Lucene search
+L

27 matches found

Kitploit
Kitploit
•added 2026/10/09 3:55 a.m.•35 views

Gitmails

Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...

6.3AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/09 11:21 a.m.•52 views

CVE-2026-87819 GitPython before 3.1.60 Denial of Service via ReDoS

GitPython before 3.1.60 contains a regular expression denial of service vulnerability in Actor.nameemailregex that processes commit author and committer fields. Attackers can craft a commit object with a malformed author field containing an unterminated angle bracket to cause quadratic...

8.7CVSS0.00521EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2026/02/17 1:27 p.m.•12 views

CVE-2026-2553

A security flaw has been discovered in tushar-2223 Hotel-Management-System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15. This affects an unknown part of the file /home.php of the component HTTP POST Request Handler. Performing a manipulation of the argument Name/Email results in sql injection...

6.5CVSS5.6AI score0.00336EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/16 11:32 a.m.•53 views

CVE-2026-2553 tushar-2223 Hotel-Management-System HTTP POST Request home.php sql injection

A security flaw has been discovered in tushar-2223 Hotel-Management-System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15. This affects an unknown part of the file /home.php of the component HTTP POST Request Handler. Performing a manipulation of the argument Name/Email results in sql injection...

6.5CVSS0.00336EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/02/16 11:32 a.m.•14 views

CVE-2026-2553

A security flaw has been discovered in tushar-2223 Hotel-Management-System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15. This affects an unknown part of the file /home.php of the component HTTP POST Request Handler. Performing a manipulation of the argument Name/Email results in sql injection...

6.5CVSS5.6AI score0.00336EPSS
SaveExploits0References5
OSV
OSV
•added 2026/02/16 11:32 a.m.•5 views

CVE-2026-2553 tushar-2223 Hotel-Management-System HTTP POST Request home.php sql injection

A security flaw has been discovered in tushar-2223 Hotel-Management-System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15. This affects an unknown part of the file /home.php of the component HTTP POST Request Handler. Performing a manipulation of the argument Name/Email results in sql injection...

5.3CVSS5.5AI score
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/02/16 12:00 a.m.•21 views

PT-2026-8337

Name of the Vulnerable Software and Affected Versions tushar-2223 Hotel-Management-System versions up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15 Description A security flaw exists in tushar-2223 Hotel-Management-System. The issue is related to SQL injection within the HTTP POST Request Handler...

6.5CVSS6.4AI score0.00336EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/16 12:00 a.m.•2 views

CVE-2026-2553: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in tushar-2223 Hotel-Management-System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15. This affects an unknown part of the file /home.php of the component HTTP POST Request Handler. Performing a manipulation of the argument Name/Email results in sql injection...

6.5CVSS6.3AI score0.00336EPSS
SaveExploits0References1
Mend
Mend
•added 2025/07/04 2:02 a.m.•3 views

CVE-2025-7053

A vulnerability was found in Cockpit up to 2.11.3. It has been rated as problematic. This issue affects some unknown processing of the file /system/users/save. The manipulation of the argument name/email leads to cross site scripting. The attack may be initiated remotely. Upgrading to version...

6.1CVSS0.00354EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/04 12:00 a.m.•4 views

CVE-2025-7053: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Cockpit up to 2.11.3. It has been rated as problematic. This issue affects some unknown processing of the file /system/users/save. The manipulation of the argument name/email leads to cross site scripting. The attack may be initiated remotely. Upgrading to version...

6.1CVSS3.8AI score0.00354EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/24 12:00 a.m.•3 views

CVE-2025-6581: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-customer.php. The manipulation of the argument name/email/mobilenum/gender/details/dob/marriagedate leads to sql...

8.8CVSS5.5AI score0.00452EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/30 12:00 a.m.•8 views

CVE-2024-13039: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Simple Chat System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /adduser.php. The manipulation of the argument name/email/password/number leads to sql injection. The attack may be launched remotely...

8.8CVSS5.5AI score0.00592EPSS
SaveExploits1References1
Mend
Mend
•added 2024/06/22 11:31 a.m.•3 views

CVE-2024-6251

A vulnerability, which was classified as problematic, was found in playSMS 1.4.3. Affected is an unknown function of the file /index.php?app=main&inc=featurephonebook&op=phonebooklist of the component New Phonebook Handler. The manipulation of the argument name/email leads to basic cross site...

6.1CVSS0.00372EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/22 12:00 a.m.•4 views

CVE-2024-6251: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A vulnerability, which was classified as problematic, was found in playSMS 1.4.3. Affected is an unknown function of the file /index.php?app=main&inc=featurephonebook&op=phonebooklist of the component New Phonebook Handler. The manipulation of the argument name/email leads to basic cross site...

6.1CVSS3.8AI score0.00372EPSS
SaveExploits0References1
NVD
NVD
•added 2024/02/29 2:15 a.m.•23 views

CVE-2023-51800

Cross Site Scripting XSS vulnerability in School Fees Management System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the mainsettings component in the phone, address, bank, accname, accnumber parameters, newclass and cname parameter, addnewparent function in t...

6.1CVSS6.1AI score0.00628EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/02/29 12:00 a.m.•39 views

CVE-2023-51800

Cross Site Scripting XSS vulnerability in School Fees Management System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the mainsettings component in the phone, address, bank, accname, accnumber parameters, newclass and cname parameter, addnewparent function in t...

6.3AI score0.00628EPSS
SaveExploits1References1
OSV
OSV
•added 2024/01/07 6:15 p.m.•20 views

CVE-2024-0286

A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file index.phpcontactus of the component Contact Form. The manipulation of the argument Name/Email/Message leads to cross site scripting. It is possibl...

6.1CVSS3.7AI score0.00877EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/01/07 12:00 a.m.•18 views

PHPGurukul Hospital Management System Cross-Site Scripting Vulnerability

PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. A cross-site scripting vulnerability exists in PHPGurukul Hospital Management System version 1.0, which originates in the component Contact Form, index.phpcontactus, which contains an unknown section that...

6.1CVSS6AI score0.00877EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/07 12:00 a.m.•3 views

CVE-2024-0286: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file index.phpcontactus of the component Contact Form. The manipulation of the argument Name/Email/Message leads to cross site scripting. It is possibl...

6.1CVSS3.8AI score0.00877EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/12/28 12:00 a.m.•20 views

PT-2023-32900 · Unknown · Code-Projects Client Details System

Name of the Vulnerable Software and Affected Versions: code-projects Client Details System version 1.0 Description: A vulnerability has been found in the code-projects Client Details System, affecting the file /admin/regester.php of the component HTTP POST Request Handler. The manipulation of the...

9.8CVSS5.7AI score0.00644EPSS
SaveExploits1References6
Rows per page
Query Builder