Lucene search
+L

91762 matches found

NVD
NVD
added 2026/08/21 2:16 a.m.10 views

CVE-2026-77392

A weakness has been identified in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This impacts the function saveUser of the file /public/submit.php. This manipulation of the argument Researcher causes sql injection. The attack may be initiated remotely. The exploit has...

6.5CVSS0.0025EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/21 2:16 a.m.11 views

CVE-2026-77391

A security flaw has been discovered in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This affects an unknown function. The manipulation results in cross-site request forgery. The attack can be launched remotely. The exploit has been released to the public and may be...

5.3CVSS0.00179EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/21 2:16 a.m.13 views

CVE-2026-76155

Use of default credentials in Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to gain administrative access to the management platform by logging in with default administrator credentials...

9.3CVSS0.00292EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/21 2:02 a.m.15 views

EUVD-2026-63797

External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to write files to arbitrary locations outside the intended upload directory via relative or absolute path sequences...

9.3CVSS5.6AI score0.00415EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/21 1:47 a.m.16 views

EUVD-2026-63792

Missing authentication for a critical function in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an unauthenticated remote attacker to upload arbitrary files to the server's configured upload directory...

8.8CVSS5.7AI score0.00418EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/21 1:47 a.m.33 views

CVE-2026-76157 Datiphy Data Management Center - Missing Authentication for Critical Function

Missing authentication for a critical function in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an unauthenticated remote attacker to upload arbitrary files to the server's configured upload directory...

8.8CVSS0.00418EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/21 1:40 a.m.32 views

CVE-2026-76155

Datiphy Data Management Center versions v8.3.0 through v8.5.1 ship with default administrator credentials, enabling unauthenticated remote attackers to gain full administrative access. CVSS 9.3 CRITICAL; no patch or exploitation evidence provided in documents. Upgrade to a patched version or chan...

9.3CVSS5.5AI score0.00292EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/21 1:40 a.m.11 views

EUVD-2026-63795

Use of default credentials in Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to gain administrative access to the management platform by logging in with default administrator credentials...

9.3CVSS5.5AI score0.00292EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/21 1:15 a.m.12 views

EUVD-2026-63796

A security flaw has been discovered in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This affects an unknown function. The manipulation results in cross-site request forgery. The attack can be launched remotely. The exploit has been released to the public and may be...

5.3CVSS4.8AI score0.00179EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/21 1:15 a.m.34 views

CVE-2026-77391 SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP cross-site request forgery

A security flaw has been discovered in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This affects an unknown function. The manipulation results in cross-site request forgery. The attack can be launched remotely. The exploit has been released to the public and may be...

5.3CVSS0.00179EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/21 12:31 a.m.12 views

EUVD-2026-63742

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack-based buffer overflow...

5.4CVSS5.9AI score0.002EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/21 12:31 a.m.9 views

EUVD-2026-63748

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

9.9CVSS5.9AI score0.00564EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/21 12:31 a.m.9 views

EUVD-2026-63725

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow...

8.5CVSS6.6AI score0.00419EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/21 12:31 a.m.8 views

EUVD-2026-63723

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper validation of an array size field...

7.5CVSS5.4AI score0.00387EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/21 12:31 a.m.9 views

EUVD-2026-63737

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow...

8.8CVSS6.5AI score0.00271EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/21 12:31 a.m.9 views

EUVD-2026-63735

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to bypass security restrictions due to improper limitation of a pathname to a restricted directory...

4.8CVSS5.4AI score0.00274EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/21 12:31 a.m.14 views

EUVD-2026-63736

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack buffer overflow...

7.5CVSS5.9AI score0.00393EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/21 12:31 a.m.11 views

EUVD-2026-63724

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference...

7.5CVSS5.4AI score0.00387EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/21 12:31 a.m.9 views

EUVD-2026-63717

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper privilege management...

9.8CVSS6AI score0.00505EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/21 12:31 a.m.9 views

EUVD-2026-63643

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and cause a denial of service due to a kernel heap over-read...

8.1CVSS5.4AI score0.00209EPSS
SaveExploits0References2
Rows per page
Query Builder