Lucene search
+L

518 matches found

Kitploit
Kitploit
•added 2026/10/16 4:47 a.m.•17 views

AlertResponder

AlertResponder NOTE: This repository is obsoleted. New repository is here: https://github.com/m-mizutani/deepalert AlertResponder is a serverless framework for automatic response of security alert. Overview AlertResponder receives an alert that is event of interest from security view point and...

6.3AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/15 9:01 p.m.•17 views

ncccodenavi

ncccodenavi NCC Code Navi the Text Viewer and Searcher for Code Reviewers Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com http://www.github.com/nccgroup/ncccodenavi Released under AGPL see LICENSE for more...

6.1AI score
SaveExploits0References3
NVD
NVD
•added 2026/10/13 5:17 p.m.•5 views

CVE-2026-109620

A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the function PDO::prepare of the file login/index.php. Such manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The explo...

7.5CVSS0.00412EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/13 4:30 p.m.•8 views

CVE-2026-109620

The SourceCodester Online Reviewer System 1.0 is vulnerable to a SQL injection flaw due to improper handling of arguments in the PDO::prepare function within the login/index.php file. An attacker can remotely manipulate the username or password arguments to execute arbitrary SQL commands. Public ...

7.5CVSS7AI score0.00412EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/13 4:30 p.m.•29 views

CVE-2026-109620 SourceCodester Online Reviewer System index.php prepare sql injection

A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the function PDO::prepare of the file login/index.php. Such manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The explo...

7.5CVSS0.00412EPSS
SaveExploits0References6
NVD
NVD
•added 2026/10/13 2:16 a.m.•8 views

CVE-2026-108956

A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btnfunctions.php of the component User Update Handler. Such manipulation leads to sql injection. The attack may be launch...

7.5CVSS0.00263EPSS
SaveExploits0References6
NVD
NVD
•added 2026/10/13 2:16 a.m.•9 views

CVE-2026-108948

A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /reviewer/system/system/admins/manage/users/btnfunctions.php of the component User Profile Update Handler. The manipulation of the argument usertypeid leads to...

5.5CVSS0.0027EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/13 2:00 a.m.•11 views

CVE-2026-108956

A SQL injection vulnerability exists in the code-projects Online Reviewer System 1.0 within the User Update Handler component. The flaw is located in an unknown function of the file /reviewer/system/system/admins/manage/users/btn_functions.php. This vulnerability can be exploited remotely to mani...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/13 2:00 a.m.•9 views

EUVD-2026-98235

A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btnfunctions.php of the component User Update Handler. Such manipulation leads to sql injection. The attack may be launch...

7.5CVSS7.1AI score0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/13 2:00 a.m.•32 views

CVE-2026-108956 code-projects Online Reviewer System User Update btn_functions.php sql injection

A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btnfunctions.php of the component User Update Handler. Such manipulation leads to sql injection. The attack may be launch...

7.5CVSS0.00263EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/13 1:15 a.m.•10 views

EUVD-2026-98231

A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /reviewer/system/system/admins/manage/users/btnfunctions.php of the component User Profile Update Handler. The manipulation of the argument usertypeid leads to...

5.5CVSS5.4AI score0.0027EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/13 1:15 a.m.•14 views

CVE-2026-108948

The code-projects Online Reviewer System 1.0 is vulnerable to a flaw in the User Profile Update Handler component, specifically within the file /reviewer/system/system/admins/manage/users/btn_functions.php. An attacker can remotely initiate an attack by manipulating the usertype_id argument, whic...

5.5CVSS5.4AI score0.0027EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/13 1:15 a.m.•31 views

CVE-2026-108948 code-projects Online Reviewer System User Profile Update btn_functions.php dynamically-determined object attributes

A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /reviewer/system/system/admins/manage/users/btnfunctions.php of the component User Profile Update Handler. The manipulation of the argument usertypeid leads to...

5.5CVSS0.0027EPSS
SaveExploits0References6
Kitploit
Kitploit
•added 2026/10/10 4:51 a.m.•10 views

CVE-2026-103440

CVE-2026-103440: PageTriage suppressed reviewer disclosure Reporter: Marco Paciaroni BomboBombone. The public pagetriagelist API returned a reviewer's username and profile links even when the account was suppressed. An anonymous caller could retrieve the data if a PageTriage review record existed...

2.1CVSS6.2AI score0.00272EPSS
SaveExploits1References1
GithubExploit
GithubExploit
•added 2026/10/06 2:34 a.m.•29 views

PoCHarness

!licensehttps://img.shields.io/badge/license-Apache--2.0-gree...

6.2AI score
SaveExploits0
NVD
NVD
•added 2026/10/05 8:17 a.m.•11 views

CVE-2026-105247

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=course. Executing a manipulation of the argument Subject can lead to sql injection. The...

7.5CVSS0.00263EPSS
SaveExploits0References6
NVD
NVD
•added 2026/10/05 7:16 a.m.•14 views

CVE-2026-105246

A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=update. Performing a manipulation of the argument Subject results in sql injection. The attack can be...

7.5CVSS0.00269EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/05 7:00 a.m.•17 views

CVE-2026-105247

The SourceCodester Online Reviewer Management System 1.0 is vulnerable to a remote SQL injection vulnerability. The flaw exists in an unknown function within the file /reviewer_0/admins/assessments/Subject/btn_functions.php?action=course . An attacker can trigger the vulnerability by manipulating...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/05 7:00 a.m.•12 views

EUVD-2026-92273

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=course. Executing a manipulation of the argument Subject can lead to sql injection. The...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/05 7:00 a.m.•50 views

CVE-2026-105247 SourceCodester Online Reviewer Management System btn_functions.php course sql injection

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=course. Executing a manipulation of the argument Subject can lead to sql injection. The...

7.5CVSS0.00263EPSS
SaveExploits0References6
Rows per page
Query Builder