Lucene search
+L

1051 matches found

Positive Technologies
Positive Technologies
added 2025/09/15 12:00 a.m.7 views

PT-2025-37674

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.1.0-20221027.rc2.git8.56bc5b569087.300.fc36.s390x+debug and earlier Description The Linux kernel contained a deadlock vulnerability within the net/smc module, triggered by cancel delayed work syn. The issue was identifi...

5.5CVSS5.2AI score0.00118EPSS
SaveExploits0References20
Snyk
Snyk
added 2025/09/13 7:41 p.m.9 views

Improper Authorization

Overview Affected versions of this package are vulnerable to Improper Authorization via the cancelAll process in the Role Handler component when manipulating the roleId or userIds arguments in /system/role/authUser/cancelAll. An attacker can gain unauthorized access or perform unauthorized action...

5.5CVSS7AI score0.00367EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/09/12 5:32 a.m.25 views

CVE-2025-10291 linlinjava litemall cancel WxAftersaleController improper authorization

A weakness has been identified in linlinjava litemall up to 1.8.0. This affects the function WxAftersaleController of the file /wx/aftersale/cancel. Executing manipulation of the argument ID can lead to improper authorization. The attack can be executed remotely. The exploit has been made availab...

6.5CVSS0.0034EPSS
SaveExploits0References4
CVE
CVE
added 2025/09/12 5:32 a.m.30 views

CVE-2025-10291

Affects linlinjava litemall up to 1.8.0. The vulnerability resides in WxAftersaleController at /wx/aftersale/cancel, where manipulating the ID argument can cause improper authorization. Exploitation can be performed remotely, and public exploits exist. Multiple sources confirm the issue and note ...

8.8CVSS6.3AI score0.0034EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2025/09/08 12:00 a.m.21 views

CVE-2025-55849

WeiPHP v5.0 and before is vulnerable to SQL Injection via the SucaiController.class.php file and the cancelTemplatee...

0.00197EPSS
SaveExploits1References1
Microsoft CVE
Microsoft CVE
added 2025/09/04 4:28 a.m.11 views

fs/ntfs3: cancle set bad inode after removing name fails

...

7.8CVSS7AI score0.00164EPSS
SaveExploits0
NVD
NVD
added 2025/09/02 10:15 p.m.10 views

CVE-2025-9835

A vulnerability has been found in macrozheng mall up to 1.0.3. This affects the function cancelOrder of the file /order/cancelUserOrder. The manipulation of the argument orderId leads to authorization bypass. The attack can be initiated remotely. The exploit has been disclosed to the public and m...

5.3CVSS0.0033EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/09/02 9:32 p.m.6 views

CVE-2025-9835 macrozheng mall cancelUserOrder cancelOrder authorization

A vulnerability has been found in macrozheng mall up to 1.0.3. This affects the function cancelOrder of the file /order/cancelUserOrder. The manipulation of the argument orderId leads to authorization bypass. The attack can be initiated remotely. The exploit has been disclosed to the public and m...

5.3CVSS6.6AI score0.0033EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/09/02 9:32 p.m.21 views

CVE-2025-9835 macrozheng mall cancelUserOrder cancelOrder authorization

A vulnerability has been found in macrozheng mall up to 1.0.3. This affects the function cancelOrder of the file /order/cancelUserOrder. The manipulation of the argument orderId leads to authorization bypass. The attack can be initiated remotely. The exploit has been disclosed to the public and m...

5.3CVSS0.0033EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/09/02 12:00 a.m.15 views

PT-2025-35616

Name of the Vulnerable Software and Affected Versions: macrozheng mall versions up to 1.0.3 Description: A vulnerability exists in macrozheng mall versions up to 1.0.3. The cancelOrder function within the /order/cancelUserOrder file is affected. Manipulation of the orderId argument can lead to...

5.3CVSS4.2AI score0.0033EPSS
SaveExploits1References8
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2020-36227

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancelextop Cancel operation, resulting in denial of service...

7.5CVSS6.6AI score0.77738EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/08/22 12:22 a.m.26 views

CVE-2025-55444

A SQL injection vulnerability exists in the id2 parameter of the cancelbooking.php page in Online Artwork and Fine Arts MCA Project 1.0. A remote attacker can inject arbitrary SQL queries, leading to database enumeration and potential remote code execution...

9.8CVSS8.7AI score0.00829EPSS
SaveExploits2References1
OSV
OSV
added 2025/08/20 5:15 p.m.9 views

CVE-2025-55444

A SQL injection vulnerability exists in the id2 parameter of the cancelbooking.php page in Online Artwork and Fine Arts MCA Project 1.0. A remote attacker can inject arbitrary SQL queries, leading to database enumeration and potential remote code execution...

9.8CVSS6.3AI score0.00829EPSS
SaveExploits2References4
NVD
NVD
added 2025/08/20 5:15 p.m.11 views

CVE-2025-55444

A SQL injection vulnerability exists in the id2 parameter of the cancelbooking.php page in Online Artwork and Fine Arts MCA Project 1.0. A remote attacker can inject arbitrary SQL queries, leading to database enumeration and potential remote code execution...

9.8CVSS0.00829EPSS
SaveExploits2References4
Positive Technologies
Positive Technologies
added 2025/08/20 12:00 a.m.14 views

PT-2025-34122 · Unknown · Online Artwork/Fine Arts Mca Project

Name of the Vulnerable Software and Affected Versions: Online Artwork and Fine Arts MCA Project version 1.0 Description: A SQL injection vulnerability exists in the id2 parameter of the cancel booking.php page. A remote attacker can inject arbitrary SQL queries, leading to database enumeration an...

9.8CVSS7.8AI score0.00829EPSS
SaveExploits2References8
Cvelist
Cvelist
added 2025/08/20 12:00 a.m.21 views

CVE-2025-55444

A SQL injection vulnerability exists in the id2 parameter of the cancelbooking.php page in Online Artwork and Fine Arts MCA Project 1.0. A remote attacker can inject arbitrary SQL queries, leading to database enumeration and potential remote code execution...

0.00829EPSS
SaveExploits2References4
CNNVD
CNNVD
added 2025/08/20 12:00 a.m.10 views

Online Artwork and Fine Arts 安全漏洞

Online Artwork and Fine Arts is an online artwork display box selling project by the individual developer Vishal Mathur. A security vulnerability exists in Online Artwork and Fine Arts version 1.0, which stems from a SQL injection in the id2 parameter of the cancelbooking.php page, which could le...

9.8CVSS8.4AI score0.00829EPSS
SaveExploits2References6
CVE
CVE
added 2025/08/20 12:00 a.m.34 views

CVE-2025-55444

The CVE-2025-55444 entry affects Online Artwork and Fine Arts MCA Project 1.0, with a vulnerability in the parameter of cancel_booking.php that allows SQL injection. The root cause is unsanitized user input in the parameter, enabling arbitrary SQL queries, leading to database enumeration and po...

9.8CVSS8.8AI score0.00829EPSS
SaveExploits2References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/08/20 12:00 a.m.7 views

CVE-2025-55444

A SQL injection vulnerability exists in the id2 parameter of the cancelbooking.php page in Online Artwork and Fine Arts MCA Project 1.0. A remote attacker can inject arbitrary SQL queries, leading to database enumeration and potential remote code execution...

8.8AI score0.00829EPSS
SaveExploits2References4
GithubExploit
GithubExploit
added 2025/08/19 11:01 a.m.130 views

Exploit for CVE-2025-55444

CVE Reports by Anudeep Kadambala This repository contains det...

9.8CVSS8.9AI score0.00829EPSS
SaveExploits2
Rows per page
Query Builder