Lucene search
+L

555 matches found

Positive Technologies
Positive Technologies
added 2026/04/16 12:00 a.m.35 views

PT-2026-51905

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the advance sched function within the taprio component. When should change schedules returns true, the switch schedules function is called to promote the...

7.8CVSS5.9AI score0.00126EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/04/10 12:00 a.m.17 views

PT-2026-31874

A flaw has been found in D-Link DIR-513 1.10. This issue affects the function formAdvanceSetup of the file /goform/formAdvanceSetup of the component POST Request Handler. This manipulation of the argument webpage causes buffer overflow. It is possible to initiate the attack remotely. The exploit...

9CVSS7.7AI score0.00734EPSS
SaveExploits1References6
NVD
NVD
added 2026/04/05 9:16 p.m.14 views

CVE-2019-25680

Advance Gift Shop Pro Script 2.0.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the search parameter. Attackers can submit crafted SQL payloads in the 's' parameter of search requests to extract...

9.8CVSS0.00397EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2026/04/05 8:45 p.m.43 views

CVE-2019-25680 Advance Gift Shop Pro Script 2.0.3 SQL Injection via search

Advance Gift Shop Pro Script 2.0.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the search parameter. Attackers can submit crafted SQL payloads in the 's' parameter of search requests to extract...

8.8CVSS0.00397EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2026/04/05 8:45 p.m.6 views

CVE-2019-25680 Advance Gift Shop Pro Script 2.0.3 SQL Injection via search

Advance Gift Shop Pro Script 2.0.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the search parameter. Attackers can submit crafted SQL payloads in the 's' parameter of search requests to extract...

8.8CVSS6.2AI score0.00397EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2026/03/17 12:27 a.m.11 views

SUSE CVE-2026-2069

A flaw has been found in ggml-org llama.cpp up to 55abc39. Impacted is the function llamagrammaradvancestack of the file llama.cpp/src/llama-grammar.cpp of the component GBNF Grammar Handler. This manipulation causes stack-based buffer overflow. The attack needs to be launched locally. The exploi...

4.8CVSS5.9AI score0.00129EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/03/03 1:48 a.m.11 views

CVE-2026-26703

sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/advancesearch.php...

9.8CVSS6AI score0.00553EPSS
SaveExploits1References1
CVE
CVE
added 2026/03/02 12:00 a.m.48 views

CVE-2026-26703

CVE-2026-26703 affects sourcecodester Personnel Property Equipment System v1.0. The vulnerability is a SQL Injection in the /ppes/admin/advance_search.php endpoint. CVSS v3.1 metrics indicate a CRITICAL impact (base score 9.8) with NETWORK attack vector, LOW attack complexity, NO privileges requi...

9.8CVSS6AI score0.00553EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/02 12:00 a.m.32 views

PT-2026-22606

Name of the Vulnerable Software and Affected Versions sourcecodester Personnel Property Equipment System version 1.0 Description The software is susceptible to a SQL Injection issue. The vulnerability exists in the /ppes/admin/advance search.php file. The vulnerable parameter is not specified...

9.8CVSS6AI score0.00553EPSS
SaveExploits1References9
Cvelist
Cvelist
added 2026/03/02 12:00 a.m.42 views

CVE-2026-26703

sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/advancesearch.php...

0.00553EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/03/02 12:00 a.m.16 views

EUVD-2026-9193

sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/advancesearch.php...

6AI score0.00553EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2026/03/02 12:00 a.m.4 views

CVE-2026-26703

sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/advancesearch.php...

9.8CVSS6AI score0.00553EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/03/02 12:00 a.m.15 views

Personnel Property Equipment System 安全漏洞

Personnel Property Equipment System is a personnel property equipment management system developed by Jon Remus Sevellejo. Version 1.0 of Personnel Property Equipment System has a security vulnerability, which stems from an SQL injection vulnerability in the /ppes/admin/advancesearch.php file...

9.8CVSS5.8AI score0.00553EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/02/19 4:36 a.m.5 views

CVE-2026-1646 Advance Block Extend <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via TitleColor Block Attribute

The Advance Block Extend plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the TitleColor block attribute in the Latest Posts Gutenberg block in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS5.7AI score0.00228EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/02/19 4:36 a.m.36 views

CVE-2026-1646 Advance Block Extend <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via TitleColor Block Attribute

The Advance Block Extend plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the TitleColor block attribute in the Latest Posts Gutenberg block in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS0.00228EPSS
SaveExploits0References3
CVE
CVE
added 2026/02/19 4:36 a.m.27 views

CVE-2026-1646

CVE-2026-1646 affects the Advance Block Extend WordPress plugin (versions up to and including 1.0.4). The issue is a Stored Cross-Site Scripting (XSS) in the TitleColor attribute of the Latest Posts Gutenberg block, caused by insufficient input sanitization and output escaping. Exploitation requi...

6.4CVSS5.7AI score0.00228EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/02/19 12:00 a.m.18 views

WordPress plugin Advance Block Extend 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.4CVSS5.6AI score0.00228EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2026/02/18 11:36 p.m.12 views

WordPress Advance Block Extend plugin <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via TitleColor Block Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via TitleColor Block Attribute vulnerability discovered by WordFence in WordPress Plugin Advance Block Extend versions = 1.0.4...

6.4CVSS5.5AI score0.00228EPSS
SaveExploits0References1Affected Software1
Packet Storm News
Packet Storm News
added 2026/02/10 12:00 a.m.10 views

Breaking 5G on the Lower Layer

As 3GPP systems have strengthened security at the upper layers of the cellular stack, plaintext PHY and MAC layers have remained relatively understudied, though interest in them is growing. In this work, we explore lower-layer exploitation in modern 5G, where recent releases have increased the...

5.5AI score
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/02/06 10:02 p.m.5 views

CVE-2026-2069 ggml-org llama.cpp GBNF Grammar llama-grammar.cpp llama_grammar_advance_stack stack-based overflow

A flaw has been found in ggml-org llama.cpp up to 55abc39. Impacted is the function llamagrammaradvancestack of the file llama.cpp/src/llama-grammar.cpp of the component GBNF Grammar Handler. This manipulation causes stack-based buffer overflow. The attack needs to be launched locally. The exploi...

4.8CVSS5.6AI score0.00129EPSS
SaveExploits0References8
Rows per page
Query Builder