Lucene search
+L

2407 matches found

CNNVD
CNNVD
added 2025/08/07 12:0 a.m.5 views

Student Attendance Management System 安全漏洞

Student Attendance Management System is a student attendance management system developed by rickxy individual developer. A security vulnerability exists in Student Attendance Management System v1, which is caused by a SQL injection due to incorrect manipulation of the username parameter in the fi...

8.8CVSS7.7AI score0.00302EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2025/08/05 7:31 p.m.139 views

Exploit for CVE-2025-8550

CVE-2025-8550 – atjiu pybbs XSS Exploit Description This...

4.8CVSS4.4AI score0.00625EPSS
SaveExploits3
CNNVD
CNNVD
added 2025/08/05 12:0 a.m.5 views

pybbs 代码注入漏洞

pybbs is a community platform for Java development by iuiu individual developers. A code injection vulnerability exists in pybbs 6.0.0 and earlier versions, which stems from improper handling of the parameter Username in the file /admin/comment/list, which could lead to a cross-site scripting...

5.4CVSS4.8AI score0.00251EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/08/05 12:0 a.m.4 views

pybbs 代码注入漏洞

pybbs is a community platform for Java development by iuiu individual developers. A code injection vulnerability exists in pybbs 6.0.0 and earlier versions, which stems from improper handling of the parameter Username in the file /admin/topic/list, which could lead to a cross-site scripting attac...

5.4CVSS4AI score0.00625EPSS
SaveExploits3References8
OSV
OSV
added 2025/08/03 2:15 a.m.5 views

CVE-2025-8495

A vulnerability, which was classified as critical, was found in code-projects Intern Membership Management System 1.0. Affected is an unknown function of the file /admin/editadminquery.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack...

9.8CVSS5.7AI score0.00473EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/08/03 12:0 a.m.14 views

Code-Projects Intern Membership Management System 注入漏洞

Code-Projects Intern Membership Management System is a Code-Projects open source intern membership management system. Code-Projects Intern Membership Management System version 1.0 suffers from an injection vulnerability, which originates from a SQL injection due to incorrect operation of the...

9.8CVSS7.8AI score0.00473EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2025/08/02 8:22 p.m.7 views

CVE-2013-10036

A stack-based buffer overflow vulnerability exists in Beetel Connection Manager version PCWBTLINDV1.0.0B04 when parsing the UserName parameter in the NetConfig.ini configuration file. A crafted .ini file containing an overly long UserName value can overwrite the Structured Exception Handler SEH,...

8.4CVSS7.6AI score0.00433EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/02 11:15 a.m.5 views

CVE-2025-8467

A vulnerability was found in code-projects Wazifa System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /controllers/regcontrol.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely...

9.8CVSS5.8AI score0.00421EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/08/02 12:0 a.m.7 views

Code-Projects Wazifa System 注入漏洞

Code-Projects Wazifa System is a Code-Projects open source content management system. An injection vulnerability exists in Code-Projects Wazifa System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter Username in the file /controllers/regcontrol.php...

9.8CVSS7.7AI score0.00421EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/08/01 12:0 a.m.6 views

Code-Projects Online Medicine Guide 注入漏洞

Online Medicine Guide is an online medical guide. Online Medicine Guide suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter uname in the file /login.php. The vulnerability can be exploited by an attacker to execute...

9.8CVSS8.2AI score0.00498EPSS
SaveExploits1References6
NVD
NVD
added 2025/07/31 3:15 p.m.15 views

CVE-2013-10036

A stack-based buffer overflow vulnerability exists in Beetel Connection Manager version PCWBTLINDV1.0.0B04 when parsing the UserName parameter in the NetConfig.ini configuration file. A crafted .ini file containing an overly long UserName value can overwrite the Structured Exception Handler SEH,...

8.4CVSS0.00433EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/07/31 2:53 p.m.2 views

CVE-2013-10036 Beetel Connection Manager NetConfig.ini Stack-Based Buffer Overflow

A stack-based buffer overflow vulnerability exists in Beetel Connection Manager version PCWBTLINDV1.0.0B04 when parsing the UserName parameter in the NetConfig.ini configuration file. A crafted .ini file containing an overly long UserName value can overwrite the Structured Exception Handler SEH,...

8.4CVSS7.6AI score0.00433EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/07/31 2:53 p.m.12 views

CVE-2013-10036 Beetel Connection Manager NetConfig.ini Stack-Based Buffer Overflow

A stack-based buffer overflow vulnerability exists in Beetel Connection Manager version PCWBTLINDV1.0.0B04 when parsing the UserName parameter in the NetConfig.ini configuration file. A crafted .ini file containing an overly long UserName value can overwrite the Structured Exception Handler SEH,...

8.4CVSS0.00433EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/07/31 12:0 a.m.13 views

PT-2025-31534 · Undefined · Undefined

A stack-based buffer overflow vulnerability exists in Beetel Connection Manager version PCW BTLINDV1.0.0B04 when parsing the UserName parameter in the NetConfig.ini configuration file. A crafted .ini file containing an overly long UserName value can overwrite the Structured Exception Handler SEH,...

8.4CVSS7.7AI score0.00433EPSS
SaveExploits0References5
OSV
OSV
added 2025/07/30 9:15 p.m.8 views

CVE-2025-8332

A vulnerability was found in code-projects Online Farm System 1.0. It has been classified as critical. Affected is an unknown function of the file /register.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS5.8AI score0.00399EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/07/30 12:0 a.m.7 views

code-projects Online Farm System 注入漏洞

Online Farm System is an online farm system. Online Farm System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Username in the file /register.php. An attacker can exploit this vulnerability to execute...

9.8CVSS8.2AI score0.00399EPSS
SaveExploits1References5
CNVD
CNVD
added 2025/07/30 12:0 a.m.4 views

Pre-School Enrollment System SQL Injection Vulnerability

Pre-School Enrollment System is a web-based preschool enrollment system. The Pre-School Enrollment System suffers from a SQL injection vulnerability that originates from the /admin/password-recovery.php file not adequately validating the username parameter. An attacker can exploit this...

6.5CVSS8AI score0.00204EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/07/29 12:0 a.m.6 views

PHPGurukul Pre-School Enrollment System 安全漏洞

Pre-School Enrollment System is a web-based preschool enrollment system. The Pre-School Enrollment System suffers from a SQL injection vulnerability that originates from the /admin/password-recovery.php file not adequately validating the username parameter. An attacker can exploit this...

6.5CVSS7.9AI score0.00204EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2025/07/29 12:0 a.m.28 views

The vulnerability of the fromPptpUserAdd function (/goform/PPTPDClient) in the Tenda FH1201 router software allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the fromPptpUserAdd /goform/PPTPDClient function in the Tenda FH1201 router microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code ...

9CVSS8.4AI score0.00981EPSS
SaveExploits1References7
CNVD
CNVD
added 2025/07/25 12:0 a.m.7 views

Church Donation System /login_admin.php File SQL Injection Vulnerability

The Church Donation System is a system of church giving. The Church Donation System suffers from a SQL injection vulnerability that stems from the lack of validation of an externally entered SQL statement in the parameter Username in the file /members/loginadmin.php. An attacker can exploit this...

9.8CVSS8.3AI score0.00394EPSS
SaveExploits1References1
Rows per page
Query Builder