Lucene search
+L

24302 matches found

CVE
CVE
•added 2026/08/23 10:15 p.m.•37 views

CVE-2026-78143

A SQL injection vulnerability exists in the Barangay Resident Profiling Management System 1.0 (code-projects), specifically in the Resident Search Functionality within the file residents.php. The unsanitized Search argument allows a remote, unauthenticated attacker to inject SQL commands. The exp...

7.5CVSS6.9AI score0.00431EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/08/23 10:15 p.m.•16 views

CVE-2026-78143 code-projects Barangay Resident Profiling Management System Resident Search Functionality residents.php sql injection

A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. Remote exploitation of the...

7.5CVSS6.9AI score0.00431EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/08/23 9:15 a.m.•12 views

CVE-2026-78112 itsourcecode Hospital Management System Project in PHP viewservicetype.php sql injection

A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be use...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/08/23 3:30 a.m.•45 views

CVE-2026-78060 SourceCodester Stock Management System getOrderReport.php cross site scripting

A vulnerability was found in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /phpaction/getOrderReport.php. Performing a manipulation of the argument clientName/clientContact results in cross site scripting. It is possible to initiate the attack...

5.3CVSS0.0047EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/08/23 3:30 a.m.•22 views

EUVD-2026-64625

A vulnerability was found in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /phpaction/getOrderReport.php. Performing a manipulation of the argument clientName/clientContact results in cross site scripting. It is possible to initiate the attack...

5.3CVSS4AI score0.0047EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/08/23 2:45 a.m.•9 views

CVE-2026-78057 sambitraj Student-Management-System Management Mutation sql injection

A flaw has been found in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown part of the component Management Mutation Handler. This manipulation of the argument rollno/name/fathername/class/mobile/email/password/remark causes sql injection...

6.5CVSS6.2AI score0.00333EPSS
SaveExploits0References6
NVD
NVD
•added 2026/08/23 2:17 a.m.•26 views

CVE-2026-78055

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /BSIT2.php. The manipulation of the argument course leads to cross site scripting. Remote exploitation of the attack is...

5.3CVSS0.0047EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/08/23 1:00 a.m.•53 views

CVE-2026-78055 SourceCodester Class and Exam Timetabling System BSIT2.php cross site scripting

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /BSIT2.php. The manipulation of the argument course leads to cross site scripting. Remote exploitation of the attack is...

5.3CVSS0.0047EPSS
SaveExploits0References6
CVE
CVE
•added 2026/08/23 1:00 a.m.•40 views

CVE-2026-78055

SourceCodester Class and Exam Timetabling System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the file /BSIT2.php. The flaw is triggered by manipulating the course parameter, allowing a remote attacker to inject malicious scripts that execute in a victim's browser. The attack ...

5.3CVSS4AI score0.0047EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/08/23 1:00 a.m.•24 views

EUVD-2026-64619

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /BSIT2.php. The manipulation of the argument course leads to cross site scripting. Remote exploitation of the attack is...

5.3CVSS3.8AI score0.0047EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/08/23 1:00 a.m.•14 views

CVE-2026-78055 SourceCodester Class and Exam Timetabling System BSIT2.php cross site scripting

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /BSIT2.php. The manipulation of the argument course leads to cross site scripting. Remote exploitation of the attack is...

5.3CVSS4AI score0.0047EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/08/23 12:00 a.m.•30 views

PT-2026-79750

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /BSIT2.php. The manipulation of the argument course leads to cross site scripting. Remote exploitation of the attack is...

5.3CVSS3.6AI score0.0047EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/08/23 12:00 a.m.•29 views

PT-2026-79785

Name of the Vulnerable Software and Affected Versions code-projects Barangay Resident Profiling Management System version 1.0 Description An issue exists in the Resident Search Functionality within the residents.php file. Manipulation of the Search argument allows for remote SQL injection, a...

7.5CVSS7.2AI score0.00431EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2026/08/23 12:00 a.m.•28 views

PT-2026-79790

A vulnerability was identified in the-momentum open-wearables up to 0.6.2. This impacts the function redeem invitation code of the file backend/app/api/routes/v1/user invitation code.py of the component Public Invitation-Code Redemption Endpoint. The manipulation of the argument code leads to...

7.5CVSS7.3AI score0.00405EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/23 12:00 a.m.•5 views

CVE-2026-78143: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. Remote exploitation of the...

7.5CVSS6.9AI score0.00431EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/23 12:00 a.m.•3 views

CVE-2026-78055: Improper Neutralization of Input During Web Page Generation

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /BSIT2.php. The manipulation of the argument course leads to cross site scripting. Remote exploitation of the attack is...

5.3CVSS3.8AI score0.0047EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/08/22 11:30 p.m.•60 views

CVE-2026-78051 alexta69 MeTube Cookie File cookies.txt file access

A vulnerability was determined in alexta69 MeTube up to 2026.06.10. The impacted element is an unknown function of the file /download/.metube/cookies.txt of the component Cookie File Handler. This manipulation causes files or directories accessible. The attack can be initiated remotely. The explo...

6.9CVSS0.00532EPSS
SaveExploits0References6
Snyk
Snyk
•added 2026/08/21 11:47 a.m.•20 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the libristread function in the RIST protocol reader libavformat/librist.c. A remote attacker can cause a heap-based buffer overflow by sending a RIST packet whose payload is larger than the destination...

9.8CVSS6.4AI score0.00702EPSS
SaveExploits1References2
Redos
Redos
•added 2026/08/21 12:00 a.m.•11 views

ROS-20260821-73-0074

The vulnerability of the recvdone function in the fs/smb/server/transportrdma.c module of the SMB server support in the Linux operating system is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor, operating remotely, ...

9.4CVSS7.1AI score0.0026EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/08/21 12:00 a.m.•16 views

The vulnerability of the Git repository management system Gitea, related to deficiencies in the authentication mechanism, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Git repository management system Gitea is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

4.3CVSS7.9AI score0.00367EPSS
SaveExploits0References11Affected Software2
Rows per page
Query Builder