23 matches found
CVE-2022-26628
Matrimony v1.0 was discovered to contain a SQL injection vulnerability via the Password parameter...
CVE-2025-11464: Heap-based Buffer Overflow
Ashlar-Vellum Cobalt CO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the targe...
CVE-2020-26628
A Cross-Site Scripting XSS vulnerability was discovered in Hospital Management System V4.0 which allows an attacker to execute arbitrary web scripts or HTML code via a malicious payload appended to a username on the 'Edit Profile" page and triggered by another user visiting the profile...
redis:7 security update
7.2.8-1 - rebase to 7.2.8 for CVE-2025-21605 7.2.7-1 - rebase to 7.2.7 for CVE-2024-46981 and CVE-2024-51741 7.2.6-1 - rebase to 7.2.6 RHEL-26628 7.0.12-1 - rebase to 7.0.12 2221899 7.0.11-1 - rebase to 7.0.11 for new redis:7 stream 2129826...
CVE-2025-26628 Azure Local Cluster Information Disclosure Vulnerability
...
CVE-2025-26628
creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review...
CVE-2021-26628
Insufficient script validation of the admin page enables XSS, which causes unauthorized users to steal admin privileges. When uploading file in a specific menu, the verification of the files is insufficient. It allows remote attackers to upload arbitrary files disguising them as image files...
Ubuntu: Security Advisory (USN-6688-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE CVE-2024-26628
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2024-26628
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority for the following reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2024-26628
creationtimestamp| type| source ---|---|--- 2024-03-06 08:27:17+00:00| seen| https://t.me/ctinow/201104 2024-03-06 19:56:36+00:00| seen| https://t.me/ctinow/201724...
CVE-2020-26628
creationtimestamp| type| source ---|---|--- 2024-01-10 10:26:47+00:00| seen| https://t.me/ctinow/165680 2024-01-16 19:16:42+00:00| seen| https://t.me/ctinow/168960 2024-01-28 09:56:37+00:00| seen| https://t.me/ctinow/174872...
CVE-2020-26628
A Cross-Site Scripting XSS vulnerability was discovered in Hospital Management System V4.0 which allows an attacker to execute arbitrary web scripts or HTML code via a malicious payload appended to a username on the 'Edit Profile" page and triggered by another user visiting the profile...
CVE-2020-26628
A Cross-Site Scripting XSS vulnerability was discovered in Hospital Management System V4.0 which allows an attacker to execute arbitrary web scripts or HTML code via a malicious payload appended to a username on the 'Edit Profile" page and triggered by another user visiting the profile...
CVE-2020-26628
CVE-2020-26628 affects Hospital Management System v4.0, with an XSS in the Edit Profile username field. Root cause: insufficient input filtering/escaping, allowing a malicious payload to execute when another user views the profile. Impact: arbitrary script/HTML execution in the victim’s browser (...
Hospital Management System 4.0 XSS / Shell Upload / SQL Injection
Description: Mutiple vulnerabilties were discovered in Hospital Management System Affected CMS: Hospital Management System Affected Version: unread query - type something in admin remark e.g test and submit Step 3. Replace the POST body to below payload and server will respond after 5 second...
Hospital Management System 4.0 XSS / Shell Upload / SQL Injection Vulnerabilities
Hospital Management System versions 4.0 and below suffer from cross site scripting, remote shell upload, and remote SQL injection vulnerabilities. Description: Mutiple vulnerabilties were discovered in Hospital Management System Affected CMS: Hospital Management System Affected Version: unread...
CVE-2021-26628
creationtimestamp| type| source ---|---|--- 2022-04-29 07:32:42+00:00| seen| https://t.me/cibsecurity/41447...
CVE-2021-26628
Insufficient script validation of the admin page enables XSS, which causes unauthorized users to steal admin privileges. When uploading file in a specific menu, the verification of the files is insufficient. It allows remote attackers to upload arbitrary files disguising them as image files...