40933 matches found
cpython: POP3 command injection in user-controlled commands
A flaw was found in the poplib module in the Python standard library. The poplib module does not reject control characters, such as newlines, in user-controlled input passed to POP3 commands. This issue allows an attacker to inject additional commands to be executed in the POP3 server...
PT-2026-27050
Name of the Vulnerable Software and Affected Versions SourceCodester Simple E-learning System version 1.0 Description A security issue exists in SourceCodester Simple E-learning System 1.0. The issue is related to SQL injection within the /includes/form handlers/delete post.php file, specifically...
SourceCodester Sales and Inventory System SQL注入漏洞
The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a SQL injection vulnerability. This vulnerability arises from improper handling of the searchtxt...
Simple E-Learning System SQL注入漏洞
Simple E-Learning System is a simple e-learning system developed by Carlo Montero. Version 1.0 of Simple E-Learning System has a SQL injection vulnerability. This vulnerability arises from improper handling of the postid parameter in the HTTP GET Parameter Handler component located in the file...
CVE-2024-46879
A Reflected Cross-Site Scripting XSS vulnerability exists in the POST request data zipPath of tiki-adminsystem.php in Tiki version 21.2. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or...
PT-2026-27242
OpenClaw before 2026.3.1 contains an approval bypass vulnerability in system.run where non-path-like argv0 tokens fail to bind executable identity, allowing post-approval executable rebind. Attackers can modify PATH resolution after approval to execute a different binary than the operator approve...
SourceCodester Sales and Inventory System SQL注入漏洞
The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a SQL injection vulnerability. This vulnerability arises from improper handling of the searchtxt...
SourceCodester Sales and Inventory System SQL注入漏洞
The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a SQL injection vulnerability. This vulnerability arises from improper handling of the searchtxt...
CVE-2024-46879
A Reflected Cross-Site Scripting XSS vulnerability exists in the POST request data zipPath of tiki-adminsystem.php in Tiki version 21.2. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or...
PT-2026-27193
Name of the Vulnerable Software and Affected Versions AVideo versions up to and including 26.0 Description AVideo is an open source video platform susceptible to a SQL injection flaw. The Subscribe::save method within objects/subscribe.php directly incorporates the this-users id property into an...
CVE-2026-33651
creationtimestamp| type| source ---|---|--- 2026-03-22 23:20:20+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-pvw4-p2jm-chjm 2026-03-23 19:22:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhqrus5qgj2q 2026-03-23 20:12:53+00:0...
curl: CVE-2026-4873: connection reuse ignores TLS requirement
A vulnerability was discovered in libcurl's connection reuse for cleartext-upgrade mail protocols. The vulnerability was that the later transfer's CURLOPTUSESSL option was not properly included if a plaintext connection was already open and reusable. This affected the smtp://, pop3://, and imap:/...
CVE-2026-33650
creationtimestamp| type| source ---|---|--- 2026-03-22 23:17:27+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-8x77-f38v-4m5j 2026-03-23 19:22:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhqrulbogn24 2026-03-23 20:21:55+00:0...
CVE-2026-33649
creationtimestamp| type| source ---|---|--- 2026-03-22 23:13:14+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-g8x9-7mgh-7cvj 2026-03-23 19:22:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhqrueq5ea2q 2026-03-23 20:24:39+00:0...
CVE-2026-26136
creationtimestamp| type| source ---|---|--- 2026-03-22 19:38:52+00:00| seen| https://bsky.app/profile/wiert.bsky.social/post/3mhoccouttk2b...
CVE-2026-4552
creationtimestamp| type| source ---|---|--- 2026-03-22 16:39:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhnybgee2n2n 2026-04-02 22:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mikahaf73t2i...
CVE-2019-25618
creationtimestamp| type| source ---|---|--- 2026-03-22 15:14:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhntjlhggc27...
CVE-2019-25612
creationtimestamp| type| source ---|---|--- 2026-03-22 14:59:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhnsoq6ml62z...