137 matches found
CVE-2026-86275
A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This vulnerability affects the function register of the file auth.php. Performing a manipulation of the argument role results in improper privilege management. Remote exploitation of the...
CVE-2026-86275 SourceCodester Syllabus-Aligned Learning Management & Examination System auth.php register privileges management
A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This vulnerability affects the function register of the file auth.php. Performing a manipulation of the argument role results in improper privilege management. Remote exploitation of the...
EUVD-2026-72260
A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This vulnerability affects the function register of the file auth.php. Performing a manipulation of the argument role results in improper privilege management. Remote exploitation of the...
CVE-2026-86275 SourceCodester Syllabus-Aligned Learning Management & Examination System auth.php register privileges management
A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This vulnerability affects the function register of the file auth.php. Performing a manipulation of the argument role results in improper privilege management. Remote exploitation of the...
CVE-2026-86275
SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 is vulnerable to unauthenticated remote privilege escalation in the register function of auth.php . An attacker can manipulate the role argument to improperly manage privileges, gaining elevated access without authentica...
PT-2026-86632
A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This vulnerability affects the function register of the file auth.php. Performing a manipulation of the argument role results in improper privilege management. Remote exploitation of the...
CVE-2026-86275: Improper Privilege Management
A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This vulnerability affects the function register of the file auth.php. Performing a manipulation of the argument role results in improper privilege management. Remote exploitation of the...
Linux Distros Unpatched Vulnerability : CVE-2026-37106
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in DokuWiki 2025-05-14b Librarian 56.2 allows a remote attacker to create an account via the register function in inc/auth.php. NOTE: this is disputed ...
CVE-2026-37106: Weak Password Recovery Mechanism for Forgotten Password
An issue in DokuWiki 2025-05-14b "Librarian" 56.2 allows a remote attacker to create an account via the register function in inc/auth.php. NOTE: this is disputed by the Supplier because this is the intentional behavior when the product is configured for self-registration a non-default feature. Th...
ProjectSend（cFTP） 安全漏洞
ProjectSend cFTP is an open-source hosted application based on PHP and MySQL. Version r1945 and earlier of ProjectSend cFTP have security vulnerabilities. These vulnerabilities stem from incorrect handling of the parameter ldapemail in the file includes/Classes/Auth.php, which may lead to differe...
CVE-2026-4045: Observable Response Discrepancy
A flaw has been found in projectsend up to r1945. This impacts an unknown function of the file includes/Classes/Auth.php. Executing a manipulation of the argument ldapemail can lead to observable response discrepancy. The attack can be executed remotely. A high complexity level is associated with...
CVE-2025-12342
A flaw has been found in Serdar Bayram Ghost Hot Spot up to 20251014. The affected element is an unknown function of the file /Auth.php of the component Login. This manipulation causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used...
CVE-2025-12342: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in Serdar Bayram Ghost Hot Spot up to 20251014. The affected element is an unknown function of the file /Auth.php of the component Login. This manipulation causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used...
EUVD-2007-3181
Malware in sbrugna...
EUVD-2008-6880
Malware in sbrugna...
EUVD-2006-0087
Malware in sbrugna...
EUVD-2004-0240
Malware in sbrugna...
EUVD-2005-0647
Malware in sbrugna...