Lucene search
+L

10883 matches found

Vulnrichment
Vulnrichment
•added 2026/01/08 9:32 p.m.•8 views

CVE-2026-0729 code-projects Intern Membership Management System add_activity.php sql injection

A vulnerability was detected in code-projects Intern Membership Management System 1.0. Impacted is an unknown function of the file /intern/admin/addactivity.php. Performing a manipulation of the argument Title results in sql injection. Remote exploitation of the attack is possible. The exploit is...

5.8CVSS5.5AI score0.00384EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/01/08 9:32 p.m.•54 views

CVE-2026-0729 code-projects Intern Membership Management System add_activity.php sql injection

A vulnerability was detected in code-projects Intern Membership Management System 1.0. Impacted is an unknown function of the file /intern/admin/addactivity.php. Performing a manipulation of the argument Title results in sql injection. Remote exploitation of the attack is possible. The exploit is...

5.8CVSS0.00384EPSS
SaveExploits1References5
CVE
CVE
•added 2026/01/08 9:32 p.m.•67 views

CVE-2026-0729

CVE-2026-0729 concerns the Intern Membership Management System 1.0. The vulnerability is in the file /intern/admin/add_activity.php where manipulating the Title parameter enables SQL injection, with remote exploitation possible and exploits publicly available. Multiple sources corroborate the iss...

7.2CVSS5.3AI score0.00384EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2026/01/08 9:15 p.m.•19 views

CVE-2025-15464

Exported Activity allows external applications to gain application context and directly launch Gmail with inbox access, bypassing security controls...

7.5CVSS5.8AI score0.00517EPSS
SaveExploits1References3
NVD
NVD
•added 2026/01/08 9:15 p.m.•19 views

CVE-2025-15464

Exported Activity allows external applications to gain application context and directly launch Gmail with inbox access, bypassing security controls...

7.5CVSS0.00517EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2026/01/08 9:01 p.m.•16 views

CVE-2025-15464 KL-001-2026-01: yintibao Fun Print Mobile Unauthorized Access via Context Hijacking

Exported Activity allows external applications to gain application context and directly launch Gmail with inbox access, bypassing security controls...

5.9AI score0.00517EPSS
SaveExploits1References1
CVE
CVE
•added 2026/01/08 9:01 p.m.•60 views

CVE-2025-15464

The yintibao Fun Print Mobile application (version 6.05.15 ) for Android is vulnerable to CWE-926: Improper Export of Android Application Components . The PandoraEntryActivity is exported (android:exported="true") and fails to validate incoming external intents. An attacker can provide an unvalid...

7.5CVSS5.9AI score0.00517EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2026/01/08 9:01 p.m.•52 views

CVE-2025-15464 KL-001-2026-01: yintibao Fun Print Mobile Unauthorized Access via Context Hijacking

Exported Activity allows external applications to gain application context and directly launch Gmail with inbox access, bypassing security controls...

0.00517EPSS
SaveExploits1References1
OSV
OSV
•added 2026/01/08 3:40 p.m.•11 views

MAL-2026-168 Malicious code in @zuora-marketing/linting (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddcfd1151af868e694a4a79307ce1284331ad88b8ff631651f3fd2c47fbf342a The package @zuora-marketing/linting was found to contain malicious code. Source: ossf-package-analysis...

7AI score
SaveExploits0
OSV
OSV
•added 2026/01/08 7:15 a.m.•12 views

CVE-2026-0699

A vulnerability was found in code-projects Intern Membership Management System 1.0. This impacts an unknown function of the file /intern/admin/editactivity.php. Performing a manipulation of the argument activityid results in sql injection. Remote exploitation of the attack is possible. The exploi...

7.2CVSS5.7AI score0.00364EPSS
SaveExploits1References5
NVD
NVD
•added 2026/01/08 7:15 a.m.•25 views

CVE-2026-0699

A vulnerability was found in code-projects Intern Membership Management System 1.0. This impacts an unknown function of the file /intern/admin/editactivity.php. Performing a manipulation of the argument activityid results in sql injection. Remote exploitation of the attack is possible. The exploi...

7.2CVSS0.00364EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/01/08 6:32 a.m.•64 views

CVE-2026-0699 code-projects Intern Membership Management System edit_activity.php sql injection

A vulnerability was found in code-projects Intern Membership Management System 1.0. This impacts an unknown function of the file /intern/admin/editactivity.php. Performing a manipulation of the argument activityid results in sql injection. Remote exploitation of the attack is possible. The exploi...

5.8CVSS0.00364EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/01/08 6:32 a.m.•7 views

CVE-2026-0699 code-projects Intern Membership Management System edit_activity.php sql injection

A vulnerability was found in code-projects Intern Membership Management System 1.0. This impacts an unknown function of the file /intern/admin/editactivity.php. Performing a manipulation of the argument activityid results in sql injection. Remote exploitation of the attack is possible. The exploi...

5.8CVSS5.4AI score0.00364EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/01/08 12:00 a.m.•19 views

PT-2026-1973

Name of the Vulnerable Software and Affected Versions Intern Membership Management System version 1.0 Description A SQL injection issue exists in code-projects Intern Membership Management System 1.0. The issue affects an unknown function within the /intern/admin/edit activity.php file...

7.2CVSS5.1AI score0.00364EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2026/01/08 12:00 a.m.•25 views

PT-2026-1979

Name of the Vulnerable Software and Affected Versions Intern Membership Management System version 1.0 Description A SQL injection issue exists in the Intern Membership Management System. The issue is located in the file /intern/admin/add activity.php. Manipulation of the Title argument can lead t...

7.2CVSS5.5AI score0.00384EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2026/01/08 12:00 a.m.•16 views

yintibao Fun Print Mobile 安全漏洞

yintibao Fun Print Mobile is a mini-printer companion mobile application from China-based yintibao yintibao. A security vulnerability exists in yintibao Fun Print Mobile that stems from an exported Activity bypassing security controls, which could lead to Gmail inbox access...

7.5CVSS6.6AI score0.00517EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/01/08 12:00 a.m.•39 views

PT-2026-1770

Name of the Vulnerable Software and Affected Versions Gmail affected versions not specified Description An exported activity allows external applications to gain application context and directly launch Gmail with inbox access, bypassing security controls. This allows unauthorized access to Gmail...

7.5CVSS6.5AI score0.00517EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2026/01/08 12:00 a.m.•20 views

Code-Projects Intern Membership Management System SQL注入漏洞

Code-Projects Intern Membership Management System is a Code-Projects open source intern membership management system . Code-Projects Intern Membership Management System version 1.0 has a SQL injection vulnerability , the vulnerability stems from the wrong operation of the parameter activityid in...

7.2CVSS5.7AI score0.00364EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/08 12:00 a.m.•4 views

CVE-2025-15464: Improper Export of Android Application Components

Exported Activity allows external applications to gain application context and directly launch Gmail with inbox access, bypassing security controls...

7.5CVSS5.8AI score0.00517EPSS
SaveExploits1References4
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/07 1:45 p.m.•10 views

Malicious code in @bingads-webui-component-legacy/storage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1b0ef4dc1d3bac0f76b00b2134e0e39c61034e61e307a6390e8c92dacad80c2 The package @bingads-webui-component-legacy/storage was found to contain malicious code. Source: ossf-package-analysis...

6.9AI score
SaveExploits0
Rows per page
Query Builder