Lucene search
+L

1213 matches found

BDU FSTEC
BDU FSTEC
•added 2026/10/27 1:30 a.m.•20 views

Doctor Around Telemedicine Premium Authentication Bypass Info Disclosure

The vulnerability of the “Doctor Around. Telemedicine Premium” platform relates to bypassing authentication using a user-controlled key. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...

7.5CVSS6.4AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/10/27 1:30 a.m.•15 views

Doctor Near Telemedicine Premium Authentication Bypass

The vulnerability of the “Doctor Near. Telemedicine Premium” platform relates to bypassing authentication using a user-controlled key. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

6.8CVSS6.5AI score
SaveExploits0Affected Software1
Kitploit
Kitploit
•added 2026/10/27 12:35 a.m.•21 views

cloud-doctor

cloud-doctor One command grades your whole cloud account — misconfigurations, missing observability, and security posture, ranked by the five things to fix first. Point it at AWS, Cloudflare, Vercel, Supabase, Render, Fly.io, or Railway and it comes back with a score, what's broken, and a fix for...

6.4AI score
SaveExploits0References4
Kitploit
Kitploit
•added 2026/10/26 8:20 p.m.•28 views

aws-doctor

aws-doctor A terminal-based tool that acts as a comprehensive health check for your AWS accounts. Built with Golang, aws-doctor diagnoses cost anomalies, detects idle resources, and provides a proactive analysis of your cloud infrastructure. !TIP View the full documentation, permissions guide, an...

6.3AI score
SaveExploits0References8
NVD
NVD
•added 2026/10/26 3:17 a.m.•17 views

CVE-2026-116112

A vulnerability was identified in HashenUdara edoc-doctor-appointment-system up to cc258425b915d1af9e298777ccd26d160493e68d. The affected element is an unknown function of the file admin/add-new.php. The manipulation of the argument spec leads to sql injection. It is possible to initiate the atta...

7.5CVSS0.00254EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/26 3:00 a.m.•8 views

EUVD-2026-109604

A vulnerability was identified in HashenUdara edoc-doctor-appointment-system up to cc258425b915d1af9e298777ccd26d160493e68d. The affected element is an unknown function of the file admin/add-new.php. The manipulation of the argument spec leads to sql injection. It is possible to initiate the atta...

7.5CVSS7.1AI score0.00254EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/26 3:00 a.m.•22 views

CVE-2026-116112 HashenUdara edoc-doctor-appointment-system add-new.php sql injection

A vulnerability was identified in HashenUdara edoc-doctor-appointment-system up to cc258425b915d1af9e298777ccd26d160493e68d. The affected element is an unknown function of the file admin/add-new.php. The manipulation of the argument spec leads to sql injection. It is possible to initiate the atta...

7.5CVSS0.00254EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/26 3:00 a.m.•18 views

CVE-2026-116112

A SQL injection vulnerability exists in the HashenUdara edoc-doctor-appointment-system (up to commit cc258425b915d1af9e298777ccd26d160493e68d). The flaw is located within an unknown function of the admin/add-new.php file, where the manipulation of the spec argument allows for remote attack execut...

7.5CVSS7.1AI score0.00254EPSS
SaveExploits0References5
Nuclei
Nuclei
•added 2026/10/26 2:10 a.m.•72 views

Hospital Management System 1.0 - Cross-Site Scripting

Hospital Management System 1.0 contains a cross-site scripting vulnerability via the searchdata parameter in doctor/search.php and patient-search.php. id: CVE-2021-39411 info: name: Hospital Management System 1.0 - Cross-Site Scripting author: arafatansari severity: high description: | Hospital...

6.1CVSS6AI score0.00914EPSS
SaveExploits0References2
Nuclei
Nuclei
•added 2026/10/26 2:10 a.m.•114 views

Doctor Appointment System 1.0 - SQL Injection

SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page. id: CVE-2021-27314 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: critical description: |...

9.8CVSS8.6AI score0.12394EPSS
SaveExploits3References3
Nuclei
Nuclei
•added 2026/10/26 2:10 a.m.•71 views

Doctor Appointment System 1.0 - SQL Injection

SQL injection in the expertise parameter in searchresult.php in Doctor Appointment System v1.0. id: CVE-2021-27124 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: medium description: | SQL injection in the expertise parameter in searchresult.php in Doctor...

6.5CVSS6.6AI score0.05831EPSS
SaveExploits2References3
Nuclei
Nuclei
•added 2026/10/26 2:10 a.m.•70 views

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via the comment parameter. id: CVE-2021-27315 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind...

7.5CVSS7.8AI score0.07826EPSS
SaveExploits3References3
Nuclei
Nuclei
•added 2026/10/26 2:10 a.m.•79 views

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via lastname parameter. id: CVE-2021-27316 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind SQ...

7.5CVSS7.8AI score0.07826EPSS
SaveExploits3References3
Nuclei
Nuclei
•added 2026/10/26 2:10 a.m.•105 views

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter. id: CVE-2021-27320 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind S...

7.5CVSS7.3AI score0.09299EPSS
SaveExploits3References3
Nuclei
Nuclei
•added 2026/10/26 2:10 a.m.•66 views

Doctor Appointment System 1.0 - SQL Injection

Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via email parameter. id: CVE-2021-27319 info: name: Doctor Appointment System 1.0 - SQL Injection author: theamanrawat severity: high description: | Blind SQL...

7.5CVSS7.3AI score0.07826EPSS
SaveExploits3References3
Kitploit
Kitploit
•added 2026/10/26 12:25 a.m.•23 views

CVE-2025-45805

CVE-2025-45805 Poc Of CVE-2025-45805 Affected Product: Doctor Appointment Management System Vendor: phpgurukul Version: 1.0 Vulnerability Type: Stored Cross-Site Scripting XSS Description: An authenticated doctor user can inject arbitrary JavaScript code into the doctor profile field name/employe...

7.6CVSS6.1AI score0.00388EPSS
SaveExploits2References1
Kitploit
Kitploit
•added 2026/10/25 8:38 p.m.•23 views

CVE-2021-25791-Multiple-Stored-XSS

CVE-2021-25791-Multiple-Stored-XSS : Multiple Stored XSS Online Doctor Appointment System Multiple stored aunthenticated cross-site scripting exists in the Online Doctor Appointment System V1.0 Software Link:...

5.4CVSS5.8AI score0.02556EPSS
SaveExploits3
GithubExploit
GithubExploit
•added 2026/10/25 11:46 a.m.•14 views

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-doctor !Licensehttps://img.shields.io/badge/lic...

9.8CVSS8.9AI score0.99997EPSS
SaveExploits471
Kitploit
Kitploit
•added 2026/10/25 12:37 a.m.•35 views

CVE-2022-28986

CVE-2022-28986 A Insecure direct object references IDOR vulnerability in "Simple 2FA Plugin for Moodle" by LMS Doctor Vulnerability Details Risk : Critical Vendor: LMS Doctor - Simple 2 Factor Authentication Plugin For Moodle Disclosed by: Flaviu Popescu Description: Insecure direct object...

7.5CVSS7.5AI score0.02336EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/10/24 10:39 p.m.•23 views

CVE-2022-28601

CVE-2022-28601 A Two-Factor Authentication 2FA bypass vulnerability in "Simple 2FA Plugin for Moodle" by LMS Doctor Vulnerability Details Risk : Medium Vendor: LMS Doctor - Simple 2 Factor Authentication Plugin For Moodle Disclosed by: Flaviu Popescu Description: Two-Factor Authentication Bypass...

6.5CVSS6.8AI score0.01756EPSS
SaveExploits1
Rows per page
Query Builder