Lucene search
+L

24118 matches found

Cvelist
Cvelist
•added 2026/04/05 4:45 p.m.•49 views

CVE-2026-5584 Fosowl agenticSeek query Endpoint PyInterpreter.py PyInterpreter.execute code injection

A vulnerability has been found in Fosowl agenticSeek 0.1.0. Impacted is the function PyInterpreter.execute of the file sources/tools/PyInterpreter.py of the component query Endpoint. Such manipulation leads to code injection. The attack can be launched remotely. The exploit has been disclosed to...

7.5CVSS0.00724EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/04/05 4:30 p.m.•51 views

CVE-2026-5583 PHPGurukul Online Shopping Portal Project Parameter my-profile.php sql injection

A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /my-profile.php of the component Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is possible to initiate the attack remotel...

6.5CVSS0.00316EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/04/05 3:31 p.m.•15 views

EUVD-2026-19097

A security vulnerability has been detected in Technostrobe HI-LED-WR120-G2 5.5.0.1R6.03.30. Affected is the function deletefile of the component FsBrowseClean. The manipulation of the argument dir/path leads to missing authorization. The attack may be initiated remotely. The exploit has been...

6.9CVSS5.5AI score0.00745EPSS
SaveExploits1References5
EUVD
EUVD
•added 2026/04/05 3:31 p.m.•17 views

EUVD-2026-19087

A vulnerability was found in Technostrobe HI-LED-WR120-G2 5.5.0.1R6.03.30. Impacted is an unknown function of the file /Technostrobe/ of the component Endpoint. The manipulation results in improper access controls. The attack may be performed from remote. The exploit has been made public and coul...

7.5CVSS5.4AI score0.00704EPSS
SaveExploits1References5
EUVD
EUVD
•added 2026/04/05 3:31 p.m.•12 views

EUVD-2026-19081

A flaw has been found in Tenda M3 1.0.0.10. This vulnerability affects the function setAdvPolicyData of the file /goform/setAdvPolicyData of the component Destination Handler. Executing a manipulation of the argument policyType can lead to buffer overflow. The attack can be executed remotely. The...

9CVSS7.8AI score0.01009EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2026/04/05 3:15 p.m.•44 views

CVE-2026-5576 SourceCodester/jkev Record Management System Add Employee save_emp.php unrestricted upload

A flaw has been found in SourceCodester/jkev Record Management System 1.0. Affected by this issue is some unknown functionality of the file saveemp.php of the component Add Employee Page. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has...

5.8CVSS0.00376EPSS
SaveExploits0References4
CVE
CVE
•added 2026/04/05 3:15 p.m.•26 views

CVE-2026-5576

SourceCodester/jkev Record Management System 1.0 contains a flaw in Add Employee page, specifically in save_emp.php that allows unrestricted file upload. The issue enables remote exploitation; exploit code is reported as available. The CVSS-derived data indicate network access, low to moderate im...

5.8CVSS5.5AI score0.00376EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/04/05 3:15 p.m.•15 views

CVE-2026-5576 SourceCodester/jkev Record Management System Add Employee save_emp.php unrestricted upload

A flaw has been found in SourceCodester/jkev Record Management System 1.0. Affected by this issue is some unknown functionality of the file saveemp.php of the component Add Employee Page. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has...

5.8CVSS5.5AI score0.00376EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/04/05 3:00 p.m.•8 views

CVE-2026-5575 SourceCodester/jkev Record Management System Login index.php sql injection

A vulnerability was detected in SourceCodester/jkev Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the file index.php of the component Login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The...

7.5CVSS6.8AI score0.00411EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/04/05 3:00 p.m.•15 views

EUVD-2026-19099

A vulnerability was detected in SourceCodester/jkev Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the file index.php of the component Login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The...

7.5CVSS6.8AI score0.00411EPSS
SaveExploits0References4
CVE
CVE
•added 2026/04/05 3:00 p.m.•31 views

CVE-2026-5575

SourceCodester/jkev Record Management System 1.0 is affected in the Login component, specifically the file index.php. The vulnerability arises from manipulation of the Username argument, leading to SQL injection. The attack could be launched remotely, and public exploits are available. The connec...

7.5CVSS6.8AI score0.00411EPSS
SaveExploits0References4
NVD
NVD
•added 2026/04/05 1:17 p.m.•16 views

CVE-2026-5566

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This affects the function strcpy of the file /goform/formNatStaticMap. Performing a manipulation of the argument NatBind results in buffer overflow. Remote exploitation of the attack is possible. The exploit is now public...

9CVSS0.00792EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/04/05 1:15 p.m.•43 views

CVE-2026-5569 Technostrobe HI-LED-WR120-G2 Endpoint access control

A vulnerability was found in Technostrobe HI-LED-WR120-G2 5.5.0.1R6.03.30. Impacted is an unknown function of the file /Technostrobe/ of the component Endpoint. The manipulation results in improper access controls. The attack may be performed from remote. The exploit has been made public and coul...

7.5CVSS0.00704EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2026/04/05 1:15 p.m.•13 views

CVE-2026-5569 Technostrobe HI-LED-WR120-G2 Endpoint access control

A vulnerability was found in Technostrobe HI-LED-WR120-G2 5.5.0.1R6.03.30. Impacted is an unknown function of the file /Technostrobe/ of the component Endpoint. The manipulation results in improper access controls. The attack may be performed from remote. The exploit has been made public and coul...

7.5CVSS6.6AI score0.00704EPSS
SaveExploits1References4
EUVD
EUVD
•added 2026/04/05 12:30 p.m.•12 views

EUVD-2026-19067

A vulnerability was found in PHPGurukul Online Shopping Portal Project 2.1. The impacted element is an unknown function of the file /payment-method.php of the component Parameter Handler. Performing a manipulation of the argument paymethod results in sql injection. It is possible to initiate the...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/04/05 12:30 p.m.•16 views

EUVD-2026-19058

A weakness has been identified in code-projects Concert Ticket Reservation System 1.0. This affects an unknown part of the file /ConcertTicketReservationSystem-master/login.php of the component Parameter Handler. Executing a manipulation of the argument Email can lead to sql injection. The attack...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References6
NVD
NVD
•added 2026/04/05 12:16 p.m.•13 views

CVE-2026-5564

A weakness has been identified in code-projects Simple Laundry System 1.0. Affected by this vulnerability is an unknown functionality of the file /searchguest.php of the component Parameter Handler. This manipulation of the argument searchServiceId causes sql injection. The attack may be initiate...

7.5CVSS0.00411EPSS
SaveExploits0References5
CVE
CVE
•added 2026/04/05 12:15 p.m.•39 views

CVE-2026-5566

The CVE-2026-5566 entry concerns UTT HiPER 1250GW up to version 3.2.7-210907-180535. A buffer overflow is caused by using strcpy in the file /goform/formNatStaticMap when the NatBind argument is manipulated. This leads to remote code execution with a high impact on confidentiality, integrity, and...

9CVSS7.4AI score0.00792EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/04/05 12:15 p.m.•6 views

CVE-2026-5566 UTT HiPER 1250GW formNatStaticMap strcpy buffer overflow

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This affects the function strcpy of the file /goform/formNatStaticMap. Performing a manipulation of the argument NatBind results in buffer overflow. Remote exploitation of the attack is possible. The exploit is now public...

9CVSS7.4AI score0.00792EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/04/05 12:15 p.m.•38 views

CVE-2026-5566 UTT HiPER 1250GW formNatStaticMap strcpy buffer overflow

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This affects the function strcpy of the file /goform/formNatStaticMap. Performing a manipulation of the argument NatBind results in buffer overflow. Remote exploitation of the attack is possible. The exploit is now public...

9CVSS0.00792EPSS
SaveExploits0References4
Rows per page
Query Builder