Lucene search
K

40984 matches found

NVD
NVD
added 2026/04/26 9:16 a.m.6 views

CVE-2026-7028

A security flaw has been discovered in CodeAstro Online Job Portal 1.0. The affected element is an unknown function of the file /admin/jobs-admins/delete-jobs.php of the component All Jobs Page. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

5.8CVSS0.00311EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/04/26 9:15 a.m.4 views

CVE-2026-7030 Tenda F456 RouteStatic fromRouteStatic buffer overflow

A security vulnerability has been detected in Tenda F456 1.0.0.5. This affects the function fromRouteStatic of the file /goform/RouteStatic. The manipulation of the argument page leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and...

9CVSS8.6AI score0.00632EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/04/26 9:15 a.m.34 views

CVE-2026-7030 Tenda F456 RouteStatic fromRouteStatic buffer overflow

A security vulnerability has been detected in Tenda F456 1.0.0.5. This affects the function fromRouteStatic of the file /goform/RouteStatic. The manipulation of the argument page leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and...

9CVSS0.00632EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2026/04/26 9:15 a.m.3 views

CVE-2026-7030

A security vulnerability has been detected in Tenda F456 1.0.0.5. This affects the function fromRouteStatic of the file /goform/RouteStatic. The manipulation of the argument page leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and...

9CVSS8.6AI score0.00632EPSS
Exploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/26 9:0 a.m.4 views

CVE-2026-7029

A weakness has been identified in Tenda F456 1.0.0.5. The impacted element is the function fromaddressNat of the file /goform/addressNat. Executing a manipulation of the argument menufacturer/Go can lead to buffer overflow. The attack may be performed from remote. The exploit has been made...

9CVSS8.7AI score0.00632EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/26 9:0 a.m.4 views

CVE-2026-7029 Tenda F456 addressNat fromaddressNat buffer overflow

A weakness has been identified in Tenda F456 1.0.0.5. The impacted element is the function fromaddressNat of the file /goform/addressNat. Executing a manipulation of the argument menufacturer/Go can lead to buffer overflow. The attack may be performed from remote. The exploit has been made...

9CVSS8.6AI score0.00632EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/04/26 9:0 a.m.30 views

CVE-2026-7029 Tenda F456 addressNat fromaddressNat buffer overflow

A weakness has been identified in Tenda F456 1.0.0.5. The impacted element is the function fromaddressNat of the file /goform/addressNat. Executing a manipulation of the argument menufacturer/Go can lead to buffer overflow. The attack may be performed from remote. The exploit has been made...

9CVSS0.00632EPSS
Exploits1References5
CVE
CVE
added 2026/04/26 8:45 a.m.9 views

CVE-2026-7028

VULNERABILITY: CVE-2026-7028 affects CodeAstro Online Job Portal 1.0. An SQL injection is possible in the All Jobs Page via manipulation of the ID argument in /admin/jobs-admins/delete-jobs.php. Exploitation is remote and publicly released; impact is limited to low confidentiality/integrity/avail...

5.8CVSS5.2AI score0.00311EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/04/26 8:45 a.m.4 views

CVE-2026-7028 CodeAstro Online Job Portal All Jobs delete-jobs.php sql injection

A security flaw has been discovered in CodeAstro Online Job Portal 1.0. The affected element is an unknown function of the file /admin/jobs-admins/delete-jobs.php of the component All Jobs Page. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

5.8CVSS5.1AI score0.00311EPSS
Exploits0References5
EUVD
EUVD
added 2026/04/26 8:45 a.m.3 views

EUVD-2026-25703

A security flaw has been discovered in CodeAstro Online Job Portal 1.0. The affected element is an unknown function of the file /admin/jobs-admins/delete-jobs.php of the component All Jobs Page. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

5.8CVSS5AI score0.00311EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/04/26 8:45 a.m.32 views

CVE-2026-7028 CodeAstro Online Job Portal All Jobs delete-jobs.php sql injection

A security flaw has been discovered in CodeAstro Online Job Portal 1.0. The affected element is an unknown function of the file /admin/jobs-admins/delete-jobs.php of the component All Jobs Page. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

5.8CVSS0.00311EPSS
Exploits0References5
NVD
NVD
added 2026/04/26 8:16 a.m.6 views

CVE-2026-7025

A vulnerability was found in Typecho up to 1.3.0. This vulnerability affects the function Service::sendPingHandle of the file var/Widget/Service.php of the component Ping Back Service Endpoint. The manipulation of the argument X-Pingback/link results in server-side request forgery. The attack may...

7.5CVSS0.00278EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/04/26 8:15 a.m.4 views

CVE-2026-7027 D-Link DSL-2740R Wireless Setup Section cross site scripting

A vulnerability was identified in D-Link DSL-2740R EU01.15. Impacted is an unknown function of the component Wireless Setup Section. Such manipulation of the argument Wireless Network Name leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and...

4.8CVSS3.1AI score0.00433EPSS
Exploits0References4
CVE
CVE
added 2026/04/26 8:15 a.m.11 views

CVE-2026-7027

A vulnerability identified in D-Link DSL-2740R EU_01.15 affects the Wireless Setup Section. The issue arises from manipulating the Wireless Network Name, causing cross-site scripting (XSS). The attack can be executed remotely, and a public exploit is available. Affected component: Wireless Setup ...

4.8CVSS3.1AI score0.00433EPSS
Exploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/26 8:15 a.m.4 views

CVE-2026-7027

A vulnerability was identified in D-Link DSL-2740R EU01.15. Impacted is an unknown function of the component Wireless Setup Section. Such manipulation of the argument Wireless Network Name leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and...

4.8CVSS3AI score0.00433EPSS
Exploits0References5
NVD
NVD
added 2026/04/26 7:16 a.m.17 views

CVE-2026-7023

A vulnerability was detected in ByteDance coze-studio up to 0.5.1. Affected by this vulnerability is the function ExecuteSQL of the file backend/domain/memory/database/service/databaseimpl.go of the component databaseTool. Performing a manipulation results in sql injection. The attack can be...

8.8CVSS0.00365EPSS
Exploits1References4
NVD
NVD
added 2026/04/26 7:16 a.m.7 views

CVE-2026-7024

A flaw has been found in rawchen sims up to 004f783b1db5ecdfad81c8fdc3b34171211112de. Affected by this issue is some unknown functionality of the file sims-master/src/web/servlet/file/DeleteFileServlet.java of the component deleteFileServlet Endpoint. Executing a manipulation of the argument...

5.5CVSS0.00372EPSS
Exploits0References4
EUVD
EUVD
added 2026/04/26 7:0 a.m.8 views

EUVD-2026-25700

A vulnerability was found in Typecho up to 1.3.0. This vulnerability affects the function Service::sendPingHandle of the file var/Widget/Service.php of the component Ping Back Service Endpoint. The manipulation of the argument X-Pingback/link results in server-side request forgery. The attack may...

7.5CVSS7AI score0.00278EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/04/26 6:45 a.m.4 views

CVE-2026-7024

A flaw has been found in rawchen sims up to 004f783b1db5ecdfad81c8fdc3b34171211112de. Affected by this issue is some unknown functionality of the file sims-master/src/web/servlet/file/DeleteFileServlet.java of the component deleteFileServlet Endpoint. Executing a manipulation of the argument...

5.5CVSS5.3AI score0.00372EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/04/26 6:45 a.m.4 views

CVE-2026-7024 rawchen sims deleteFileServlet Endpoint DeleteFileServlet.java path traversal

A flaw has been found in rawchen sims up to 004f783b1db5ecdfad81c8fdc3b34171211112de. Affected by this issue is some unknown functionality of the file sims-master/src/web/servlet/file/DeleteFileServlet.java of the component deleteFileServlet Endpoint. Executing a manipulation of the argument...

5.5CVSS5.3AI score0.00372EPSS
Exploits0References4
Rows per page
Query Builder