Lucene search
+L

11958 matches found

PyPA
PyPA
added 2025/07/23 4:15 p.m.15 views

PYSEC-2025-137

A cross-site scripting XSS vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post...

4.8CVSS5.9AI score0.00609EPSS
SaveExploits3References3Affected Software1
OSV
OSV
added 2025/07/23 4:15 p.m.16 views

PYSEC-2025-137

A cross-site scripting XSS vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post...

4.8CVSS5.8AI score0.00609EPSS
SaveExploits3References3
CNVD
CNVD
added 2025/07/23 12:00 a.m.14 views

D-Link DI-8100 Buffer Overflow Vulnerability

The D-Link DI-8100 is an enterprise-class router from D-Link. A buffer overflow vulnerability exists in the D-Link DI-8100 version 1.0, which originates from an insufficient checksum of parameter mx in the sprintf function in the /ddns.asp?opt=add file of component jhttpd. The vulnerability can b...

9CVSS8.2AI score0.01189EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2025/07/23 12:00 a.m.13 views

The vulnerability of the “Add Mycode” function in the MyBB forum creation software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the “Add Mycode” function in the MyBB forum creation software is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

8CVSS5.5AI score0.0035EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2025/07/23 12:00 a.m.11 views

Online Appointment Booking System adddoctorclinic.php File SQL Injection Vulnerability

Online Appointment Booking System is an online appointment booking system. Online Appointment Booking System has a SQL injection vulnerability that originates from improper handling of the parameter clinic in the file /admin/adddoctorclinic.php, which can be exploited by an attacker to access...

9.8CVSS8AI score0.00394EPSS
SaveExploits1References1
OSV
OSV
added 2025/07/21 4:15 p.m.11 views

CVE-2025-7930

A vulnerability was found in code-projects Church Donation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /members/addmembers.php. The manipulation of the argument mobile leads to sql injection. The attack can be launched...

9.8CVSS5.8AI score0.00498EPSS
SaveExploits1References5
CNVD
CNVD
added 2025/07/21 12:00 a.m.12 views

Zoo Management System /admin/add-foreigners-ticket.php File SQL Injection Vulnerability

Zoo Management System is a zoo management system. Zoo Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter cprice in the file /admin/add-foreigners-ticket.php. An attacker can exploit this...

8.8CVSS7.1AI score0.00325EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/07/21 12:00 a.m.14 views

Voting System positions_add.php file SQL Injection Vulnerability

Voting System is an election system. Voting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter description in file /admin/positionsadd.php. An attacker can exploit this vulnerability to execute illega...

8.8CVSS8.3AI score0.00325EPSS
SaveExploits2References1
CNVD
CNVD
added 2025/07/21 12:00 a.m.6 views

Library System add-teacher.php File SQL Injection Vulnerability

Library System is a library system. The Library System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter Username in the file /add-teacher.php. An attacker can exploit this vulnerability to execute illega...

9.8CVSS8.3AI score0.00478EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/07/21 12:00 a.m.44 views

Voting System voters_add.php file SQL Injection Vulnerability

Voting System is an election system. Voting System suffers from a SQL injection vulnerability that originates from the lack of validation of the parameter firstname/lastname in the file /admin/votersadd.php for externally entered SQL statements. An attacker can exploit this vulnerability to execu...

8.8CVSS8.2AI score0.00325EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/07/21 12:00 a.m.13 views

Library System add-student.php File SQL Injection Vulnerability

Library System is a library system. The Library System suffers from a SQL injection vulnerability that stems from the lack of validation of the parameter Username in the file /add-student.php for externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL...

9.8CVSS8.3AI score0.00596EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/07/21 12:00 a.m.10 views

Code-Projects Church Donation System 注入漏洞

Code-Projects Church Donation System is Code-Projects open source a church donation system. An injection vulnerability exists in Code-Projects Church Donation System version 1.0, which originates from a SQL injection attack due to a misbehavior of the parameter mobile in the file...

9.8CVSS7.8AI score0.00498EPSS
SaveExploits1References5
CNVD
CNVD
added 2025/07/21 12:00 a.m.10 views

Online Fire Reporting System add-team.php File SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from an SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter teammember in file /admin/add-team.php. An attacker can...

8.8CVSS7.1AI score0.00325EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/07/21 12:00 a.m.12 views

Zoo Management System /admin/add-animals.php File SQL Injection Vulnerability

Zoo Management System is a zoo management system. Zoo Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter cnum in the file /admin/add-animals.php. An attacker can exploit this vulnerability ...

8.8CVSS7.1AI score0.00325EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/07/20 12:51 a.m.20 views

CVE-2025-50582

StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Course module...

4.8CVSS5.9AI score0.0019EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/07/20 12:00 a.m.10 views

D-Link DI-8100 安全漏洞

The D-Link DI-8100 is an enterprise-class router from D-Link. A buffer overflow vulnerability exists in the D-Link DI-8100 version 1.0, which originates from an insufficient checksum of parameter mx in the sprintf function in the /ddns.asp?opt=add file of component jhttpd. The vulnerability can b...

9CVSS8.1AI score0.01189EPSS
SaveExploits1References6
OSV
OSV
added 2025/07/18 9:15 p.m.15 views

CVE-2025-50583

StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Student module...

4.8CVSS5.6AI score0.0019EPSS
SaveExploits1References3
OSV
OSV
added 2025/07/18 9:15 p.m.10 views

CVE-2025-50582

StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Course module...

4.8CVSS5.6AI score0.0019EPSS
SaveExploits1References3
NVD
NVD
added 2025/07/18 9:15 p.m.17 views

CVE-2025-50582

StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Course module...

4.8CVSS0.0019EPSS
SaveExploits1References2
OSV
OSV
added 2025/07/18 8:15 p.m.9 views

CVE-2025-50584

StudentManage v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Add A New Teacher module...

4.8CVSS5.6AI score0.0019EPSS
SaveExploits1References3
Rows per page
Query Builder