Lucene search
K

36506 matches found

CNNVD
CNNVD
added 2026/06/01 12:0 a.m.9 views

SourceCodester Pharmacy Sales and Inventory System 代码注入漏洞

SourceCodester Pharmacy Sales and Inventory System is an open-source medication sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Pharmacy Sales and Inventory System contains a code injection vulnerability. This vulnerability stems from improper...

5.1CVSS4.6AI score0.00203EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/06/01 12:0 a.m.8 views

SourceCodester Pharmacy Sales and Inventory System 代码注入漏洞

SourceCodester Pharmacy Sales and Inventory System is an open-source medication sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Pharmacy Sales and Inventory System contains a code injection vulnerability. This vulnerability arises from improper...

5.1CVSS4.6AI score0.00199EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/06/01 12:0 a.m.6 views

SourceCodester Pharmacy Sales and Inventory System 代码注入漏洞

SourceCodester Pharmacy Sales and Inventory System is an open-source medication sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Pharmacy Sales and Inventory System contains a code injection vulnerability. This vulnerability stems from improper...

5.1CVSS4.6AI score0.00203EPSS
Exploits0References7
CNNVD
CNNVD
added 2026/06/01 12:0 a.m.7 views

sendportal 代码注入漏洞

SendPortal is a self-hosted email marketing management tool developed by Mattel. Versions of SendPortal 3.0.1 and earlier had a code injection vulnerability. This vulnerability stemmed from incorrect handling of the content parameter by the Campaign Handler component in the /webview/ file, which...

5.1CVSS4.6AI score0.00203EPSS
Exploits0References7
CNNVD
CNNVD
added 2026/06/01 12:0 a.m.7 views

student_management_system_by_php 代码注入漏洞

studentmanagementsystembyphp is a student information management tool developed by Raisul Islam, based on PHP. studentmanagementsystembyphp has a code injection vulnerability, which stems from incorrect handling of the parameter “Message” by an unknown function in the admissionformcheck.php file...

5.1CVSS4.6AI score0.00199EPSS
Exploits0References6
GithubExploit
GithubExploit
added 2026/05/31 6:50 p.m.69 views

Exploit for Code Injection in Backupbliss Backup_Migration

WordPressBackupMigration-RCEUnauth...

9.8CVSS5.8AI score0.97846EPSS
Exploits14
NVD
NVD
added 2026/05/31 9:16 a.m.9 views

CVE-2026-10175

A security flaw has been discovered in Aider-AI Aider 0.86.3. Affected by this vulnerability is the function editorcoder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has bee...

6.5CVSS0.00237EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2026/05/31 8:45 a.m.8 views

CVE-2026-10175 Aider-AI Aider Architect Mode auth.py editor_coder.run code injection

A security flaw has been discovered in Aider-AI Aider 0.86.3. Affected by this vulnerability is the function editorcoder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has bee...

6.5CVSS6.4AI score0.00237EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/05/31 8:45 a.m.10 views

CVE-2026-10175

A security flaw has been discovered in Aider-AI Aider 0.86.3. Affected by this vulnerability is the function editorcoder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has bee...

6.5CVSS5.6AI score0.00237EPSS
Exploits0References6Affected Software1
EUVD
EUVD
added 2026/05/31 8:45 a.m.11 views

EUVD-2026-33495

A security flaw has been discovered in Aider-AI Aider 0.86.3. Affected by this vulnerability is the function editorcoder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has bee...

6.5CVSS6.4AI score0.00237EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/05/31 8:45 a.m.36 views

CVE-2026-10175 Aider-AI Aider Architect Mode auth.py editor_coder.run code injection

A security flaw has been discovered in Aider-AI Aider 0.86.3. Affected by this vulnerability is the function editorcoder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has bee...

6.5CVSS0.00237EPSS
Exploits0References6
CVE
CVE
added 2026/05/31 8:45 a.m.29 views

CVE-2026-10175

Affected software : Aider-AI Aider 0.86.3, Architect Mode. Vulnerable component : editor_coder.run in auth.py. Vulnerability : input manipulation enables code injection. Impact : remote execution possible over network; CVSS indicates MEDIUM with low confidentiality/integrity/availability impact. ...

6.5CVSS6.4AI score0.00237EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/05/31 12:0 a.m.6 views

Orthanc Explorer 2 代码注入漏洞

Orthanc Explorer 2 is a user interface plugin for the Orthanc Server’s open-source medical imaging management system. Versions of Orthanc Explorer 2 prior to 1.12.0 contained a code injection vulnerability. This vulnerability stemmed from the param operation in the File...

5.3CVSS5.7AI score0.00273EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/05/31 12:0 a.m.7 views

Aider 代码注入漏洞

Aider is an open-source terminal AI pair programming tool developed by Aider AI. Version 0.86.3 of Aider contains a code injection vulnerability. This vulnerability arises from the operation editorcoder.run in the Architect Mode component, allowing for code injection. Attackers can launch attacks...

6.5CVSS6.7AI score0.00237EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/05/31 12:0 a.m.9 views

PT-2026-45184

A security flaw has been discovered in Aider-AI Aider 0.86.3. Affected by this vulnerability is the function editor coder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has be...

6.5CVSS6.4AI score0.00237EPSS
Exploits0References7
ATTACKERKB
ATTACKERKB
added 2026/05/30 2:55 p.m.7 views

CVE-2018-25413

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'q' parameter. Attackers can send GET requests to search.php with crafted SQL payloads to extract sensitive database informati...

8.8CVSS6.1AI score0.00276EPSS
Exploits0References4Affected Software1
GithubExploit
GithubExploit
added 2026/05/30 10:15 a.m.93 views

CVE-2026-JBrowse-Injection

CVE-2026-XXXXX: JBrowse Configuration Injection via URL Parame...

5.8AI score
Exploits0
GithubExploit
GithubExploit
added 2026/05/30 9:44 a.m.81 views

Exploit for Code Injection in Geoserver

CV...

9.8CVSS7.4AI score0.99813EPSS
Exploits24
GithubExploit
GithubExploit
added 2026/05/30 7:37 a.m.95 views

Exploit for OS Command Injection in Dolibarr Dolibarr_Erp\/Crm

CVE-2023-30253 — Dolibarr ERP/CRM 17.0.0 Remote Code Execution...

8.8CVSS7.3AI score0.79195EPSS
Exploits16
OSV
OSV
added 2026/05/30 5:7 a.m.15 views

MGASA-2026-0167 Updated vim packages fix security vulnerabilities

Heap Buffer Overflow in spell file loading affects Vim 9.2.0450. CVE-2026-45130 Vimscript Code Injection in netrw NetrwMarkFile via crafted filename affects Vim 9.2.0480. CVE-2026-43961 Command Injection in tar.vim affects Vim 9.2.0479. CVE-2026-46483 Vimscript Code Injection in netrw...

7CVSS5.8AI score0.00573EPSS
Exploits1References12
Rows per page
Query Builder