Lucene search
+L

20168 matches found

CVE
CVE
•added 2026/01/05 7:32 a.m.•46 views

CVE-2026-0580

CVE-2026-0580 affects the SourceCodester API Key Manager App 1.0. The vulnerability is in the Import Key Handler component, where manipulating an unknown functionality leads to Cross-Site Scripting (XSS). The issue is exploitable remotely; attack vectors are not fully detailed in the provided doc...

6.1CVSS3.5AI score0.00226EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
•added 2026/01/05 7:32 a.m.•23 views

EUVD-2026-0904

A vulnerability was found in SourceCodester API Key Manager App 1.0. Affected by this vulnerability is an unknown functionality of the component Import Key Handler. Performing a manipulation results in cross site scripting. The attack can be initiated remotely...

5.1CVSS3.5AI score0.00226EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/01/05 7:32 a.m.•16 views

CVE-2026-0580 SourceCodester API Key Manager App Import Key cross site scripting

A vulnerability was found in SourceCodester API Key Manager App 1.0. Affected by this vulnerability is an unknown functionality of the component Import Key Handler. Performing a manipulation results in cross site scripting. The attack can be initiated remotely...

5.1CVSS3.5AI score0.00226EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/01/05 12:00 a.m.•20 views

SourceCodester API Key Manager App: Code Injection Vulnerability

SourceCodester API Key Manager App is a SourceCodester open source api key manager application. A code injection vulnerability exists in SourceCodester API Key Manager App version 1.0, which stems from an incorrect operation of the component Import Key Handler and could lead to a cross-site...

6.1CVSS4.9AI score0.00226EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/05 12:00 a.m.•13 views

CVE-2026-0580: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester API Key Manager App 1.0. Affected by this vulnerability is an unknown functionality of the component Import Key Handler. Performing a manipulation results in cross site scripting. The attack can be initiated remotely...

6.1CVSS3.5AI score0.00226EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/05 12:00 a.m.•29 views

PT-2026-1224

Name of the Vulnerable Software and Affected Versions SourceCodester API Key Manager App version 1.0 Description A flaw exists within the Import Key Handler component that allows for cross site scripting. This issue can be triggered remotely through manipulation of an unknown functionality...

5.1CVSS3.8AI score0.00226EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2025/12/18 6:32 p.m.•55 views

CVE-2025-14885 SourceCodester Client Database Management System Leads Generation user_leads.php unrestricted upload

A flaw has been found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /userleads.php of the component Leads Generation Module. Executing manipulation can lead to unrestricted upload. The attack can be launched remotely. The exploit has been...

6.5CVSS0.00348EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/12/18 6:32 p.m.•13 views

CVE-2025-14885 SourceCodester Client Database Management System Leads Generation user_leads.php unrestricted upload

A flaw has been found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /userleads.php of the component Leads Generation Module. Executing manipulation can lead to unrestricted upload. The attack can be launched remotely. The exploit has been...

6.5CVSS6.1AI score0.00348EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/18 6:32 p.m.•53 views

CVE-2025-14885

The CVE-2025-14885 entry concerns SourceCodester Client Database Management System 1.0, specifically the Leads Generation Module. The vulnerability is in an unknown part of the file /user_leads.php, where manipulation can cause unrestricted file upload and can be exploited remotely. Exploit publi...

8.8CVSS6.1AI score0.00348EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•13 views

CVE-2025-14885: Unrestricted Upload of File with Dangerous Type

A flaw has been found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /userleads.php of the component Leads Generation Module. Executing manipulation can lead to unrestricted upload. The attack can be launched remotely. The exploit has been...

8.8CVSS6.1AI score0.00348EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/12/18 12:00 a.m.•21 views

PT-2025-52279

Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0 Description A flaw exists in SourceCodester Client Database Management System 1.0 within the Leads Generation Module. The issue affects the file /user leads.php and allows for...

8.8CVSS6.4AI score0.00348EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2025/12/18 12:00 a.m.•19 views

SourceCodester Client Database Management System security vulnerabilities

SourceCodester Client Database Management System is a SourceCodester open source client database management system. A security vulnerability exists in SourceCodester Client Database Management System version 1.0, which originates from an unrestricted upload of the file /userleads.php...

8.8CVSS6.5AI score0.00348EPSS
SaveExploits1References5
GithubExploit
GithubExploit
•added 2025/12/13 1:47 p.m.•255 views

Exploit for Cross-site Scripting in Oretnom23 Banking_System

Description 1. CVE-2025-14221 2. Discoverer: Fatma Trabelsi 3...

5.4CVSS5.6AI score0.00254EPSS
SaveExploits2
RedhatCVE
RedhatCVE
•added 2025/12/12 6:12 p.m.•18 views

CVE-2025-14530

A vulnerability has been found in SourceCodester Real Estate Property Listing App 1.0. The impacted element is an unknown function of the file /admin/property.php. Such manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has...

7.2CVSS5.1AI score0.00456EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/12/11 6:16 p.m.•17 views

CVE-2025-14530

A vulnerability has been found in SourceCodester Real Estate Property Listing App 1.0. The impacted element is an unknown function of the file /admin/property.php. Such manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has...

7.2CVSS5.1AI score0.00456EPSS
SaveExploits1References5
NVD
NVD
•added 2025/12/11 6:16 p.m.•35 views

CVE-2025-14530

A vulnerability has been found in SourceCodester Real Estate Property Listing App 1.0. The impacted element is an unknown function of the file /admin/property.php. Such manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has...

7.2CVSS0.00456EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/12/11 5:32 p.m.•76 views

CVE-2025-14530 SourceCodester Real Estate Property Listing App property.php unrestricted upload

A vulnerability has been found in SourceCodester Real Estate Property Listing App 1.0. The impacted element is an unknown function of the file /admin/property.php. Such manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has...

5.8CVSS0.00456EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/11 5:32 p.m.•51 views

CVE-2025-14530

CVE-2025-14530 affects SourceCodester Real Estate Property Listing App 1.0. The vulnerability is in /admin/property.php where the image parameter can be manipulated to achieve unrestricted file uploads. This allows remote exploitation; the exploit has been publicly disclosed. Root cause is descri...

7.2CVSS5.1AI score0.00456EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
•added 2025/12/11 5:32 p.m.•41 views

EUVD-2025-202754

A vulnerability has been found in SourceCodester Real Estate Property Listing App 1.0. The impacted element is an unknown function of the file /admin/property.php. Such manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has...

5.8CVSS5.1AI score0.00456EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2025/12/11 5:32 p.m.•9 views

CVE-2025-14530 SourceCodester Real Estate Property Listing App property.php unrestricted upload

A vulnerability has been found in SourceCodester Real Estate Property Listing App 1.0. The impacted element is an unknown function of the file /admin/property.php. Such manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has...

5.8CVSS5.1AI score0.00456EPSS
SaveExploits1References5
Rows per page
Query Builder