24318 matches found
CVE-2026-3042
The CVE-2026-3042 entry concerns itsourcecode Event Management System 1.0. The vulnerability affects the /admin/index.php file where manipulating the ID argument leads to SQL injection, exploitable remotely, with publicly available exploit information. Multiple connected sources corroborate the i...
CVE-2026-3042 itsourcecode Event Management System index.php sql injection
A vulnerability was detected in itsourcecode Event Management System 1.0. The affected element is an unknown function of the file /admin/index.php. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit is now public a...
CVE-2026-3042
A vulnerability was detected in itsourcecode Event Management System 1.0. The affected element is an unknown function of the file /admin/index.php. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit is now public a...
CVE-2026-3042 itsourcecode Event Management System index.php sql injection
A vulnerability was detected in itsourcecode Event Management System 1.0. The affected element is an unknown function of the file /admin/index.php. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit is now public a...
CVE-2026-22567
creationtimestamp| type| source ---|---|--- 2026-02-23 17:55:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfk7x42lh62s 2026-02-26 19:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfruxlj6w723...
CVE-2026-25545
creationtimestamp| type| source ---|---|--- 2026-02-23 13:07:51+00:00| published-proof-of-concept| https://github.com/withastro/astro/security/advisories/GHSA-qq67-mvv5-fw3g 2026-02-24 01:36:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfkzq2dznx2x 2026-02-24 02:24:32+00:00|...
PT-2026-21577
A flaw has been found in itsourcecode Event Management System 1.0. The impacted element is an unknown function of the file /admin/navbar.php. Executing a manipulation of the argument page can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and...
PT-2026-21576
Name of the Vulnerable Software and Affected Versions itsourcecode Event Management System version 1.0 Description A SQL injection issue exists in itsourcecode Event Management System version 1.0. Remote attackers can exploit this by manipulating the ID argument in the /admin/index.php file. The...
CVE-2026-25556
creationtimestamp| type| source ---|---|--- 2026-02-22 12:55:58+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mfh6qh6qa22o 2026-02-23 12:16:34+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mfjmyveiys2b 2026-02-23 12:47:31+00:00| seen|...
CVE-2025-69384
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdiscover Timeline Event History timeline-event-history allows Reflected XSS.This issue affects Timeline Event History: from n/a through = 3.2...
Exploit for CVE-2026-27470
CVE-2026-27470 — ZoneMinder Second-Order SQL Injection !CVE...
CVE-2026-27480
creationtimestamp| type| source ---|---|--- 2026-02-21 12:40:40+00:00| seen| https://gist.github.com/alon710/e56b547bb8d66c88c36130e6613a09b3...
GHSA-CXPW-2G23-2VGW
creationtimestamp| type| source ---|---|--- 2026-02-21 10:10:40+00:00| seen| https://gist.github.com/alon710/63b57342d7d50b3729afe629902bba13...
CVE-2026-27470 ZoneMinder: Second-Order SQL Injection in `getNearEvents()` via Stored Event Name and Cause Fields
ZoneMinder is a free, open source closed-circuit television software application. In versions 1.36.37 and below and 1.37.61 through 1.38.0, there is a second-order SQL Injection vulnerability in the web/ajax/status.php file within the getNearEvents function. Event field values specifically Name a...
CVE-2026-27470
ZoneMinder (versions 1.36.37 and earlier; 1.37.61–1.38.0) contains a second‑order SQL Injection in web/ajax/status.php:getNearEvents(). Although event fields Name and Cause are stored via parameterized queries, they are concatenated into SQL WHERE clauses without escaping, allowing an authenticat...
CVE-2026-27470
ZoneMinder is a free, open source closed-circuit television software application. In versions 1.36.37 and below and 1.37.61 through 1.38.0, there is a second-order SQL Injection vulnerability in the web/ajax/status.php file within the getNearEvents function. Event field values specifically Name a...
CVE-2026-27470 ZoneMinder: Second-Order SQL Injection in `getNearEvents()` via Stored Event Name and Cause Fields
ZoneMinder is a free, open source closed-circuit television software application. In versions 1.36.37 and below and 1.37.61 through 1.38.0, there is a second-order SQL Injection vulnerability in the web/ajax/status.php file within the getNearEvents function. Event field values specifically Name a...
CVE-2026-27470 ZoneMinder: Second-Order SQL Injection in `getNearEvents()` via Stored Event Name and Cause Fields
ZoneMinder is a free, open source closed-circuit television software application. In versions 1.36.37 and below and 1.37.61 through 1.38.0, there is a second-order SQL Injection vulnerability in the web/ajax/status.php file within the getNearEvents function. Event field values specifically Name a...
CVE-2026-27197
creationtimestamp| type| source ---|---|--- 2026-02-21 05:22:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfduvvxblh2c 2026-02-21 06:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116107092205933105 2026-02-21 06:00:31+00:00| seen|...