Lucene search
+L

12549 matches found

Positive Technologies
Positive Technologies
added 2025/09/15 12:00 a.m.9 views

PT-2025-37478

Name of the Vulnerable Software and Affected Versions: Campcodes Computer Sales and Inventory System version 1.0 Description: A weakness has been identified in Campcodes Computer Sales and Inventory System 1.0. Manipulation of the Username argument in the file /pages/us transac.php?action=add can...

9.8CVSS7.4AI score0.00478EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
added 2025/09/15 12:00 a.m.10 views

PT-2025-37477

Name of the Vulnerable Software and Affected Versions: Campcodes Online Job Finder System version 1.0 Description: A security flaw exists in Campcodes Online Job Finder System that allows for SQL injection. The issue affects the processing of the /advancesearch.php file. Manipulation of the...

9.8CVSS7.3AI score0.00495EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2025/09/15 12:00 a.m.10 views

PT-2025-37773

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Student File Management System version 1.0 Description: A SQL injection issue exists in SourceCodester Online Student File Management System version 1.0. The issue is located in the /admin/index.php file, within an unkno...

7.5CVSS7.5AI score0.00525EPSS
SaveExploits1References8
Redos
Redos
added 2025/09/12 12:00 a.m.9 views

ROS-20250912-13

A vulnerability in OpenBao's secret management and encryption system is related to an unexpected normalization in the in the TOTP base library. Exploitation of the vulnerability could allow an attacker to gain access to sensitive data A vulnerability in the OpenBao secret management and encryptio...

9.1CVSS7.2AI score0.00371EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/09/11 2:09 a.m.16 views

CVE-2025-10118

A security vulnerability has been detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out...

9.8CVSS7.2AI score0.00525EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/09/11 1:22 a.m.22 views

CVE-2025-10115

A vulnerability was determined in SiempreCMS up to 1.3.6. This affects an unknown part of the file usersearchajax.php. This manipulation of the argument name/userName causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

7.5CVSS7.4AI score0.00328EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/09/10 7:18 p.m.7 views

CVE-2025-10100

A vulnerability was detected in SourceCodester Simple Forum Discussion System 1.0. This impacts an unknown function of the file /adminclass.php?action=login. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit is n...

9.8CVSS7.4AI score0.00421EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/09/10 7:18 p.m.11 views

CVE-2025-10102

A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown function of the file /index.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has been release...

9.8CVSS7.3AI score0.00478EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/09/10 12:00 a.m.8 views

SolaX Cloud 安全漏洞

SolaX Cloud is a photovoltaic monitoring and management platform from SolaX China. A security vulnerability exists in SolaX Cloud, which stems from the username suggestion feature leaking sensitive information...

8.7CVSS6.7AI score0.00334EPSS
SaveExploits0References2
CNVD
CNVD
added 2025/09/10 12:00 a.m.8 views

Online Event Judging System index.php File SQL Injection Vulnerability

Online Event Judging System is an online event judging system. The Online Event Judging System suffers from a SQL injection vulnerability that originates from the /index.php file not securely filtering the Username parameter. An attacker can exploit this vulnerability by constructing a malicious...

9.8CVSS8.4AI score0.00478EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2022-32741

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Attacker is able to determine if the provided username exists and it's valid using Request New Password feature, based on the response time. CVE-2022-32741 Note...

5.3CVSS5.7AI score0.00816EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2022-47373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Reflected Cross Site Scripting in Search Functionality of Module Library in Pandora FMS Console v766 and lower. This vulnerability arises on the forget password...

6.4CVSS6.1AI score0.00338EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/09 2:15 a.m.9 views

CVE-2025-10118

A security vulnerability has been detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out...

9.8CVSS5.7AI score0.00525EPSS
SaveExploits1References5
NVD
NVD
added 2025/09/09 2:15 a.m.9 views

CVE-2025-10118

A security vulnerability has been detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out...

9.8CVSS0.00525EPSS
SaveExploits1References5
NVD
NVD
added 2025/09/09 1:15 a.m.16 views

CVE-2025-10115

A vulnerability was determined in SiempreCMS up to 1.3.6. This affects an unknown part of the file usersearchajax.php. This manipulation of the argument name/userName causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

7.5CVSS0.00328EPSS
SaveExploits0References4
CVE
CVE
added 2025/09/09 12:32 a.m.32 views

CVE-2025-10115

CVE-2025-10115 affects SiempreCMS up to version 1.3.6. The vulnerability resides in the file user_search_ajax.php where manipulation of the name/userName parameter triggers a SQL injection. The issue can be exploited remotely and the exploit has been publicly disclosed. Remediation per connected ...

7.5CVSS7.3AI score0.00328EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/09/09 12:32 a.m.21 views

CVE-2025-10115 SiempreCMS user_search_ajax.php sql injection

A vulnerability was determined in SiempreCMS up to 1.3.6. This affects an unknown part of the file usersearchajax.php. This manipulation of the argument name/userName causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

7.5CVSS0.00328EPSS
SaveExploits0References4
Packet Storm
Packet Storm
added 2025/09/09 12:00 a.m.254 views

📄 Rupee Invoice 1.0 SQL Injection

Rupee Invoice version 1.0 suffers from a remote SQL injection vulnerability. Titles: RUPEE-INVOICE-1.0-Multiple-SQLi Author: nu11secur1ty Date: 09/09/2025 Vendor: https://www.mayurik.com/ Software:...

8.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/09/09 12:00 a.m.21 views

PT-2025-36536

Name of the Vulnerable Software and Affected Versions: SiempreCMS versions up to 1.3.6 Description: A SQL injection issue exists in the user search ajax.php file of SiempreCMS. Manipulation of the name/userName argument can trigger the issue. The attack can be initiated remotely, and the exploit...

7.5CVSS7.3AI score0.00328EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2025/09/09 12:00 a.m.8 views

itsourcecode E-Logbook with Health Monitoring 安全漏洞

itsourcecode E-Logbook with Health Monitoring is a itsourcecode open source electronic logbook with health monitoring. A security vulnerability exists in version 1.0 of itsourcecode E-Logbook with Health Monitoring, which is caused by a SQL injection due to incorrect manipulation of the parameter...

9.8CVSS7.7AI score0.00525EPSS
SaveExploits1References5
Rows per page
Query Builder