CVE-2022-28986

CVE-2022-28986 Una vulnerabilidad de referencias directas a objetos inseguras IDOR en el "Simple 2FA Plugin for Moodle" de LMS Doctor Detalles de la vulnerabilidad Riesgo : Crítico Vendedor: LMS Doctor - Simple 2 Factor Authentication Plugin For Moodle Divulgado por: Flaviu Popescu Descripción: U...

aws-doctor

aws-doctor A terminal-based tool that acts as a comprehensive health check for your AWS accounts. Built with Golang, aws-doctor diagnoses cost anomalies, detects idle resources, and provides a proactive analysis of your cloud infrastructure. !TIP View the full documentation, permissions guide, an...

CVE-2022-28601

CVE-2022-28601 Una vulnerabilidad de omisión de la autenticación de dos factores 2FA en el complemento "Simple 2FA Plugin for Moodle" de LMS Doctor Detalles de la vulnerabilidad Riesgo : Medio Vendor: LMS Doctor - Simple 2 Factor Authentication Plugin For Moodle Divulgado por: Flaviu Popescu...

Doctor Appointment System 1.0 - SQL Injection

SQL injection in the expertise parameter in searchresult.php in Doctor Appointment System v1.0. id: CVE-2021-27124 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: medium description: | SQL injection in the expertise parameter in searchresult.php in Doctor...

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via the comment parameter. id: CVE-2021-27315 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind...

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via lastname parameter. id: CVE-2021-27316 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind SQ...

Hospital Management System 1.0 - Cross-Site Scripting

Hospital Management System 1.0 contains a cross-site scripting vulnerability via the searchdata parameter in doctor/search.php and patient-search.php. id: CVE-2021-39411 info: name: Hospital Management System 1.0 - Cross-Site Scripting author: arafatansari severity: high description: | Hospital...

Doctor Appointment System 1.0 - SQL Injection

SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page. id: CVE-2021-27314 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: critical description: |...

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via email parameter. id: CVE-2021-27319 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind SQL...

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter. id: CVE-2021-27320 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind S...

EUVD-2026-92841

A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This issue affects the function mysqliquery of the file locateus.php of the component Doctor Search Endpoint. The manipulation of the argument doctorname leads to sql...

CVE-2026-105472

A SQL injection vulnerability exists in the Booking Handler component of the girishsaraf Online-Appointment-Booking-System (versions up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5 ). The flaw is located within an unknown function in the book.php file, where the manipulation of the Doctor/appointm...

CVE-2026-105470

A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This issue affects the function mysqliquery of the file locateus.php of the component Doctor Search Endpoint. The manipulation of the argument doctorname leads to sql...

CVE-2026-105470

The girishsaraf Online-Appointment-Booking-System (up to commit f427b4757128ca253d33d0cc4e87bbb9c999a4d5 ) is vulnerable to a SQL injection in the Doctor Search Endpoint component. The flaw exists within the mysqli_query function of the locateus.php file, where improper handling of the doctorname...

CVE-2021-25791-Multiple-Stored-XSS

CVE-2021-25791-Multiple-Stored-XSS : Múltiples XSS Almacenados en el Sistema de Citas Médicas en Línea Existen múltiples XSS almacenados autenticados en el Sistema de Citas Médicas en Línea V1.0 Enlace del software:...

cloud-doctor

cloud-doctor One command grades your whole cloud account — misconfigurations, missing observability, and security posture, ranked by the five things to fix first. Point it at AWS, Cloudflare, Vercel, Supabase, Render, Fly.io, or Railway and it comes back with a score, what's broken, and a fix for...

CVE-2025-45805

CVE-2025-45805 PoC de CVE-2025-45805 Producto afectado: Doctor Appointment Management System Proveedor: phpgurukul Versión: 1.0 Tipo de vulnerabilidad: Cross-Site Scripting Almacenado XSS Descripción: Un usuario médico autenticado puede inyectar código JavaScript arbitrario en el campo del perfil...

MAL-2026-16296 Malicious code in py-venv-doctor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 976f29262fc2c20f615a0aa8b0e0bb9cd3ab3cbbe1c019da6f17c3c8c108d185 On every CLI invocation, py-venv-doctor's default 'telemetry' path builds a snapshot containing the complete os.environ dictionary all environment...

Malicious code in py-venv-doctor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 976f29262fc2c20f615a0aa8b0e0bb9cd3ab3cbbe1c019da6f17c3c8c108d185 On every CLI invocation, py-venv-doctor's default 'telemetry' path builds a snapshot containing the complete os.environ dictionary all environment...

CVE-2026-93533

A vulnerability was determined in spatie Scotty up to 1.4.4. This impacts the function DoctorCommand::checkSshConnectivity/DoctorCommand::checkRemoteTools of the file app/Commands/DoctorCommand.php of the component Doctor Command Handler. This manipulation of the argument host causes os command...