Lucene search
+L

84850 matches found

GithubExploit
GithubExploit
added 2026/04/10 1:21 a.m.152 views

Exploit for SQL Injection in Djangoproject Django

No d...

5.4CVSS7.2AI score0.00802EPSS
SaveExploits1
Vulnrichment
Vulnrichment
added 2026/04/10 12:00 a.m.5 views

CVE-2026-36233

A SQL injection vulnerability was found in the assignInstructorSubjects.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that attackers can inject malicious code via the parameter "subjcode" and use it directly in SQL queries without the need for...

5.9AI score0.00319EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/04/10 12:00 a.m.14 views

Vikunja 安全漏洞

Vikunja is an open-source to-do application developed by Vikunja developers. Versions of Vikunja prior to 2.3.0 contained security vulnerabilities. These vulnerabilities stemmed from the addRepeatIntervalToTime function, which used an On loop to handle repetitive tasks. This could lead to billion...

6.5CVSS5.8AI score0.00347EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2026/04/10 12:00 a.m.12 views

Code-Projects Vehicle Showroom Management System SQL注入漏洞

The Code-Projects Vehicle Showroom Management System is an open-source system for managing automobile showrooms developed by Code-Projects. Version 1.0 of the Code-Projects Vehicle Showroom Management System contains a SQL injection vulnerability. This vulnerability arises from incorrect handling...

7.5CVSS7.2AI score0.00259EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/04/10 12:00 a.m.10 views

PT-2026-31923

itsourcecode Online Student Enrollment System v1.0 is vulnerable to SQL Injection in newCourse.php via the 'coursename' parameter...

5.9AI score0.00319EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2026/04/10 12:00 a.m.28 views

PT-2026-31867

Name of the Vulnerable Software and Affected Versions code-projects Patient Record Management System version 1.0 Description A SQL injection issue exists in code-projects Patient Record Management System version 1.0. The vulnerability is located in an unknown function within the /edit hpatient.ph...

6.5CVSS6.5AI score0.00196EPSS
SaveExploits0References9
Packet Storm News
Packet Storm News
added 2026/04/10 12:00 a.m.8 views

S3CDM: A Secret-Sharing-Scheme-Based Cyberattack Detection Model and Its Simulation Implementation

We design and develop a secret-sharing-scheme-based cyberattack detection modelS3CDMthat can detect unauthorized or illegal activities especially insider attacks and protect sensitive information within complex network infrastructures of large organizations. The model splits a secret among a grou...

5.8AI score
SaveExploits0
CNVD
CNVD
added 2026/04/10 12:00 a.m.21 views

IBM Aspera Shares Encryption Problem Vulnerability (CNVD-2026-16873)

IBM Aspera Shares is a Web application from International Business Machines IBM. An encryption issue vulnerability exists in IBM Aspera Shares versions 1.9.9 through 1.11.0. The vulnerability stems from the use of a weak encryption algorithm and can be exploited by an attacker to decrypt highly...

7.5CVSS5.7AI score0.00203EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/04/10 12:00 a.m.5 views

Unity Linux 20.1070e Security Update: openldap (UTSA-2026-007094)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007094 advisory. OpenLDAP Lightning Memory-Mapped Database LMDB versions up to and including 0.9.14, prior to commit 8e1fda8, contain a heap buffer underflow in the readline function...

4.6CVSS6AI score0.00132EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2026/04/10 12:00 a.m.9 views

The vulnerability of the _traverseJSON() function in the ORM library Sequelize allows a hacker to execute arbitrary SQL code.

The vulnerability of the traverseJSON function in the ORM library Sequelize is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary SQL code...

7.8CVSS6.1AI score0.00422EPSS
SaveExploits3References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/10 12:00 a.m.9 views

PT-2026-31857

Name of the Vulnerable Software and Affected Versions code-projects Online Library Management System version 1.0 Description A vulnerability exists in code-projects Online Library Management System 1.0 that may lead to information disclosure. The issue is related to a manipulation of an unknown...

5.3CVSS5.7AI score0.00259EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2026/04/10 12:00 a.m.17 views

Vikunja 安全漏洞

Vikunja is an open-source to-do application developed by Vikunja developers. Versions of Vikunja prior to 2.3.0 contained security vulnerabilities. These vulnerabilities stemmed from a failure in the TOTP lock mechanism’s attempt to lock the account due to database transaction processing errors...

7.5CVSS5.8AI score0.00296EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2026/04/10 12:00 a.m.13 views

Code-Projects Simple IT Discussion Forum SQL注入漏洞

Code-Projects Simple IT Discussion Forum is a simple forum developed by Code-Projects as open source. Version 1.0 of the code-projects Simple IT Discussion Forum has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter catid in the file...

7.5CVSS7.2AI score0.00254EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/04/10 12:00 a.m.13 views

itsourcecode Online Student Enrollment System 安全漏洞

itsourcecode Online Student Enrollment System is an open-source online enrollment system developed by itsourcecode. Version 1.0 of the itsourcecode Online Student Enrollment System contains a security vulnerability. This vulnerability arises from the subjcode parameter in the...

9.8CVSS5.8AI score0.00319EPSS
SaveExploits1References2
CVE
CVE
added 2026/04/10 12:00 a.m.33 views

CVE-2026-36233

CVE-2026-36233 concerns a SQL injection in the itsourcecode Online Student Enrollment System v1.0 , specifically in the file assignInstructorSubjects.php . The issue arises because the vulnerable parameter subjcode is used directly in SQL queries without proper cleaning/validation, enabling attac...

9.8CVSS5.9AI score0.00319EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/10 12:00 a.m.9 views

PT-2026-31950

Name of the Vulnerable Software and Affected Versions: Vikunja versions prior to 2.3.0 Description: Vikunja, a self-hosted task management platform, contains an issue where the addRepeatIntervalToTime function uses an inefficient loop. An attacker can create a repeating task with a 1-second...

6.5CVSS5.9AI score0.00347EPSS
SaveExploits1
CNNVD
CNNVD
added 2026/04/10 12:00 a.m.13 views

itsourcecode Construction Management System SQL注入漏洞

itsourcecode Construction Management System is an open-source construction management system developed by itsourcecode. Version 1.0 of the itsourcecode Construction Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter equipname in...

6.5CVSS6.7AI score0.00196EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/04/10 12:00 a.m.31 views

PT-2026-31927

PHP-MYSQL-User-Login-System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at login.php...

5.9AI score0.00319EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/04/10 12:00 a.m.25 views

Code-Projects Vehicle Showroom Management System SQL注入漏洞

The Code-Projects Vehicle Showroom Management System is an open-source system for managing automobile showrooms developed by Code-Projects. Version 1.0 of the Code-Projects Vehicle Showroom Management System contains a SQL injection vulnerability. This vulnerability arises from incorrect handling...

7.5CVSS7.2AI score0.00325EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/04/10 12:00 a.m.11 views

PT-2026-31947

Name of the Vulnerable Software and Affected Versions Vikunja versions prior to 2.3.0 Description A SQL operator precedence bug exists in the hasAccessToLabel function. This allows any authenticated user to read any label that has at least one task association, regardless of project access. Expos...

4.3CVSS5.9AI score0.00272EPSS
SaveExploits1
Rows per page
Query Builder