120 matches found
CVE-2026-11456: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in Chanjet CRM 1.0. This affects an unknown part of the file /tools/jxfdumpsystable.php of the component HTTP GET Request Handler. Such manipulation of the argument gblOrgID leads to sql injection. The attack may be launched remotely. The exploit is publicly availab...
The vulnerability of the HTTP GET Request Handler component of the LibreChat artificial intelligence-based platform allows a attacker to perform XSS attacks.
The vulnerability of the HTTP GET Request Handler component of the LibreChat artificial intelligence-based platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
PT-2026-33449
Name of the Vulnerable Software and Affected Versions QueryMine sms versions up to 7ab5a9ea196209611134525ffc18de25c57d9593 Description Remote SQL injection is possible via the GET Request Parameter Handler in the 'admin/editcourse.php' file. The issue occurs when the ID argument is manipulated,...
CVE-2026-5531: Cleartext Storage in a File or on Disk
A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /logincredentials.txt of the component HTTP GET Request Handler. The manipulation leads to cleartext storage in a file or on disk. The attack may be initiated remotel...
CVE-2026-4568: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown function of the file /updatesupplier.php of the component HTTP GET Request Handler. The manipulation of the argument sid results in sql injection. The attack may be launched remotely. The exploit h...
SourceCodester Sales and Inventory System SQL注入漏洞
The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a SQL injection vulnerability. This vulnerability arises from improper handling of the sid...
PT-2026-27041
Name of the Vulnerable Software and Affected Versions SourceCodester Sales and Inventory System version 1.0 Description A SQL injection issue exists in SourceCodester Sales and Inventory System version 1.0. The issue is located in the HTTP GET Request Handler component, specifically within the...
CVE-2025-1357
A vulnerability classified as problematic has been found in Seventh D-Guard up to 20250206. This affects an unknown part of the component HTTP GET Request Handler. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...
The vulnerability of the HTTP GET Request Handler component in the /app/sae/design/desktop/flat file of the software for developing mobile applications in SiberianCMS allows a attacker to perform XSS attacks.
The vulnerability of the HTTP GET Request Handler component in the /app/sae/design/desktop/flat file of the software for developing mobile applications in SiberianCMS is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor ...
CVE-2025-11291: Improper Neutralization of Input During Web Page Generation
A security flaw has been discovered in ixmaps website2017 up to 0c71cffa0162186bc057a76766bc97e9f5a3a2d0. This impacts an unknown function of the file /map.php of the component HTTP GET Request Handler. Performing manipulation of the argument trid results in cross site scripting. The attack can b...
EUVD-2024-16137
Malicious code in bioql PyPI...
EUVD-2025-2118
Malicious code in bioql PyPI...
EUVD-2024-16964
Malicious code in bioql PyPI...
EUVD-2024-16259
Malicious code in bioql PyPI...
EUVD-2025-10384
Malicious code in bioql PyPI...
EUVD-2023-12946
Malicious code in bioql PyPI...
EUVD-2024-16213
Malicious code in bioql PyPI...
EUVD-2024-33346
Malicious code in bioql PyPI...