41012 matches found
SourceCodester Sales and Inventory System SQL注入漏洞
The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a SQL injection vulnerability. This vulnerability arises from improper handling of the searchtxt...
Simple E-Learning System SQL注入漏洞
Simple E-Learning System is a simple e-learning system developed by Carlo Montero. Version 1.0 of Simple E-Learning System has a SQL injection vulnerability. This vulnerability arises from improper handling of the postid parameter in the HTTP GET Parameter Handler component located in the file...
CVE-2024-46879
A Reflected Cross-Site Scripting XSS vulnerability exists in the POST request data zipPath of tiki-adminsystem.php in Tiki version 21.2. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or...
PT-2026-27193
Name of the Vulnerable Software and Affected Versions AVideo versions up to and including 26.0 Description AVideo is an open source video platform susceptible to a SQL injection flaw. The Subscribe::save method within objects/subscribe.php directly incorporates the this-users id property into an...
PT-2026-27242
OpenClaw before 2026.3.1 contains an approval bypass vulnerability in system.run where non-path-like argv0 tokens fail to bind executable identity, allowing post-approval executable rebind. Attackers can modify PATH resolution after approval to execute a different binary than the operator approve...
SourceCodester Sales and Inventory System SQL注入漏洞
The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a SQL injection vulnerability. This vulnerability arises from improper handling of the searchtxt...
SourceCodester Sales and Inventory System SQL注入漏洞
The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a SQL injection vulnerability. This vulnerability arises from improper handling of the searchtxt...
CVE-2024-46879
A Reflected Cross-Site Scripting XSS vulnerability exists in the POST request data zipPath of tiki-adminsystem.php in Tiki version 21.2. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or...
CVE-2026-33651
creationtimestamp| type| source ---|---|--- 2026-03-22 23:20:20+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-pvw4-p2jm-chjm 2026-03-23 19:22:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhqrus5qgj2q 2026-03-23 20:12:53+00:0...
curl: CVE-2026-4873: connection reuse ignores TLS requirement
A vulnerability was discovered in libcurl's connection reuse for cleartext-upgrade mail protocols. The vulnerability was that the later transfer's CURLOPTUSESSL option was not properly included if a plaintext connection was already open and reusable. This affected the smtp://, pop3://, and imap:/...
CVE-2026-33650
creationtimestamp| type| source ---|---|--- 2026-03-22 23:17:27+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-8x77-f38v-4m5j 2026-03-23 19:22:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhqrulbogn24 2026-03-23 20:21:55+00:0...
CVE-2026-33649
creationtimestamp| type| source ---|---|--- 2026-03-22 23:13:14+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-g8x9-7mgh-7cvj 2026-03-23 19:22:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhqrueq5ea2q 2026-03-23 20:24:39+00:0...
CVE-2026-26136
creationtimestamp| type| source ---|---|--- 2026-03-22 19:38:52+00:00| seen| https://bsky.app/profile/wiert.bsky.social/post/3mhoccouttk2b...
CVE-2026-4552
creationtimestamp| type| source ---|---|--- 2026-03-22 16:39:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhnybgee2n2n 2026-04-02 22:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mikahaf73t2i...
CVE-2019-25618
creationtimestamp| type| source ---|---|--- 2026-03-22 15:14:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhntjlhggc27...
CVE-2019-25612
creationtimestamp| type| source ---|---|--- 2026-03-22 14:59:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhnsoq6ml62z...
CVE-2019-25615
creationtimestamp| type| source ---|---|--- 2026-03-22 14:38:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhnrj4xfdw2n...
CVE-2019-25607
creationtimestamp| type| source ---|---|--- 2026-03-22 14:28:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhnqxa3ztl27...
CVE-2019-25600
creationtimestamp| type| source ---|---|--- 2026-03-22 14:23:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhnqobofze27 2026-03-23 03:00:09+00:00| seen| https://www.vulncheck.com/advisories/ultravnc-viewer-denial-of-service-via-buffer-overflow...