Lucene search
+L

2783 matches found

Positive Technologies
Positive Technologies
added 2023/05/12 12:00 a.m.12 views

PT-2023-20774 · Sourcecodester · Sourcecodester Lost/Found Information System

Name of the Vulnerable Software and Affected Versions: SourceCodester Lost and Found Information System version 1.0 Description: A critical issue has been discovered, affecting an unknown function of the file items/view.php of the component GET Parameter Handler. The manipulation of the id argume...

9.8CVSS6.9AI score0.00763EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/05/12 12:00 a.m.43 views

H3C R160 安全漏洞

The H3C R160 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C R160 V1004004 version that stems from a stack-based buffer overflow due to incorrect manipulation of the parameter go...

9.8CVSS6.9AI score0.00982EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/05/11 12:00 a.m.9 views

Online Computer and Laptop Store 跨站脚本漏洞

Online Computer and Laptop Store is an online computer and laptop store by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in SourceCodester Online Computer and Laptop Store version 1.0, which stems from a problem in the file products.php, where manipulation of...

6.1CVSS4.1AI score0.00702EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/05/11 12:00 a.m.12 views

PT-2023-20759 · Sourcecodester · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical vulnerability has been found in the SourceCodester Online Computer and Laptop Store, affecting the file view categories.php. The manipulation of the c argumen...

9.8CVSS8.4AI score0.0082EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2023/05/11 12:00 a.m.12 views

PT-2023-20762 · Sourcecodester · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical issue affects the processing of the file /classes/Master.php, where the manipulation of the id argument leads to sql injection. The attack can be initiated...

9.8CVSS7AI score0.0082EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/05/11 12:00 a.m.9 views

Online Computer and Laptop Store SQL注入漏洞

Online Computer and Laptop Store is an online computer and laptop store by Carlo Montero Personal Developer. SourceCodester Online Computer and Laptop Store version 1.0 suffers from an SQL injection vulnerability that stems from the presence of a SQL injection vulnerability that allows an attacke...

9.8CVSS7.2AI score0.0082EPSS
SaveExploits1References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/05/10 3:04 a.m.8 views

Malicious code in stripe-deep-dup-tree (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 29790a4dda8ea513434302f82a02b4ef9cb90fa0b9e63de804082d284c8cb989 The OpenSSF Package Analysis project identified 'stripe-deep-dup-tree' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...

7.1AI score
SaveExploits0
CNNVD
CNNVD
added 2023/05/08 12:00 a.m.10 views

Online Pizza Ordering System SQL注入漏洞

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero Personal Developer. A security vulnerability exists in Online Pizza Ordering System v1.0, which was discovered to contain an SQL injection attack via QTY parameters...

9.8CVSS8.6AI score0.00978EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/05/02 12:00 a.m.10 views

GL.iNet MT3000 操作系统命令注入漏洞

The GL.iNet MT3000 is an AX3000 portable router using the Wi-Fi 6 protocol from China's GL.iNet. An operating system command injection vulnerability exists in the GL.iNet MT3000 version 4.1.0, which stems from the presence of operating system command injection...

9.8CVSS8.5AI score0.15876EPSS
SaveExploits1References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/04/29 3:50 a.m.7 views

Malicious code in testforconfusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0463d945d1cd3398ce2594034fd52775ac94fe411f1cc645f88f757522abfc1b The OpenSSF Package Analysis project identified 'testforconfusion' @ 1.1.0 npm as malicious. It is considered malicious because: - The package...

6.9AI score
SaveExploits0References1
CNNVD
CNNVD
added 2023/04/29 12:00 a.m.13 views

AC Repair and Services System SQL注入漏洞

AC Repair and Services System is an air conditioning repair and services system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in AC Repair and Services System version 1.0, which stems from a misuse of the parameter id resulting in sql injection...

6.5CVSS6.7AI score0.0063EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/04/28 12:00 a.m.10 views

Faculty Evaluation System SQL注入漏洞

Faculty Evaluation System is a faculty evaluation system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Faculty Evaluation System version 1.0, which stems from an SQL injection issue in the id parameter of ajax.php?action=deletesubject...

9.8CVSS7.2AI score0.00737EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/04/28 12:00 a.m.11 views

PT-2023-19113 · Sourcecodester · Sourcecodester Faculty Evaluation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Faculty Evaluation System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file /admin/manage academic.php. The manipulation of the id argument leads to sql injection,...

9.8CVSS5.3AI score0.00722EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/04/28 12:00 a.m.8 views

Online DJ Management System 跨站脚本漏洞

Online DJ Management System is an online DJ management system. A cross-site scripting vulnerability exists in Online DJ Management System version 1.0, which originates from cross-site scripting due to an incorrect manipulation of the parameter name. An attacker can exploit this vulnerability by...

4.8CVSS6.2AI score0.0061EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/04/28 12:00 a.m.10 views

PT-2023-19090 · Sourcecodester · Resort Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Resort Reservation System version 1.0 Description: A critical issue has been found in the processing of the file view room.php, where the manipulation of the id argument leads to sql injection. The attack can be initiated...

9.8CVSS7.4AI score0.00766EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/04/27 12:00 a.m.11 views

Service Provider Management System SQL注入漏洞

Service Provider Management System is a web-based application by Carlo Montero, an individual developer. It is designed to provide dynamic websites for service provider companies. A SQL injection vulnerability exists in Service Provider Management System version 1.0, which can be exploited by...

9.8CVSS8.2AI score0.0082EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/04/27 12:00 a.m.9 views

Service Provider Management System SQL注入漏洞

Service Provider Management System is a web-based application by Carlo Montero, an individual developer. It is designed to provide dynamic websites for service provider companies. A SQL injection vulnerability exists in Service Provider Management System version 1.0, which is caused by an incorre...

9.8CVSS8.3AI score0.00834EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/04/27 12:00 a.m.9 views

PT-2023-18992 · Sourcecodester · Sourcecodester Service Provider Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Service Provider Management System version 1.0 Description: A problematic vulnerability was found in the SourceCodester Service Provider Management System, affecting an unknown functionality of the file /classes/Users.php. The...

5.4CVSS4.3AI score0.00564EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2023/04/25 12:00 a.m.12 views

PT-2023-18773 · Sourcecodester · Sourcecodester Purchase Order Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Purchase Order Management System version 1.0 Description: A problematic issue has been found in the system, affecting an unknown part of the file classes/Master.php?f=save item. The manipulation of the description argument with...

4.8CVSS4AI score0.00564EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/04/21 12:00 a.m.10 views

Campcodes Retro Basketball Shoes Online Store SQL注入漏洞

Campcodes Retro Basketball Shoes Online Store is an online store for retro basketball shoes from Campcodes. A SQL injection vulnerability exists in Campcodes Retro Basketball Shoes Online Store version 1.0, which originates from a SQL injection vulnerability in the parameter email in the file...

7.5CVSS6.8AI score0.00607EPSS
SaveExploits1References4
Rows per page
Query Builder