Lucene search
+L

14837 matches found

BDU FSTEC
BDU FSTEC
•added 2026/05/25 12:00 a.m.•14 views

The vulnerability of the formL2TPSetup function in the goform/formL2TPSetup file of the POST Request Handler component of the microprogramming system for wireless signal amplifiers from Edimax BR-6675nD allows a hacker to induce a service failure.

The vulnerability of the formL2TPSetup function in the goform/formL2TPSetup file of the POST Request Handler component of the microprogramming system for wireless signal amplifiers from Edimax BR-6675nD is related to the issue where the operation output goes beyond the buffer in memory when...

9CVSS8.1AI score0.00805EPSS
SaveExploits0References3Affected Software1
GithubExploit
GithubExploit
•added 2026/05/24 6:32 p.m.•198 views

Exploit for SQL Injection in Cmsmadesimple Cms_Made_Simple

CMS Made Simple CVE-2019-9053 Exploit Python 3 Python 3 com...

8.1CVSS7.3AI score0.68581EPSS
SaveExploits38
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/05/24 3:52 p.m.•22 views

Malicious code in power-platform-playwright-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57967d58233d74f2fc4f9b0dee7c050370eb388050df8d63f29e719f83468d73 On npm install, the package's postinstall script postinstall.js collects host identifiers and CI context — whoami, os.hostname, os.platform, cwd, CI,...

5.8AI score
SaveExploits0References2
NVD
NVD
•added 2026/05/24 2:16 p.m.•59 views

CVE-2026-9383

A vulnerability has been found in itsourcecode Electronic Judging System 1.0. This affects an unknown part of the file /intrams/admin/login.php. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the...

7.5CVSS0.00411EPSS
SaveExploits0References5
NVD
NVD
•added 2026/05/24 1:16 p.m.•31 views

CVE-2026-9382

A flaw has been found in Edimax BR-6675nD 1.12. Affected by this issue is the function formPPTPSetup of the file /goform/formPPTPSetup of the component POST Request Handler. Executing a manipulation of the argument pptpUserName can lead to buffer overflow. The attack may be launched remotely. The...

9CVSS0.00805EPSS
SaveExploits0References4
NVD
NVD
•added 2026/05/24 1:16 p.m.•32 views

CVE-2026-9380

A security vulnerability has been detected in Edimax BR-6675nD 1.12. Affected is the function formL2TPSetup of the file /goform/formL2TPSetup of the component POST Request Handler. Such manipulation of the argument L2TPUserName leads to buffer overflow. The attack can be launched remotely. The...

9CVSS0.00805EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/05/24 1:15 p.m.•46 views

CVE-2026-9383 itsourcecode Electronic Judging System login.php sql injection

A vulnerability has been found in itsourcecode Electronic Judging System 1.0. This affects an unknown part of the file /intrams/admin/login.php. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the...

7.5CVSS0.00411EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/05/24 1:15 p.m.•19 views

CVE-2026-9383

A vulnerability has been found in itsourcecode Electronic Judging System 1.0. This affects an unknown part of the file /intrams/admin/login.php. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References5Affected Software1
attackerkb
attackerkb
•added 2026/05/24 1:00 p.m.•17 views

CVE-2026-9382

A flaw has been found in Edimax BR-6675nD 1.12. Affected by this issue is the function formPPTPSetup of the file /goform/formPPTPSetup of the component POST Request Handler. Executing a manipulation of the argument pptpUserName can lead to buffer overflow. The attack may be launched remotely. The...

9CVSS7.8AI score0.00805EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/05/24 12:15 p.m.•13 views

CVE-2026-9380 Edimax BR-6675nD POST Request formL2TPSetup buffer overflow

A security vulnerability has been detected in Edimax BR-6675nD 1.12. Affected is the function formL2TPSetup of the file /goform/formL2TPSetup of the component POST Request Handler. Such manipulation of the argument L2TPUserName leads to buffer overflow. The attack can be launched remotely. The...

9CVSS8AI score0.00805EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/05/24 12:15 p.m.•39 views

CVE-2026-9380 Edimax BR-6675nD POST Request formL2TPSetup buffer overflow

A security vulnerability has been detected in Edimax BR-6675nD 1.12. Affected is the function formL2TPSetup of the file /goform/formL2TPSetup of the component POST Request Handler. Such manipulation of the argument L2TPUserName leads to buffer overflow. The attack can be launched remotely. The...

9CVSS0.00805EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/05/24 12:00 a.m.•18 views

itsourcecode Electronic Judging System SQL注入漏洞

itsourcecode Electronic Judging System is an open-source electronic referee system developed by itsourcecode. Version 1.0 of the itsourcecode Electronic Judging System has a SQL injection vulnerability. This vulnerability stems from improper handling of the Username parameter in the file...

7.5CVSS7.2AI score0.00411EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/24 12:00 a.m.•2 views

CVE-2026-9383: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode Electronic Judging System 1.0. This affects an unknown part of the file /intrams/admin/login.php. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/24 12:00 a.m.•47 views

PT-2026-42944

A vulnerability has been found in itsourcecode Electronic Judging System 1.0. This affects an unknown part of the file /intrams/admin/login.php. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References5
GithubExploit
GithubExploit
•added 2026/05/23 11:49 p.m.•136 views

Stored-XSS-in-Inventory-System-using-PHP-and-MySQL

Stored XSS in Inventory System using PHP and MySQL Vulnera...

6.2AI score
SaveExploits0
NVD
NVD
•added 2026/05/23 7:16 p.m.•30 views

CVE-2018-25350

userSpice 4.3.24 contains a username enumeration vulnerability that allows unauthenticated attackers to discover valid usernames by sending POST requests to the existingUsernameCheck.php endpoint. Attackers can submit usernames and analyze response text for the 'taken' string to identify existing...

9.8CVSS0.00433EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/05/23 6:30 p.m.•36 views

CVE-2018-25350 userSpice 4.3.24 Username Enumeration via existingUsernameCheck.php

userSpice 4.3.24 contains a username enumeration vulnerability that allows unauthenticated attackers to discover valid usernames by sending POST requests to the existingUsernameCheck.php endpoint. Attackers can submit usernames and analyze response text for the 'taken' string to identify existing...

9.8CVSS0.00433EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/23 6:30 p.m.•22 views

EUVD-2018-21873

Joomla! Component EkRishta 2.10 contains an error-based SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the username parameter. Attackers can submit POST requests to the login endpoint with SQL injection payloads ...

8.8CVSS6.2AI score0.00358EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/05/23 6:30 p.m.•15 views

CVE-2018-25350 userSpice 4.3.24 Username Enumeration via existingUsernameCheck.php

userSpice 4.3.24 contains a username enumeration vulnerability that allows unauthenticated attackers to discover valid usernames by sending POST requests to the existingUsernameCheck.php endpoint. Attackers can submit usernames and analyze response text for the 'taken' string to identify existing...

9.8CVSS5.8AI score0.00433EPSS
SaveExploits0References2
CVE
CVE
•added 2026/05/23 6:30 p.m.•45 views

CVE-2018-25350

CVE-2018-25350 affects userSpice 4.3.24. An unauthenticated attacker can enumerate valid usernames by POSTing to existingUsernameCheck.php and inspecting the response for the string 'taken'. The vulnerability enables username discovery with network access and low attack complexity, impacting conf...

9.8CVSS5.8AI score0.00433EPSS
SaveExploits0References2
Rows per page
Query Builder