Lucene search
+L

12331 matches found

Positive Technologies
Positive Technologies
added 2026/05/03 12:0 a.m.39 views

PT-2026-36694

Name of the Vulnerable Software and Affected Versions Wavlink WL-WN570HA1 version R70HA1 V1410 221110 Description A command injection issue exists that allows remote attackers to execute arbitrary commands. The flaw is located in the set sys adm function within the '/cgi-bin/adm.cgi' endpoint,...

9.8CVSS6.8AI score0.04971EPSS
SaveExploits1References11
RedHat Linux
RedHat Linux
added 2026/05/02 10:26 p.m.9 views

gnutls: gnutls: Authentication Bypass via NUL Character in Username

A flaw was found in gnutls. Servers configured with RSA-PSK Rivest–Shamir–Adleman – Pre-Shared Key wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass...

9.8CVSS7AI score0.0105EPSS
SaveExploits0References5
NVD
NVD
added 2026/05/02 2:16 p.m.12 views

CVE-2026-7631

A vulnerability was found in code-projects Online Hospital Management System 1.0. The impacted element is an unknown function of the component Registration Handler. The manipulation of the argument Username results in improper authorization. The attack can be executed remotely. The exploit has be...

5.5CVSS0.00225EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/02 1:30 p.m.6 views

CVE-2026-7631

A vulnerability was found in code-projects Online Hospital Management System 1.0. The impacted element is an unknown function of the component Registration Handler. The manipulation of the argument Username results in improper authorization. The attack can be executed remotely. The exploit has be...

5.5CVSS5.7AI score0.00225EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/02 1:30 p.m.8 views

CVE-2026-7631 code-projects Online Hospital Management System Registration improper authorization

A vulnerability was found in code-projects Online Hospital Management System 1.0. The impacted element is an unknown function of the component Registration Handler. The manipulation of the argument Username results in improper authorization. The attack can be executed remotely. The exploit has be...

5.5CVSS5.7AI score0.00225EPSS
SaveExploits0References5
CVE
CVE
added 2026/05/02 1:30 p.m.24 views

CVE-2026-7631

The CVE affects code-projects Online Hospital Management System 1.0, specifically the Registration Handler’s unknown function. The vulnerability arises from manipulation of the Username parameter, resulting in improper authorization. It can be exploited remotely, with public exploit availability....

5.5CVSS5.7AI score0.00225EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/05/02 1:30 p.m.40 views

CVE-2026-7631 code-projects Online Hospital Management System Registration improper authorization

A vulnerability was found in code-projects Online Hospital Management System 1.0. The impacted element is an unknown function of the component Registration Handler. The manipulation of the argument Username results in improper authorization. The attack can be executed remotely. The exploit has be...

5.5CVSS0.00225EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/05/02 1:30 p.m.14 views

EUVD-2026-26793

A vulnerability was found in code-projects Online Hospital Management System 1.0. The impacted element is an unknown function of the component Registration Handler. The manipulation of the argument Username results in improper authorization. The attack can be executed remotely. The exploit has be...

5.5CVSS5.7AI score0.00225EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/05/02 12:0 a.m.22 views

PT-2026-36621

A vulnerability was found in code-projects Online Hospital Management System 1.0. The impacted element is an unknown function of the component Registration Handler. The manipulation of the argument Username results in improper authorization. The attack can be executed remotely. The exploit has be...

5.5CVSS5.7AI score0.00225EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/05/02 12:0 a.m.15 views

Code-Projects Online Hospital Management System 安全漏洞

Code-Projects Online Hospital Management System is an open-source online hospital management system developed by Code-Projects. Version 1.0 of the Code-Projects Online Hospital Management System contains a security vulnerability. This vulnerability stems from the handling of the parameter...

5.5CVSS6AI score0.00225EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/05/01 11:28 p.m.7 views

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the userauthpassword function in userauth.c. An attacker can cause memory corruption or potentially execute arbitrary code by sending specially crafted values for usernamelen or passwordlen remotely...

9.1CVSS6.2AI score0.00466EPSS
SaveExploits0References2
NVD
NVD
added 2026/05/01 10:16 p.m.11 views

CVE-2026-7598

A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file src/userauth.c. Such manipulation of the argument usernamelen/passwordlen leads to integer overflow. The attack may be launched remotely. The name of the patch is...

9.1CVSS0.00466EPSS
SaveExploits0References11
CVE
CVE
added 2026/05/01 9:30 p.m.199 views

CVE-2026-7598

CVE-2026-7598 affects libssh2 up to 1.11.1. The vulnerability resides in userauth_password in src/userauth.c, where manipulation of username_len/password_len can trigger an integer overflow in the SSH USERAUTH_REQUEST buffer. Exploitation is described as potentially remote. A patch is available (...

9.1CVSS7AI score0.00466EPSS
SaveExploits0References11Affected Software1
AlpineLinux
AlpineLinux
added 2026/05/01 9:30 p.m.20 views

CVE-2026-7598

A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file src/userauth.c. Such manipulation of the argument usernamelen/passwordlen leads to integer overflow. The attack may be launched remotely. The name of the patch is...

9.1CVSS6.9AI score0.00466EPSS
SaveExploits0References11
NVD
NVD
added 2026/05/01 6:16 a.m.16 views

CVE-2026-7555

A vulnerability was identified in itsourcecode Electronic Judging System 1.0. This affects an unknown part of the file /intrams/login.php. Such manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...

7.5CVSS0.00259EPSS
SaveExploits0References5
CVE
CVE
added 2026/05/01 5:45 a.m.43 views

CVE-2026-7555

The CVE-2026-7555 entry describes a SQL injection in itsourcecode Electronic Judging System 1.0, affecting the /intrams/login.php component where the Username parameter is manipulated. The vulnerability can be exploited remotely, and exploitation code is publicly available. The available data do ...

7.5CVSS7.4AI score0.00259EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/01 5:45 a.m.6 views

CVE-2026-7555

A vulnerability was identified in itsourcecode Electronic Judging System 1.0. This affects an unknown part of the file /intrams/login.php. Such manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...

7.5CVSS5.5AI score0.00259EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/01 12:0 a.m.22 views

PT-2026-36302

A vulnerability was identified in itsourcecode Electronic Judging System 1.0. This affects an unknown part of the file /intrams/login.php. Such manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...

7.5CVSS7AI score0.00259EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/05/01 12:0 a.m.12 views

libssh2 数字错误漏洞

libssh2 is The libssh2 project open source a client C library that implements the SSH2 protocol , it can execute remote commands , file transfers , as well as for remote programs to provide a secure transmission channel . libssh2 1.11.1 and earlier versions of the number error vulnerability , the...

7.5CVSS7.3AI score0.00466EPSS
SaveExploits0References1
OSV
OSV
added 2026/04/30 9:49 p.m.13 views

CLSA-2026-1777585781 openssh: Fix of CVE-2026-35386

CVE-2026-35386: fix client-side command execution via control characters in usernames by adding iscntrl rejection to validruser...

8.1CVSS5.9AI score0.00319EPSS
SaveExploits0References1
Rows per page
Query Builder