Lucene search
+L

7743 matches found

Vulnrichment
Vulnrichment
•added 2025/09/03 1:02 a.m.•9 views

CVE-2025-9847 ScriptAndTools Real Estate Management System register.php unrestricted upload

A weakness has been identified in ScriptAndTools Real Estate Management System 1.0. Impacted is an unknown function of the file register.php. This manipulation of the argument uimage causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to...

6.5CVSS6.3AI score0.00405EPSS
SaveExploits1References4
CVE
CVE
•added 2025/09/03 1:02 a.m.•44 views

CVE-2025-9847

ScriptAndTools Real Estate Management System 1.0 contains a vulnerability in the register.php file where manipulating the uimage parameter allows unrestricted file upload. The issue affects an unknown function in register.php and enables remote exploitation; public exploits have been reported. Th...

9.8CVSS6.3AI score0.00405EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
•added 2025/09/03 12:00 a.m.•26 views

Real-Estate-website-in-PHP code issues and vulnerabilities

Real-Estate-website-in-PHP is a free and open source real estate website by scriptandtools individual developers. A code issue vulnerability exists in Real-Estate-website-in-PHP version 1.0, which stems from an incorrect manipulation of the parameter uimage in the file register.php resulting in...

9.8CVSS6.6AI score0.00405EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/03 12:00 a.m.•6 views

CVE-2023-21479: Undefined Security Weakness

Improper authorization in Smart suggestions prior to SMR Apr-2023 Release 1 in Android 13 and 4.1.01.0 in Android 12 allows remote attackers to register a schedule...

5.3CVSS5.8AI score0.00375EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/02 9:15 p.m.•18 views

CVE-2025-9832

A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the file /routers/register-router.php. Such manipulation of the argument phone leads to sql injection. The attack may be performed from remote. The exploit has been...

9.8CVSS0.00451EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2025/09/02 9:15 p.m.•22 views

CVE-2025-9832

A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the file /routers/register-router.php. Such manipulation of the argument phone leads to sql injection. The attack may be performed from remote. The exploit has been...

9.8CVSS5.7AI score0.00451EPSS
SaveExploits1References6
CVE
CVE
•added 2025/09/02 8:32 p.m.•45 views

CVE-2025-9832

CVE-2025-9832 affects SourceCodester Food Ordering Management System 1.0. The vulnerability is in an unknown function within /routers/register-router.php where manipulation of the phone parameter enables SQL injection. It can be exploited remotely and exploit details have been publicly disclosed....

9.8CVSS6.9AI score0.00451EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
•added 2025/09/02 8:32 p.m.•34 views

CVE-2025-9832 SourceCodester Food Ordering Management System register-router.php sql injection

A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the file /routers/register-router.php. Such manipulation of the argument phone leads to sql injection. The attack may be performed from remote. The exploit has been...

7.5CVSS0.00451EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2025/09/02 8:32 p.m.•10 views

CVE-2025-9832 SourceCodester Food Ordering Management System register-router.php sql injection

A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the file /routers/register-router.php. Such manipulation of the argument phone leads to sql injection. The attack may be performed from remote. The exploit has been...

7.5CVSS6.8AI score0.00451EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2025/09/02 6:05 a.m.•16 views

kernel: s390/ptrace: handle setting of fpc register correctly

In the Linux kernel, the following vulnerability has been resolved: s390/ptrace: handle setting of fpc register correctly If the content of the floating point control fpc register of a traced process is modified with the ptrace interface the new value is tested for validity by temporarily loading...

7.1CVSS6.8AI score0.00242EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/09/02 12:00 a.m.•19 views

PT-2025-35613

Name of the Vulnerable Software and Affected Versions SourceCodester Food Ordering Management System version 1.0 Description A security issue exists in SourceCodester Food Ordering Management System 1.0. Manipulation of the phone argument in an unknown function within the...

9.8CVSS7.2AI score0.00451EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/02 12:00 a.m.•8 views

CVE-2025-9832: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the file /routers/register-router.php. Such manipulation of the argument phone leads to sql injection. The attack may be performed from remote. The exploit has been...

9.8CVSS5.5AI score0.00451EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/09/02 12:00 a.m.•18 views

SourceCodester Food Ordering Management System security vulnerabilities

SourceCodester Food Ordering Management System is a SourceCodester open source food ordering management system. A security vulnerability exists in SourceCodester Food Ordering Management System version 1.0, which is caused by a SQL injection due to a mishandling of the parameter phone in the file...

9.8CVSS7.8AI score0.00451EPSS
SaveExploits1References7
osv_pub
osv_pub
•added 2025/09/01 12:00 a.m.•24 views

PUB-A-419014045

In lwistopregisterio of lwisdevicetop.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

6.7CVSS5.9AI score0.00088EPSS
SaveExploits0References1
osv_pub
osv_pub
•added 2025/09/01 12:00 a.m.•27 views

PUB-A-419541948

In lwistestregisterio of lwisdevicetest.c, there is a possible OOB Write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

6.7CVSS5.9AI score0.00082EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/30 6:20 p.m.•17 views

CVE-2025-51971

A reflected Cross-Site Scripting XSS vulnerability exists in register.php of PuneethReddyHC Online Shopping System Advanced 1.0. Unsanitized user input in the fname parameter is reflected in the server response without proper HTML encoding or output escaping. This allows remote attackers to injec...

5.4CVSS6AI score0.00268EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/08/30 12:00 a.m.•2 views

PT-2025-53561

Уязвимость функции pps register cdev ядра операционной системы Linux связана с раскрытием информации в сообщениях об ошибках. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

6CVSS0.0024EPSS
SaveExploits0References10
osv_cve
osv_cve
•added 2025/08/28 2:15 p.m.•16 views

CVE-2025-51971

A reflected Cross-Site Scripting XSS vulnerability exists in register.php of PuneethReddyHC Online Shopping System Advanced 1.0. Unsanitized user input in the fname parameter is reflected in the server response without proper HTML encoding or output escaping. This allows remote attackers to injec...

5.4CVSS5.9AI score0.00268EPSS
SaveExploits1References1
NVD
NVD
•added 2025/08/28 2:15 p.m.•19 views

CVE-2025-51971

A reflected Cross-Site Scripting XSS vulnerability exists in register.php of PuneethReddyHC Online Shopping System Advanced 1.0. Unsanitized user input in the fname parameter is reflected in the server response without proper HTML encoding or output escaping. This allows remote attackers to injec...

5.4CVSS0.00268EPSS
SaveExploits1References1
CVE
CVE
•added 2025/08/28 12:00 a.m.•45 views

CVE-2025-51971

A reflected Cross-Site Scripting (XSS) vulnerability exists in the register.php file of PuneethReddyHC Online Shopping System Advanced version 1.0 . The root cause is the lack of proper HTML encoding or output escaping for unsanitized user input provided in the f_name parameter. This flaw allows ...

5.4CVSS6.1AI score0.00268EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder