Lucene search
+L

1230 matches found

BDU FSTEC
BDU FSTEC
•added 2026/11/01 3:04 p.m.•21 views

Doctor Near Telemedicine Premium Authentication Bypass

The vulnerability of the “Doctor Near. Telemedicine Premium” platform relates to bypassing authentication using a user-controlled key. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

6.8CVSS6.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/11/01 3:04 p.m.•26 views

Doctor Around Telemedicine Premium Authentication Bypass Info Disclosure

The vulnerability of the “Doctor Around. Telemedicine Premium” platform relates to bypassing authentication using a user-controlled key. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...

7.5CVSS6.4AI score
SaveExploits0Affected Software1
Kitploit
Kitploit
•added 2026/11/01 10:30 a.m.•30 views

aws-doctor

aws-doctor A terminal-based tool that acts as a comprehensive health check for your AWS accounts. Built with Golang, aws-doctor diagnoses cost anomalies, detects idle resources, and provides a proactive analysis of your cloud infrastructure. !TIP View the full documentation, permissions guide, an...

6.3AI score
SaveExploits0References8
Nuclei
Nuclei
•added 2026/11/01 2:03 a.m.•73 views

Hospital Management System 1.0 - Cross-Site Scripting

Hospital Management System 1.0 contains a cross-site scripting vulnerability via the searchdata parameter in doctor/search.php and patient-search.php. id: CVE-2021-39411 info: name: Hospital Management System 1.0 - Cross-Site Scripting author: arafatansari severity: high description: | Hospital...

6.1CVSS6AI score0.00914EPSS
SaveExploits0References2
Nuclei
Nuclei
•added 2026/11/01 2:03 a.m.•71 views

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via the comment parameter. id: CVE-2021-27315 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind...

7.5CVSS7.6AI score0.07826EPSS
SaveExploits3References3
Nuclei
Nuclei
•added 2026/11/01 2:03 a.m.•105 views

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter. id: CVE-2021-27320 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind S...

7.5CVSS7.3AI score0.09299EPSS
SaveExploits3References3
Nuclei
Nuclei
•added 2026/11/01 2:03 a.m.•79 views

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via lastname parameter. id: CVE-2021-27316 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind SQ...

7.5CVSS7.7AI score0.07826EPSS
SaveExploits3References3
Nuclei
Nuclei
•added 2026/11/01 2:03 a.m.•66 views

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via email parameter. id: CVE-2021-27319 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind SQL...

7.5CVSS7.3AI score0.07826EPSS
SaveExploits3References3
Nuclei
Nuclei
•added 2026/11/01 2:03 a.m.•115 views

Doctor Appointment System 1.0 - SQL Injection

SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page. id: CVE-2021-27314 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: critical description: |...

9.8CVSS8.4AI score0.12394EPSS
SaveExploits3References3
Nuclei
Nuclei
•added 2026/11/01 2:03 a.m.•71 views

Doctor Appointment System 1.0 - SQL Injection

SQL injection in the expertise parameter in searchresult.php in Doctor Appointment System v1.0. id: CVE-2021-27124 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: medium description: | SQL injection in the expertise parameter in searchresult.php in Doctor...

6.5CVSS6.6AI score0.05831EPSS
SaveExploits2References3
Kitploit
Kitploit
•added 2026/11/01 12:52 a.m.•24 views

CVE-2025-45805

CVE-2025-45805 Poc Of CVE-2025-45805 Affected Product: Doctor Appointment Management System Vendor: phpgurukul Version: 1.0 Vulnerability Type: Stored Cross-Site Scripting XSS Description: An authenticated doctor user can inject arbitrary JavaScript code into the doctor profile field name/employe...

7.6CVSS6.1AI score0.00388EPSS
SaveExploits2References1
Kitploit
Kitploit
•added 2026/10/31 5:05 p.m.•24 views

CVE-2021-25791-Multiple-Stored-XSS

CVE-2021-25791-Multiple-Stored-XSS : Multiple Stored XSS Online Doctor Appointment System Multiple stored aunthenticated cross-site scripting exists in the Online Doctor Appointment System V1.0 Software Link:...

5.4CVSS5.8AI score0.02556EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/10/31 2:56 p.m.•25 views

cloud-doctor

cloud-doctor One command grades your whole cloud account — misconfigurations, missing observability, and security posture, ranked by the five things to fix first. Point it at AWS, Cloudflare, Vercel, Supabase, Render, Fly.io, or Railway and it comes back with a score, what's broken, and a fix for...

6.4AI score
SaveExploits0References4
Kitploit
Kitploit
•added 2026/10/27 2:13 a.m.•9 views

malware-iocs

= Malware Indicators of Compromise This repository contains Indicators of Compromise IOCs related to our investigations. == Copyright Copyright c 2003-2025, Doctor Web, Ltd. https://www.drweb.com...

6AI score
SaveExploits0
NVD
NVD
•added 2026/10/26 3:17 a.m.•24 views

CVE-2026-116112

A vulnerability was identified in HashenUdara edoc-doctor-appointment-system up to cc258425b915d1af9e298777ccd26d160493e68d. The affected element is an unknown function of the file admin/add-new.php. The manipulation of the argument spec leads to sql injection. It is possible to initiate the atta...

7.5CVSS0.00254EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/26 3:00 a.m.•28 views

CVE-2026-116112

A SQL injection vulnerability exists in the HashenUdara edoc-doctor-appointment-system (up to commit cc258425b915d1af9e298777ccd26d160493e68d). The flaw is located within an unknown function of the admin/add-new.php file, where the manipulation of the spec argument allows for remote attack execut...

7.5CVSS7.1AI score0.00254EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/26 3:00 a.m.•38 views

CVE-2026-116112 HashenUdara edoc-doctor-appointment-system add-new.php sql injection

A vulnerability was identified in HashenUdara edoc-doctor-appointment-system up to cc258425b915d1af9e298777ccd26d160493e68d. The affected element is an unknown function of the file admin/add-new.php. The manipulation of the argument spec leads to sql injection. It is possible to initiate the atta...

7.5CVSS0.00254EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/26 3:00 a.m.•11 views

EUVD-2026-109604

A vulnerability was identified in HashenUdara edoc-doctor-appointment-system up to cc258425b915d1af9e298777ccd26d160493e68d. The affected element is an unknown function of the file admin/add-new.php. The manipulation of the argument spec leads to sql injection. It is possible to initiate the atta...

7.5CVSS7.1AI score0.00254EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/26 12:00 a.m.•12 views

PT-2026-123158

A vulnerability was identified in HashenUdara edoc-doctor-appointment-system up to cc258425b915d1af9e298777ccd26d160493e68d. The affected element is an unknown function of the file admin/add-new.php. The manipulation of the argument spec leads to sql injection. It is possible to initiate the atta...

7.5CVSS7.1AI score0.00254EPSS
SaveExploits0References6
GithubExploit
GithubExploit
•added 2026/10/25 11:46 a.m.•17 views

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-doctor !Licensehttps://img.shields.io/badge/lic...

9.8CVSS9AI score0.99999EPSS
SaveExploits511
Rows per page
Query Builder