540 matches found
AlertResponder
AlertResponder NOTE: This repository is obsoleted. New repository is here: https://github.com/m-mizutani/deepalert AlertResponder is a serverless framework for automatic response of security alert. Overview AlertResponder receives an alert that is event of interest from security view point and...
ncccodenavi
ncccodenavi NCC Code Navi the Text Viewer and Searcher for Code Reviewers Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com http://www.github.com/nccgroup/ncccodenavi Released under AGPL see LICENSE for more...
CVE-2026-103440
CVE-2026-103440: PageTriage suppressed reviewer disclosure Reporter: Marco Paciaroni BomboBombone. The public pagetriagelist API returned a reviewer's username and profile links even when the account was suppressed. An anonymous caller could retrieve the data if a PageTriage review record existed...
CVE-2026-55493
HotCRP is conference review software. Starting with 2.101, the cmt: search term checks whether a comment is visible to the searching user but fails to check whether the commenter's identity should be visible. A cmt:USER search can therefore match a paper with a visible comment authored by USER ev...
CVE-2026-55493 HotCRP: comment-author search exposes anonymous commenter identities
HotCRP is conference review software. Starting with 2.101, the cmt: search term checks whether a comment is visible to the searching user but fails to check whether the commenter's identity should be visible. A cmt:USER search can therefore match a paper with a visible comment authored by USER ev...
CVE-2026-55493 HotCRP: comment-author search exposes anonymous commenter identities
HotCRP is conference review software. Starting with 2.101, the cmt: search term checks whether a comment is visible to the searching user but fails to check whether the commenter's identity should be visible. A cmt:USER search can therefore match a paper with a visible comment authored by USER ev...
EUVD-2026-114367
HotCRP is conference review software. Starting with 2.101, the cmt: search term checks whether a comment is visible to the searching user but fails to check whether the commenter's identity should be visible. A cmt:USER search can therefore match a paper with a visible comment authored by USER ev...
CVE-2026-55493
The conference review software HotCRP is vulnerable to an identity exposure issue in its cmt: search term functionality starting with version 2.101 . The root cause is a failure to verify if a commenter's identity should be visible during a search; specifically, a cmt:USER search can match papers...
CVE-2026-55493: kohler hotcrp: HotCRP is conference review software
HotCRP is conference review software. Starting with 2.101, the cmt: search term checks whether a comment is visible to the searching user but fails to check whether the commenter's identity should be visible. A cmt:USER search can therefore match a paper with a visible comment authored by USER ev...
R_EXPLOIT
R-Exploit — Authorized Web Security Audit + Local Lab Open-...
CVE-2026-109620
A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the function PDO::prepare of the file login/index.php. Such manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The explo...
CVE-2026-109620
The SourceCodester Online Reviewer System 1.0 is vulnerable to a SQL injection flaw due to improper handling of arguments in the PDO::prepare function within the login/index.php file. An attacker can remotely manipulate the username or password arguments to execute arbitrary SQL commands. Public ...
CVE-2026-109620 SourceCodester Online Reviewer System index.php prepare sql injection
A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the function PDO::prepare of the file login/index.php. Such manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The explo...
EUVD-2026-98920
A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the function PDO::prepare of the file login/index.php. Such manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The explo...
CVE-2026-109620 SourceCodester Online Reviewer System index.php prepare sql injection
A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the function PDO::prepare of the file login/index.php. Such manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The explo...
CVE-2026-108956
A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btnfunctions.php of the component User Update Handler. Such manipulation leads to sql injection. The attack may be launch...
CVE-2026-108948
A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /reviewer/system/system/admins/manage/users/btnfunctions.php of the component User Profile Update Handler. The manipulation of the argument usertypeid leads to...
CVE-2026-108956
A SQL injection vulnerability exists in the code-projects Online Reviewer System 1.0 within the User Update Handler component. The flaw is located in an unknown function of the file /reviewer/system/system/admins/manage/users/btn_functions.php. This vulnerability can be exploited remotely to mani...
EUVD-2026-98235
A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btnfunctions.php of the component User Update Handler. Such manipulation leads to sql injection. The attack may be launch...
CVE-2026-108956 code-projects Online Reviewer System User Update btn_functions.php sql injection
A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btnfunctions.php of the component User Update Handler. Such manipulation leads to sql injection. The attack may be launch...