Lucene search
+L

999 matches found

CVE
CVE
added 2025/11/26 12:00 a.m.23 views

CVE-2025-50399

The vulnerability CVE-2025-50399 affects FAST FAC1200R family (F400_FAC1200R_Q). A buffer overflow is triggered in the function sub_80435780 through the password parameter. Reported impact is high confidentiality, integrity, and availability risks with network access and no required user interact...

9.8CVSS6.7AI score0.00422EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/26 12:00 a.m.13 views

PT-2025-48140

Name of the Vulnerable Software and Affected Versions FAST FAC1200R F400 FAC1200R Q affected versions not specified Description The FAST FAC1200R F400 FAC1200R Q is subject to a buffer overflow condition. This issue occurs in the sub 80435780 function through the password parameter. Recommendatio...

9.8CVSS6.9AI score0.00422EPSS
SaveExploits1References7
Cvelist
Cvelist
added 2025/11/26 12:00 a.m.20 views

CVE-2025-50399

FAST FAC1200R F400FAC1200RQ is vulnerable to Buffer Overflow in the function sub80435780 via the parameter password...

0.00422EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/11/26 12:00 a.m.7 views

CVE-2025-50402

FAST FAC1200R F400FAC1200RQ is vulnerable to Buffer Overflow in the function sub80435780 via the parameter string facpassword...

6.7AI score0.00422EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/11/21 3:17 a.m.20 views

CVE-2025-13449

A vulnerability was found in code-projects Online Shop Project 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument Password results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used...

9.8CVSS6.8AI score0.00401EPSS
SaveExploits1References1
OSV
OSV
added 2025/11/20 3:17 p.m.12 views

CVE-2025-13449

A vulnerability was found in code-projects Online Shop Project 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument Password results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used...

9.8CVSS5.6AI score0.00401EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/11/20 2:32 a.m.10 views

EUVD-2025-198251

A vulnerability was found in code-projects Online Shop Project 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument Password results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used...

7.5CVSS6.4AI score0.00401EPSS
SaveExploits1References6
CVE
CVE
added 2025/11/20 2:32 a.m.22 views

CVE-2025-13449

The CVE-2025-13449 entry concerns code-projects Online Shop Project 1.0. The vulnerability arises from improper handling of the Password parameter in the login.php processing, resulting in a SQL injection risk. Multiple connected sources (Red Hat, NVD, CVE lists, vulnerability enrichment) confirm...

9.8CVSS7.1AI score0.00401EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/20 12:00 a.m.19 views

PT-2025-47552

A vulnerability was found in code-projects Online Shop Project 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument Password results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used...

7.5CVSS7AI score0.00401EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/11/19 3:31 p.m.7 views

EUVD-2025-198158

A reflected cross-site scripting XSS vulnerability exists in the password change functionality of Pixeon WebLaudos 25.1 01. The slesSenha parameter to the loginAlterarSenha.asp file. An attacker can craft a malicious URL that, when visited by a victim, causes arbitrary JavaScript code to be...

4.6CVSS5.4AI score0.00201EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2025/11/19 12:00 a.m.16 views

CVE-2025-63243

A reflected cross-site scripting XSS vulnerability exists in the password change functionality of Pixeon WebLaudos 25.1 01. The slesSenha parameter to the loginAlterarSenha.asp file. An attacker can craft a malicious URL that, when visited by a victim, causes arbitrary JavaScript code to be...

0.00201EPSS
SaveExploits1References2
CNVD
CNVD
added 2025/11/18 12:00 a.m.11 views

Student Record Management System login.php File SQL Injection Vulnerability

Student Record Management System is a software application. Student Record Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the id and password parameters of login.php. An attacker can exploit this...

6.5CVSS8.4AI score0.0024EPSS
SaveExploits1References1
NVD
NVD
added 2025/11/17 5:15 p.m.13 views

CVE-2024-44641

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php...

6.5CVSS0.0024EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/11/17 12:00 a.m.10 views

PHPGurukul Online Shopping Portal 安全漏洞

Online Shopping Portal is an online store system. Online Shopping Portal suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the email parameter of forgot-password.php. No details of the vulnerability are available at this time...

9.8CVSS8AI score0.00408EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2025/11/17 12:00 a.m.16 views

CVE-2024-44641

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php...

0.0024EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/11/17 12:00 a.m.11 views

PT-2025-47202

Name of the Vulnerable Software and Affected Versions PHPGurukul Online Shopping Portal version 2.0 Description The PHPGurukul Online Shopping Portal 2.0 is susceptible to SQL Injection due to improper handling of the email parameter in the forgot-password.php script. Successful exploitation allo...

9.8CVSS8.4AI score0.00408EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
added 2025/11/15 12:47 a.m.20 views

CVE-2024-55016

PHPGurukul Student Record Management System 3.20 is vulnerable to SQL Injection via the id and password parameters in login.php...

6.5CVSS8.2AI score0.0024EPSS
SaveExploits1References1
NVD
NVD
added 2025/11/14 11:15 p.m.9 views

CVE-2025-13188

A vulnerability was detected in D-Link DIR-816L 206b09beta. Affected by this vulnerability is the function authenticationcgimain of the file /authentication.cgi. Performing manipulation of the argument Password results in stack-based buffer overflow. Remote exploitation of the attack is possible...

10CVSS0.02445EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/11/14 12:00 a.m.9 views

PT-2025-46971

Name of the Vulnerable Software and Affected Versions PHPGurukul Student Record Management System version 3.2.0 Description The PHPGurukul Student Record Management System version 3.2.0 is susceptible to SQL Injection. This issue affects the login.php file through the id and password parameters...

6.5CVSS7.1AI score0.0024EPSS
SaveExploits1References5
CVE
CVE
added 2025/11/14 12:00 a.m.17 views

CVE-2024-55016

PHPGurukul Student Record Management System (v3.20) is vulnerable to SQL Injection in login.php via id and password parameters. Root cause appears to be lack of input validation/sanitization in the login flow, enabling attackers to inject SQL commands and potentially access or manipulate the data...

6.5CVSS7.7AI score0.0024EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder