21 matches found
EUVD-2026-86495
A security vulnerability has been detected in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This impacts an unknown function of the file user/editLog.php. Such manipulation of the argument sid/addtime/type/reason/detail/logdate leads to authorization bypass...
CVE-2026-97647
The ningzichun student-management-system (up to version 98760f5711cf6dc8b4adca53a9e207ca49b02ebf ) contains a security vulnerability in the user/editLog.php file. An attacker can perform a remote authorization bypass by manipulating specific arguments, including sid , addtime , type , reason , de...
CVE-2026-55984
A flaw was found in Gitea. An authenticated attacker could exploit a null pointer dereference within the AddTime API. This can lead to a denial of service DoS, making the application unavailable to legitimate users...
CVE-2026-55984
Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service...
EUVD-2026-58139
Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service...
CVE-2026-55984
Gitea is affected by a Null Pointer Dereference in the AddTime API , which can lead to an Authenticated Denial of Service . This vulnerability specifically impacts the gitea.dev component. Users are encouraged to upgrade to Gitea version v1.27.0 , which includes security fixes for this issue and ...
CVE-2026-55984 Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service
Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service...
CVE-2026-55984 Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service
Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service...
CVE-2026-55984 Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service
Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service...
SUSE CVE-2026-55984
Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service...
GO-2026-6064 Gitea: Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service in gitea.dev
Gitea: Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service in gitea.dev...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the AddTime when a non-existent user name is specified in the API request. An attacker can cause the application to panic and disrupt service availability by sending a crafted request with an invalid user nam...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the AddTime when a non-existent user name is specified in the API request. An attacker can cause the application to panic and disrupt service availability by sending a crafted request with an invalid user nam...
EUVD-2025-31472
Malicious code in bioql PyPI...
Simple Scheduling System addtime.php File SQL Injection Vulnerability
Simple Scheduling System is a simple scheduling system. Simple Scheduling System has a SQL injection vulnerability that originates from the starttime/endtime parameters in the /addtime.php file not being securely filtered. An attacker can exploit this vulnerability to execute malicious SQL comman...
CVE-2025-11115
A vulnerability has been found in code-projects Simple Scheduling System 1.0. Affected by this issue is some unknown functionality of the file /addtime.php. The manipulation of the argument starttime/endtime leads to sql injection. Remote exploitation of the attack is possible. The exploit has be...
CVE-2025-11115 code-projects Simple Scheduling System addtime.php sql injection
A vulnerability has been found in code-projects Simple Scheduling System 1.0. Affected by this issue is some unknown functionality of the file /addtime.php. The manipulation of the argument starttime/endtime leads to sql injection. Remote exploitation of the attack is possible. The exploit has be...
CVE-2025-11115
CVE-2025-11115 affects Code-Projects Simple Scheduling System 1.0, with the flaw located in addtime.php where manipulating starttime/endtime triggers SQL injection. Remote exploitation is possible and public exploits have been disclosed. Multiple sources (NVD/NVDC/CNVD/Red Hat feed) corroborate t...
Code-Projects Simple Scheduling System SQL注入漏洞
Simple Scheduling System is a simple scheduling system. Simple Scheduling System has a SQL injection vulnerability that originates from the starttime/endtime parameters in the /addtime.php file not being securely filtered. An attacker can exploit this vulnerability to execute malicious SQL comman...
PT-2025-39786
Name of the Vulnerable Software and Affected Versions Simple Scheduling System version 1.0 Description A flaw exists in an unknown functionality within the /addtime.php file. The manipulation of the starttime/endtime argument can lead to a SQL injection. Remote exploitation is possible. The explo...