Lucene search
+L

922 matches found

Positive Technologies
Positive Technologies
added 2026/03/08 12:0 a.m.6 views

PT-2026-23966

Name of the Vulnerable Software and Affected Versions SourceCodester Sales and Inventory System version 1.0 Description A SQL injection issue exists in SourceCodester Sales and Inventory System 1.0. The issue is located in the POST Handler component, specifically within the file /check customer...

8.8CVSS6.6AI score0.00301EPSS
SaveExploits1References9
EUVD
EUVD
added 2026/02/27 12:31 a.m.9 views

EUVD-2026-8904

A vulnerability was found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.20250118. Affected by this vulnerability is an unknown functionality of the file /api/Security/ of the component Security API. Performing a manipulation results in improper authorization. Remote...

6.5CVSS5.3AI score0.00314EPSS
SaveExploits1References5
OSV
OSV
added 2026/02/26 10:20 p.m.3 views

CVE-2026-3263

A vulnerability was found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.20250118. Affected by this vulnerability is an unknown functionality of the file /api/Security/ of the component Security API. Performing a manipulation results in improper authorization. Remote...

8.8CVSS5.5AI score0.00314EPSS
SaveExploits1References4
OSV
OSV
added 2026/02/26 10:20 p.m.7 views

CVE-2026-3262

A vulnerability has been found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.20250118. Affected is an unknown function of the component Administrative Interface. Such manipulation leads to execution after redirect. The attack may be launched remotely. The exploit has been...

8.8CVSS5.4AI score0.00415EPSS
SaveExploits1References4
CVE
CVE
added 2026/02/26 9:32 p.m.14 views

CVE-2026-3263

The CVE affects go2ismail Asp.Net-Core-Inventory-Order-Management-System up to version 9.20250118. The vulnerability lies in an unknown functionality within the /api/Security/ of the Security API, where manipulation can lead to improper authorization and remote exploitation. Vendor has not respon...

8.8CVSS5.3AI score0.00314EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2026/02/26 9:2 p.m.17 views

CVE-2026-3262

Summary (CVE-2026-3262) A vulnerability in go2ismail “Asp.Net-Core-Inventory-Order-Management-System” (up to 9.20250118) affects the Administrative Interface via an unknown function, enabling manipulation that leads to execution after redirect. It can be exploited remotely and exploitation has be...

8.8CVSS5.3AI score0.00415EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/02/26 9:2 p.m.2 views

CVE-2026-3262

A vulnerability has been found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.20250118. Affected is an unknown function of the component Administrative Interface. Such manipulation leads to execution after redirect. The attack may be launched remotely. The exploit has been...

8.8CVSS6.2AI score0.00415EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/26 12:0 a.m.5 views

PT-2026-22192

Name of the Vulnerable Software and Affected Versions go2ismail Asp.Net-Core-Inventory-Order-Management-System versions prior to 9.20250118 Description A flaw exists in go2ismail Asp.Net-Core-Inventory-Order-Management-System. The issue resides in an unknown function within the Administrative...

6.5CVSS6.6AI score0.00415EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
added 2026/01/09 10:48 a.m.9 views

CVE-2022-31339

Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/login.php...

7.2CVSS8.1AI score0.00979EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:47 a.m.11 views

CVE-2022-31340

Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/tableeditajax.php...

9.8CVSS8.1AI score0.01105EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:25 a.m.7 views

CVE-2023-4199

A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. This affects an unknown part of the file catagorydata.php. The manipulation of the argument columns1data leads to sql injection. It is possible to initiate the attack remotely. The...

7.5CVSS7.9AI score0.00533EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:19 a.m.11 views

CVE-2024-2066

A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-computer.php. The manipulation of the argument model leads to cross site scripting. It is possible to initiate the attack...

6.1CVSS6AI score0.00385EPSS
SaveExploits0References1
Redos
Redos
added 2025/12/03 12:0 a.m.9 views

ROS-20251203-17

Vulnerabilities in GLPI's computer hardware request, incident, and inventory system are related to insufficient cleansing of user-supplied data. Exploitation of the vulnerability could allow A remote attacker to use malicious code to steal recipient credentials mail...

7.5CVSS7AI score0.06576EPSS
SaveExploits0
CVE
CVE
added 2025/11/23 7:2 p.m.15 views

CVE-2025-13565

CVE-2025-13565 affects SourceCodester Inventory Management System 1.0. The weakness is in /model/user/resetPassword.php, where manipulation of an unknown function can enable weak password recovery. The vulnerability is exploitable remotely and a public exploit exists. Impact is indicated as weak ...

9.1CVSS6.3AI score0.00462EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/23 12:0 a.m.7 views

PT-2025-47858

A weakness has been identified in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the file /model/user/resetPassword.php. Executing manipulation can lead to weak password recovery. The attack may be performed from remote. The exploit has been made...

6.9CVSS6.7AI score0.00462EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/11/23 12:0 a.m.6 views

SourceCodester Inventory Management System 授权问题漏洞

SourceCodester Inventory Management System is a SourceCodester open source inventory management system. An authorization issue vulnerability exists in SourceCodester Inventory Management System version 1.0, which stems from the incorrect manipulation of a parameter by an unknown function in the...

9.1CVSS5.5AI score0.00462EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/11/17 3:30 p.m.8 views

EUVD-2025-197791

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS6.6AI score0.00376EPSS
SaveExploits1References6
NVD
NVD
added 2025/11/17 1:15 p.m.10 views

CVE-2025-13280

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has bee...

9.8CVSS0.00376EPSS
SaveExploits1References5
OSV
OSV
added 2025/11/17 1:15 p.m.7 views

CVE-2025-13280

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has bee...

9.8CVSS5.7AI score0.00376EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/11/17 1:14 p.m.8 views

CVE-2025-13179

A vulnerability has been found in Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System up to 20250320. This issue affects some unknown processing. Such manipulation leads to cross-site request forgery. The attack may be performed from remote. The exploit has been disclose...

6.5CVSS4.4AI score0.00217EPSS
SaveExploits1References1
Rows per page
Query Builder