Lucene search
+L

1985 matches found

Positive Technologies
Positive Technologies
added 2025/02/11 12:0 a.m.7 views

PT-2025-6153 · Unknown · 1000 Projects Bookstore Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Bookstore Management System version 1.0 Description: A critical issue has been found in the 1000 Projects Bookstore Management System. This issue affects an unknown part of the file process users del.php. The manipulation of the...

7.2CVSS8.5AI score0.00649EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2025/02/11 12:0 a.m.9 views

Mercury MIPC552W 安全漏洞

Mercury MIPC552W is a webcam from Mercury China. A security vulnerability exists in Mercury MIPC552W v1.0, which stems from a lack of length validation and a buffer overflow vulnerability that could cause the remote target device to crash or execute arbitrary commands...

5.1CVSS7.7AI score0.00243EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/02/06 12:0 a.m.6 views

SourceCodester Packers and Movers Management System 安全漏洞

SourceCodester Packers and Movers Management System is an open source packers and movers management system from Sourcecodester. A security vulnerability exists in version 1.0 of the SourceCodester Packers and Movers Management System, which stems from Users.php containing a cross-site request...

4.5CVSS6.6AI score0.00476EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2025/02/03 12:0 a.m.8 views

PHPGurukul Online Birth Certificate System 安全漏洞

Online Birth Certificate System is an online birth certificate system. Online Birth Certificate System suffers from a cross-site scripting vulnerability that originates from the lack of effective filtering and escaping of user-supplied data in /user/certificate-form.php, which can be exploited by...

5.4CVSS5.9AI score0.0027EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
added 2025/02/02 12:0 a.m.8 views

PT-2025-4115 · Unknown · Code-Projects Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Chat System version 1.0 Description: A critical issue affects some unknown processing of the file /user/add chatroom.php. The manipulation of the argument chatname/chatpass leads to SQL injection. The attack may be initiated...

7.5CVSS7.2AI score0.00578EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2025/02/01 12:0 a.m.5 views

Code-Projects Job Recruitment 代码注入漏洞

Code-Projects Job Recruitment is an open source job portal from Code-Projects. A code injection vulnerability exists in Code-Projects Job Recruitment version 1.0, which stems from a cross-site scripting attack due to manipulation of the parameter businessstreamname...

5.4CVSS4.7AI score0.00401EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/02/01 12:0 a.m.5 views

itsourcecode Tailoring Management System 注入漏洞

itsourcecode Tailoring Management System is a tailoring management system from itsourcecode open source. An injection vulnerability exists in version 1.0 of itsourcecode Tailoring Management System, which stems from a parameter id in the file deldoc.php that can lead to SQL injection...

9.8CVSS7AI score0.0053EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/02/01 12:0 a.m.5 views

itsourcecode Tailoring Management System 安全漏洞

itsourcecode Tailoring Management System is a tailoring management system from itsourcecode open source. A security vulnerability exists in version 1.0 of itsourcecode Tailoring Management System, which stems from a parameter staffid in the file staffview.php that can lead to SQL injection...

9.8CVSS6.9AI score0.00474EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/01/31 12:0 a.m.5 views

PT-2025-4962 · Unknown · Notifikácie.Sk

Name of the Vulnerable Software and Affected Versions: Notifikácie.sk versions n/a through 1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. Specifically, it is a Reflected XSS vulnerability. This means th...

7.1CVSS9.1AI score0.00303EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/01/30 12:0 a.m.15 views

PT-2025-4083 · Code Projects · Code-Projects Simple Plugins Car Rental Management

Name of the Vulnerable Software and Affected Versions: code-projects Simple Plugins Car Rental Management version 1.0 Description: A critical issue has been found in the file "/admin/approve.php", where the manipulation of the id argument leads to SQL injection. The attack can be launched remotel...

9.8CVSS7.2AI score0.00523EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2025/01/30 12:0 a.m.10 views

needyamin 跨站脚本漏洞

needyamin is an open source library card borrowing system by needyamin. A cross-site scripting vulnerability exists in needyamin version 1.0, which stems from a cross-site scripting attack due to incorrect manipulation of the firstname/lastname/email/borrow/useraddress parameters...

6.9CVSS4.5AI score0.00497EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/01/29 12:0 a.m.9 views

Library Card System 注入漏洞

Library Card System is a library management system developed by Md. Yamin Hossain, an individual developer in Bangladesh. An injection vulnerability exists in Library Card System version 1.0, which stems from an incorrect manipulation of the email/password parameter that can lead to sql injection...

9.8CVSS7.7AI score0.00607EPSS
SaveExploits1References4
Patchstack
Patchstack
added 2025/01/27 11:24 p.m.5 views

WordPress Dental Optimizer Patient Generator App plugin <= 1.0 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin Dental Optimizer Patient Generator App versions = 1.0...

7.1CVSS6.4AI score0.00319EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/27 12:0 a.m.6 views

PT-2025-4948 · Cubepm · Cubepm

Name of the Vulnerable Software and Affected Versions: CubePM versions n/a through 1.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected Cross-site Scripting XSS. This means that an attacker can inject malicious scripts in...

7.1CVSS9AI score0.00276EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/01/22 12:0 a.m.7 views

PT-2025-5087 · Unknown · Wm Options Import Export

Name of the Vulnerable Software and Affected Versions: WM Options Import Export versions 1.0.1 and earlier Description: The issue allows for the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. This can potentially expose confidential information...

7.5CVSS9.3AI score0.00595EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/01/20 12:0 a.m.10 views

itsourcecode Farm Management System 代码问题漏洞

itsourcecode Farm Management System is an open source farm management system from itsourcecode. A code issue vulnerability exists in version 1.0 of itsourcecode Farm Management System, which stems from the pigphoto parameter of the file /add-pig.php that can lead to unrestricted uploads...

7.2CVSS5.2AI score0.00689EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/01/19 12:0 a.m.7 views

PT-2025-3955 · Codezips · Codezips Gym Management System

Name of the Vulnerable Software and Affected Versions: Codezips Gym Management System version 1.0 Description: A critical issue affects the processing of the file /dashboard/admin/health status entry.php, where the manipulation of the usrid argument leads to SQL injection. The attack can be...

9.8CVSS7.2AI score0.00667EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2025/01/19 12:0 a.m.8 views

Codezips Gym Management System 注入漏洞

Codezips Gym Management System is an open source gym management system from Codezips. An injection vulnerability exists in Codezips Gym Management System version 1.0, which stems from the parameter usrid in the file /dashboard/admin/healthstatusentry.php that can lead to SQL injection...

9.8CVSS7.1AI score0.00667EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/01/17 12:0 a.m.4 views

Code-Projects Job Recruitment 代码注入漏洞

Code-Projects Job Recruitment is a Code-Projects open source job portal. A code injection vulnerability exists in Code-Projects Job Recruitment version 1.0, which stems from the parameter type of the file /parse/feedbacksystem.php that can lead to cross-site scripting attacks...

8.2CVSS4.8AI score0.00479EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/01/17 12:0 a.m.8 views

PT-2025-3934 · Code Projects · Admission Management System

Name of the Vulnerable Software and Affected Versions: code-projects Admission Management System version 1.0 Description: A critical issue was found in the Admission Management System. The problem affects an unknown functionality of the file /signupconfirm.php. The manipulation of the in eml...

9.8CVSS8.1AI score0.00695EPSS
SaveExploits1References9
Rows per page
Query Builder