284291 matches found
CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records
Cybersecurity researchers have disclosed details of a two-pronged artificial intelligence AI-augmented initial access campaign targeting WordPress sites, e-commerce platforms, and critical infrastructure entities in Ukraine. The activity, which brings together commodity offensive tools like Cobal...
CVE-2026-108807
A vulnerability was found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects the function mysqlquery of the file source/adminregister.php of the component Registration Handler. Performing a manipulation results in sql injection. The attack may be...
CVE-2023-49970
CVE-2023-49970 Customer Support System 1.0 - SQL Injection Vulnerability in the "subject" Parameter During "saveticket" Operation Description : A SQL Injection vulnerability exists in version 1 of the Customer Support System. A malicious attacker can issue SQL commands to the MySQL database when...
CVE-2026-109080
SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to read other customer organizations' data, including license plate recognition records, via a crafted license plate value. Data could not be modified. Flock identified the issue...
CVE-2026-108805
A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this vulnerability is the function mysqlquery of the file source/loginprocessing.php of the component Login Handler. This manipulation of the argument email/password causes sq...
CVE-2026-108806
A vulnerability has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this issue is the function mysqlquery of the file source/authprocessing.php of the component Forgot Password Handler. Such manipulation of the argument fpemail leads ...
EUVD-2026-97259
A vulnerability was found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects the function mysqlquery of the file source/adminregister.php of the component Registration Handler. Performing a manipulation results in sql injection. The attack may be...
CVE-2026-108807
A SQL injection vulnerability exists in the Registration Handler component of the krupalshah EmployeeRecruitmentSystem (up to commit 922ff6d208278282e7c8e36d70d9ae356adec9fe). The flaw originates from the use of the mysql_query function within the source/adminregister.php file, which allows for r...
CVE-2026-108807 krupalshah EmployeeRecruitmentSystem Registration adminregister.php mysql_query sql injection
A vulnerability was found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects the function mysqlquery of the file source/adminregister.php of the component Registration Handler. Performing a manipulation results in sql injection. The attack may be...
CVE-2026-108806
A SQL injection vulnerability exists in the krupalshah EmployeeRecruitmentSystem (up to commit 922ff6d208278282e7c8e36d70d9ae356adec9fe). The flaw is located in the Forgot Password Handler component within the source/authprocessing.php file, specifically affecting the mysql_query function. Manipu...
CVE-2026-108806 krupalshah EmployeeRecruitmentSystem Forgot Password authprocessing.php mysql_query sql injection
A vulnerability has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this issue is the function mysqlquery of the file source/authprocessing.php of the component Forgot Password Handler. Such manipulation of the argument fpemail leads ...
EUVD-2026-97245
A vulnerability has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this issue is the function mysqlquery of the file source/authprocessing.php of the component Forgot Password Handler. Such manipulation of the argument fpemail leads ...
CVE-2026-108805 krupalshah EmployeeRecruitmentSystem Login loginprocessing.php mysql_query sql injection
A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this vulnerability is the function mysqlquery of the file source/loginprocessing.php of the component Login Handler. This manipulation of the argument email/password causes sq...
EUVD-2026-97240
A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this vulnerability is the function mysqlquery of the file source/loginprocessing.php of the component Login Handler. This manipulation of the argument email/password causes sq...
CVE-2026-108805
The krupalshah EmployeeRecruitmentSystem is vulnerable to a remote SQL injection flaw in the Login Handler component. The vulnerability exists because the mysql_query function in the source/loginprocessing.php file fails to properly neutralize the email/password arguments. This flaw affects versi...
CVE-2026-109080
The Flock Night Shift hosted service is vulnerable to a SQL injection flaw within its bulk license plate search functionality. An authenticated user could exploit this by providing a crafted license plate value to access and read data belonging to other customer organizations, specifically licens...
EUVD-2026-97239
SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to read other customer organizations' data, including license plate recognition records, via a crafted license plate value. Data could not be modified. Flock identified the issue...
CVE-2026-109080 SQL injection in Night Shift bulk license plate search allows cross-organization data access
SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to read other customer organizations' data, including license plate recognition records, via a crafted license plate value. Data could not be modified. Flock identified the issue...
CVE-2026-108799
A vulnerability was determined in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Impacted is the function PublicController::sendFindPwdMail of the file Admin/Home/Controller/PublicController.class.php of the component Password Recovery Mail Endpoint. This manipulation of the argument...
EUVD-2026-97174
A vulnerability was determined in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Impacted is the function PublicController::sendFindPwdMail of the file Admin/Home/Controller/PublicController.class.php of the component Password Recovery Mail Endpoint. This manipulation of the argument...