Lucene search
+L

29 matches found

EUVD
EUVD
•added 2026/08/14 12:32 a.m.•14 views

EUVD-2026-58478

AgenticSeek commit fc242c7 contains an unauthenticated remote code execution vulnerability that allows any network-adjacent attacker to execute arbitrary commands by submitting crafted queries to the unprotected POST /query API endpoint bound to 0.0.0.0:7777 with wildcard CORS. Attackers can send...

9.8CVSS6.6AI score0.011EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/13 12:00 a.m.•2 views

CVE-2026-72776: Missing Authentication for Critical Function

AgenticSeek commit fc242c7 contains an unauthenticated remote code execution vulnerability that allows any network-adjacent attacker to execute arbitrary commands by submitting crafted queries to the unprotected POST /query API endpoint bound to 0.0.0.0:7777 with wildcard CORS. Attackers can send...

9.8CVSS7AI score0.011EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2026/03/12 2:38 a.m.•194 views

Exploit for SQL Injection in Vishalmathur Cloudclassroom-Php-Project

CVE-2026-2058-PoC – CloudClassroom PHP Project SQL Injection...

9.8CVSS6AI score0.00497EPSS
SaveExploits3
RedhatCVE
RedhatCVE
•added 2026/02/07 7:30 p.m.•12 views

CVE-2026-2058

A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file /postquerypublic.php of the component Post Query Details Page. This manipulation of the argument gnamex causes sql injection. The attack is...

9.8CVSS6.9AI score0.00497EPSS
SaveExploits3References1
NVD
NVD
•added 2026/02/06 5:16 p.m.•15 views

CVE-2026-2058

A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file /postquerypublic.php of the component Post Query Details Page. This manipulation of the argument gnamex causes sql injection. The attack is...

9.8CVSS0.00497EPSS
SaveExploits3References5
OSV
OSV
•added 2026/02/06 5:16 p.m.•15 views

CVE-2026-2058

A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file /postquerypublic.php of the component Post Query Details Page. This manipulation of the argument gnamex causes sql injection. The attack is...

9.8CVSS5.5AI score0.00497EPSS
SaveExploits3References5
Cvelist
Cvelist
•added 2026/02/06 4:32 p.m.•44 views

CVE-2026-2058 mathurvishal CloudClassroom-PHP-Project Post Query Details postquerypublic.php sql injection

A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file /postquerypublic.php of the component Post Query Details Page. This manipulation of the argument gnamex causes sql injection. The attack is...

7.5CVSS0.00497EPSS
SaveExploits3References5
EUVD
EUVD
•added 2026/02/06 4:32 p.m.•23 views

EUVD-2026-5657

A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file /postquerypublic.php of the component Post Query Details Page. This manipulation of the argument gnamex causes sql injection. The attack is...

7.5CVSS6.9AI score0.00497EPSS
SaveExploits3References5
Vulnrichment
Vulnrichment
•added 2026/02/06 4:32 p.m.•7 views

CVE-2026-2058 mathurvishal CloudClassroom-PHP-Project Post Query Details postquerypublic.php sql injection

A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file /postquerypublic.php of the component Post Query Details Page. This manipulation of the argument gnamex causes sql injection. The attack is...

7.5CVSS5.2AI score0.00497EPSS
SaveExploits3References5
CNNVD
CNNVD
•added 2026/02/06 12:00 a.m.•18 views

CloudClassroom-PHP-Project SQL注入漏洞

CloudClassroom-PHP-Project is a cloud classroom website developed by Vishal Mathur. CloudClassroom-PHP-Project has a SQL injection vulnerability, which stems from incorrect handling of the parameter “gnamex” in the component “Post Query Details Page”. This could lead to SQL injection attacks...

9.8CVSS7.1AI score0.00497EPSS
SaveExploits3References5
Positive Technologies
Positive Technologies
•added 2026/02/06 12:00 a.m.•30 views

PT-2026-6731

Name of the Vulnerable Software and Affected Versions mathurvishal CloudClassroom-PHP-Project versions prior to 5dadec098bfbbf3300d60c3494db3fb95b66e7be Description A flaw exists in the Post Query Details Page component of mathurvishal CloudClassroom-PHP-Project. The issue involves a SQL injectio...

7.5CVSS5.5AI score0.00497EPSS
SaveExploits3References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/06 12:00 a.m.•2 views

CVE-2026-2058: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file /postquerypublic.php of the component Post Query Details Page. This manipulation of the argument gnamex causes sql injection. The attack is...

9.8CVSS6.8AI score0.00497EPSS
SaveExploits3References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2020-24928

Malware in sbrugna...

10CVSS9.2AI score0.28338EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2025/07/20 12:56 p.m.•155 views

Exploit for CVE-2026-2058

CLOUD-CLASSROOMS-php-1.0 PoC - Sql Injection Erro Based Prese...

7.5CVSS8AI score0.00497EPSS
SaveExploits3
CVE
CVE
•added 2024/08/29 3:52 a.m.•94 views

CVE-2024-7418

CVE-2024-7418 affects The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid (WordPress). It enables Sensitive Information Exposure via the post_query_guten and post_query functions. Exploitation requires authentication at contributor level or higher to access non-public po...

4.3CVSS4.7AI score0.00495EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2024/08/28 12:00 a.m.•22 views

PT-2024-38334 · WordPress · The Post Grid

Name of the Vulnerable Software and Affected Versions: The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid plugin for WordPress versions up to, and including, 7.7.11 Description: The issue allows authenticated attackers with contributor-level access and above to extract...

4.3CVSS6.3AI score0.00495EPSS
SaveExploits0References12
NVD
NVD
•added 2020/11/02 7:15 a.m.•37 views

CVE-2020-3657

u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client through webserver due to lack of array bound check.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

10CVSS9.6AI score0.28338EPSS
SaveExploits0References2
Prion
Prion
•added 2020/11/02 7:15 a.m.•35 views

Remote code execution

u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client through webserver due to lack of array bound check.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

10CVSS9.5AI score0.28338EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2020/11/02 6:21 a.m.•59 views

CVE-2020-3657

u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client through webserver due to lack of array bound check.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

9.6AI score0.28338EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/02 12:00 a.m.•5 views

CVE-2020-3657: Buffer Copy without Checking Size of Input

u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client through webserver due to lack of array bound check.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

10CVSS6.1AI score0.28338EPSS
SaveExploits0References2
Rows per page
Query Builder