Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

33412 matches found

Positive Technologies
Positive Technologies•added 2026/05/26 12:00 a.m.•44 views

PT-2026-43388

A flaw has been found in itsourcecode Student Transcript Processing System 1.0. This vulnerability affects unknown code of the file /admin/modules/student/trans.php. Executing a manipulation of the argument studentId/cid can lead to sql injection. The attack can be launched remotely. The exploit...

7.5CVSS6.9AI score0.00259EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies•added 2026/05/26 12:00 a.m.•86 views

PT-2026-43387

A vulnerability was detected in itsourcecode Student Transcript Processing System 1.0. This affects an unknown part of the file /admin/modules/student/index.php?view=view. Performing a manipulation of the argument studentId results in sql injection. The attack can be initiated remotely. The explo...

7.5CVSS7AI score0.00259EPSS
SaveExploits0References6
CNNVD
CNNVD•added 2026/05/26 12:00 a.m.•29 views

Code-Projects Project Management System SQL Injection Vulnerability

Code-Projects Project Management System is an open-source project management system developed by Code-Projects. Version 1.0 of the Code-Projects Project Management System contains a SQL injection vulnerability. This vulnerability stems from incorrect operations in the chk.php file of the Login...

7.5CVSS7.2AI score0.00254EPSS
SaveExploits0References5
CNNVD
CNNVD•added 2026/05/26 12:00 a.m.•29 views

The Parking Management System has a SQL injection vulnerability

Das Parking Management System is a parking management system developed by Das Real Technology Co., Ltd. Version 6.2.0 of Das Parking Management System has a SQL injection vulnerability. This vulnerability stems from the improper use of the xpcmdshell function in the API Endpoint component’s...

7.5CVSS7.2AI score0.00318EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies•added 2026/05/26 12:00 a.m.•46 views

PT-2026-43185

A vulnerability was identified in itsourcecode Electronic Judging System 1.0. Impacted is an unknown function of the file /admin/delete judge.php. Such manipulation of the argument judge id leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be...

7.5CVSS7AI score0.00319EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies•added 2026/05/26 12:00 a.m.•36 views

PT-2026-43179

A vulnerability was detected in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 3000WEBV2. Affected by this vulnerability is an unknown functionality of the file /SubstationWEBV2/app/..;/calc/getCalcmeterDetailDayListTree. Performing a manipulation of the argument...

7.5CVSS6.9AI score0.0033EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/05/26 12:00 a.m.•10 views

CVE-2026-35221: Improper Neutralization of Special Elements used in an SQL Command

Improperly built filter clauses lead to a SQL injection vulnerability in the search query for comfinder...

9.8CVSS5.8AI score0.00322EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2026/05/26 12:00 a.m.•51 views

PT-2026-43292

Name of the Vulnerable Software and Affected Versions com finder affected versions not specified Description Improperly built filter clauses lead to a SQL injection in the search query. SQL injection is a type of vulnerability that allows an attacker to interfere with the queries that an...

9.8CVSS5.8AI score0.00322EPSS
SaveExploits0References5
CNNVD
CNNVD•added 2026/05/26 12:00 a.m.•30 views

OpenKM SQL Injection Vulnerability

OpenKM is a document management system developed by OpenKM Company in Spain. This system offers features such as version control, file history, and file sharing. Version OpenKM 6.3.12 has a SQL injection vulnerability; this vulnerability stems from an unlimited SQL execution flaw, which could all...

8.6CVSS6.7AI score0.00641EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies•added 2026/05/26 12:00 a.m.•38 views

PT-2026-43417

Name of the Vulnerable Software and Affected Versions SourceCodester CET Automated Grading System with AI Predictive Analytics version 1.0 Description A remote manipulation of the SQL Handler component within the /index.php endpoint can lead to information exposure. This occurs when the system...

5.3CVSS5.9AI score0.00242EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies•added 2026/05/26 12:00 a.m.•40 views

PT-2026-43390

Name of the Vulnerable Software and Affected Versions ConeXware, Inc Power Archiver versions prior to 22.00.12 Drupal affected versions not specified Description An issue in the powerarc.exe executable allows a remote attacker to escalate privileges and execute arbitrary code. Separately, a SQL...

9.8CVSS6.8AI score0.01052EPSS
SaveExploits0References9
Amazon
Amazon•added 2026/05/26 12:00 a.m.•46 views

Important: oci-add-hooks

Issue Overview: When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash. CVE-2026-33811 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a...

7.5CVSS7.4AI score0.00875EPSS
SaveExploits0
Amazon
Amazon•added 2026/05/26 12:00 a.m.•40 views

Important: oci-add-hooks

Issue Overview: When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash. CVE-2026-33811 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a...

7.5CVSS7.5AI score0.00875EPSS
SaveExploits0
Amazon
Amazon•added 2026/05/26 12:00 a.m.•46 views

Important: soci-snapshotter

Issue Overview: When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash. CVE-2026-33811 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a...

7.5CVSS7.4AI score0.00875EPSS
SaveExploits0
Amazon
Amazon•added 2026/05/26 12:00 a.m.•37 views

Important: oci-add-hooks

Issue Overview: When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash. CVE-2026-33811 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a...

7.5CVSS7.5AI score0.00875EPSS
SaveExploits0
Amazon
Amazon•added 2026/05/26 12:00 a.m.•41 views

Important: amazon-ecr-credential-helper

Issue Overview: When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash. CVE-2026-33811 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a...

7.5CVSS7.5AI score0.00875EPSS
SaveExploits0
Amazon
Amazon•added 2026/05/26 12:00 a.m.•35 views

Important: docker

Issue Overview: When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash. CVE-2026-33811 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a...

7.5CVSS7.5AI score0.00875EPSS
SaveExploits0
Amazon
Amazon•added 2026/05/26 12:00 a.m.•39 views

Important: containerd

Issue Overview: When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash. CVE-2026-33811 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a...

7.5CVSS7.5AI score0.00875EPSS
SaveExploits0
Amazon
Amazon•added 2026/05/26 12:00 a.m.•48 views

Important: nerdctl

Issue Overview: When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash. CVE-2026-33811 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a...

7.5CVSS7.5AI score0.00875EPSS
SaveExploits0
Amazon
Amazon•added 2026/05/26 12:00 a.m.•40 views

Important: nerdctl

Issue Overview: When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash. CVE-2026-33811 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a...

7.5CVSS7.4AI score0.00875EPSS
SaveExploits0
Rows per page
Query Builder