeawdvf2v 2026-02-10 07:19:53+00:00| seen|...
Huawei EulerOS: Security Advisory for git (EulerOS-SA-2025-2093)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHSA-2024:2093
creationtimestamp| type| source ---|---|--- 2025-07-26 00:37:37+00:00| seen| Telegram/zvcI4RaoDnIqbZ3YA8XHMZhfSsFQszGzh21dDzQhnYjnw...
CVE-2023-2093
A vulnerability, which was classified as critical, was found in SourceCodester Vehicle Service Management System 1.0. This affects an unknown part of the file /classes/Login.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2022-2093
The WP Duplicate Page WordPress plugin before 1.3 does not sanitize and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...
CVE-2025-2093
A vulnerability was found in PHPGurukul Online Library Management System 3.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /change-password.php. The manipulation of the argument email/phone number leads to weak password recovery. The...
CVE-2025-2093
creationtimestamp| type| source ---|---|--- 2025-03-07 22:35:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6899 2025-03-08 00:58:47+00:00| seen| https://t.me/cvedetector/19866 2025-03-08 04:36:10+00:00| seen| Telegram/ZeT-RErHwLSxdkm4B9Ado1h9OyzCY4nMzzd5n1MltlwF03...
CVE-2025-2093
A vulnerability was found in PHPGurukul Online Library Management System 3.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /change-password.php. The manipulation of the argument email/phone number leads to weak password recovery. The...
CVE-2025-2093
CVE-2025-2093 affects PHPGurukul Online Library Management System 3.0. The vulnerability concerns an issue in the /change-password.php flow where manipulating the email/phone parameter enables weak password recovery. Impact is described as remote exploitation with low public impact, and multiple ...
CVE-2025-2093 PHPGurukul Online Library Management System change-password.php password recovery
A vulnerability was found in PHPGurukul Online Library Management System 3.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /change-password.php. The manipulation of the argument email/phone number leads to weak password recovery. The...
CVE-2024-2093
The VK All in One Expansion Unit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 9.95.0.1 via social meta tags. This makes it possible for unauthenticated attackers to view limited password protected content...
CVE-2024-2093
CVE-2024-2093 affects the VK All in One Expansion Unit WordPress plugin. All versions up to and including 9.95.0.1 are vulnerable to Sensitive Information Exposure via social meta tags, allowing unauthenticated attackers to view limited password‑protected content. Root cause: improper handling of...
WordPress VK All in One Expansion Unit Plugin <= 9.95.0.1 is vulnerable to Sensitive Data Exposure
Software VK All in One Expansion Unit Type Plugin Vulnerable versions = 9.95.0.1 Fixed in 9.96.0.0 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-2093 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d4653e32a362 Credits Krzyszt...
CVE-2013-2093
creationtimestamp| type| source ---|---|--- 2024-02-23 21:46:33+00:00| seen| https://t.me/ctinow/192192...
Amazon Linux 2 : perl-HTTP-Tiny (ALAS-2023-2093)
The version of perl-HTTP-Tiny installed on the remote host is prior to 0.033-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2093 advisory. HTTP::Tiny 0.082, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuratio...
CVE-2023-2093
creationtimestamp| type| source ---|---|--- 2023-04-15 14:42:53+00:00| seen| https://t.me/cibsecurity/62222 2023-11-24 14:27:28+00:00| seen| https://t.me/arpsyndicate/530 2023-12-10 15:28:53+00:00| seen| https://t.me/arpsyndicate/1645...
CVE-2023-2093 SourceCodester Vehicle Service Management System Login.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Vehicle Service Management System 1.0. This affects an unknown part of the file /classes/Login.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2023-2093
CVE-2023-2093 describes a SQL injection in SourceCodester Vehicle Service Management System 1.0 via the username parameter in /classes/Login.php. The vulnerability is exploitable remotely and has been publicly disclosed; various sources corroborate the issue and assign VDB-226101. The connected d...