Lucene search
+L

27 matches found

NVD
NVD
added yesterday10 views

CVE-2026-2406

Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trust in Client. This issue affects Online Registration and Workflow Management System: through...

6.5CVSS0.00291EPSS
Exploits1References1
CVE
CVE
added yesterday17 views

CVE-2026-2406

An authorization bypass in Universe Software's Online Registration and Workflow Management System (through 12022026) is reported as CVE-2026-2406. The vulnerability stems from a user-controlled key, enabling unauthorized access. CVSS v3.1 vector: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N; base score 6....

6.5CVSS5.3AI score0.00291EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added yesterday5 views

CVE-2026-2406

Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trust in Client. This issue affects Online Registration and Workflow Management System: through...

6.5CVSS5.2AI score0.00291EPSS
Exploits1References2
EUVD
EUVD
added yesterday7 views

EUVD-2026-47621

Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trust in Client. This issue affects Online Registration and Workflow Management System: through...

6.5CVSS5.2AI score0.00291EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.11 views

EUVD-2021-9987

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.01028EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/05/19 10:0 a.m.27 views

CVE-2025-4927 PHPGurukul Online Marriage Registration System between-dates-application-report.php sql injection

A vulnerability was found in PHPGurukul Online Marriage Registration System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/between-dates-application-report.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to...

7.5CVSS0.00432EPSS
Exploits1References5
Schneier on Security
Schneier on Security
added 2022/10/13 11:19 a.m.14 views

Digital License Plates

California just legalized digital license plates, which seems like a solution without a problem. The Rplate can reportedly function in extreme temperatures, has some customization features, and is managed via Bluetooth using a smartphone app. Rplates are also equipped with an LTE antenna, which c...

2.1AI score
Exploits0
Prion
Prion
added 2022/08/19 2:15 a.m.18 views

Cross site scripting

Cross Site Scripting XSS vulnerability exists in the phpgurukul Online Marriage Registration System 1.0 allows attackers to run arbitrary code via the wzipcode field...

4.9CVSS5.4AI score0.00516EPSS
Exploits1References2Affected Software1
CNVD
CNVD
added 2021/12/29 12:0 a.m.15 views

PayPal Free Source Code Access Control Error Vulnerability

PayPal Free Source Code is an online registration management system. An access control error vulnerability exists in PayPal Free Source Code, which stems from the product's failure to validate privileges when obtaining PHP and PayPal Free Source 1.0 product code, and can be exploited by an attack...

6.5CVSS6.8AI score0.00843EPSS
Exploits0References1
CNVD
CNVD
added 2021/12/09 12:0 a.m.17 views

PayPal Free Source Code has an unspecified vulnerability

PayPal Free Source Code is an online registration management system. A security vulnerability exists in PayPal Free Source Code 1.0 online registration management system, which allows attackers to obtain sensitive information and execute arbitrary SQL commands via the IDNO parameter...

7.2CVSS6.4AI score0.01477EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/12/07 12:0 a.m.7 views

PayPal Free Source Code SQL注入漏洞

PayPal Free Source Code is an online registration management system. A security vulnerability exists in PayPal Free Source Code 1.0 online registration management system, which allows attackers to obtain sensitive information and execute arbitrary SQL commands via the IDNO parameter...

7.2CVSS6.2AI score0.01477EPSS
Exploits1References3
CNVD
CNVD
added 2021/02/05 12:0 a.m.2 views

Unauthorized Access Vulnerability in Waychar Enrollment System

Waychar Registration System is an online registration system developed for sporting events and other general purpose activities. An unauthorized access vulnerability exists in the Waychar registration system, which can be exploited by attackers to obtain sensitive information...

6.8AI score
Exploits0
NVD
NVD
added 2021/01/19 10:15 a.m.13 views

CVE-2021-22852

HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter online registration to obtain database schema and data...

8.8CVSS9.2AI score0.01028EPSS
Exploits0References2
Prion
Prion
added 2021/01/19 10:15 a.m.20 views

Sql injection

HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter online registration to obtain database schema and data...

6.5CVSS9AI score0.01028EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2021/01/19 12:0 a.m.6 views

HGiga EIP SQL Injection Vulnerability

A SQL injection vulnerability exists in HGiga EIP product, which can be exploited by an attacker to obtain database schema and data by injecting SQL commands into specific URL parameters online registration...

8.8CVSS5.9AI score0.01028EPSS
Exploits0References2
CNVD
CNVD
added 2020/04/30 12:0 a.m.3 views

SQL injection vulnerability in waychar enrollment system (CNVD-2020-28130)

waychar registration system, an online registration system developed for sports events and other general events, supports public numbers and small programs. The waychar registration system suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive...

7.6AI score
Exploits0
Openbugbounty
Openbugbounty
added 2017/07/07 11:1 a.m.16 views

lccsecure.lancashire.gov.uk XSS vulnerability

Open Bug Bounty ID: OBB-261465 Description| Value ---|--- Affected Website:| lccsecure.lancashire.gov.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.25 views

Private Wire Gateway Buffer Overflow

No description provided by source. $Id: privatewiregateway.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...

7.1AI score
Exploits0
ThreatPost
ThreatPost
added 2012/07/18 6:21 p.m.8 views

Washington State to Register Voters via Facebook

Residents of Washington State will soon be able to access voter registration forms on the secretary of state’s official Facebook page, according to an Associated Press report. Voters will not be registering directly through Facebook, but rather using the social network to access voter registratio...

2.5AI score
Exploits0References1
exploitpack
exploitpack
added 2010/06/09 12:0 a.m.20 views

Science Fair In A Box - SQL Injection Cross-Site Scripting

Science Fair In A Box - SQL Injection Cross-Site Scripting Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Science Fair In A Box SQLi & XSS Vulnerability Version:2.0.6 Price:Free Vendor url:http://www.sfiab.ca/ Published: 2010-06-09 Greetz to:Sid3^effects, MaYur, M4n0j, Dark...

0.1AI score
Exploits0
Rows per page
Query Builder