Lucene search
+L

775 matches found

Cvelist
Cvelist
•added 2026/07/05 3:00 a.m.•55 views

CVE-2026-14698 SourceCodester Syllabus-Aligned Learning Management and Examination System upload_files.php unrestricted upload

A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management and Examination System 1.0. Impacted is an unknown function of the file uploadfiles.php. Performing a manipulation results in unrestricted upload. The attack may be initiated remotely. The exploit has been...

6.5CVSS0.00366EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/07/05 3:00 a.m.•15 views

CVE-2026-14698 SourceCodester Syllabus-Aligned Learning Management and Examination System upload_files.php unrestricted upload

A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management and Examination System 1.0. Impacted is an unknown function of the file uploadfiles.php. Performing a manipulation results in unrestricted upload. The attack may be initiated remotely. The exploit has been...

6.5CVSS6.3AI score0.00366EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/07/05 12:00 a.m.•42 views

PT-2026-55759

A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management and Examination System 1.0. Impacted is an unknown function of the file upload files.php. Performing a manipulation results in unrestricted upload. The attack may be initiated remotely. The exploit has been...

6.5CVSS6.3AI score0.00366EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/05 12:00 a.m.•6 views

CVE-2026-14698: Unrestricted Upload of File with Dangerous Type

A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management and Examination System 1.0. Impacted is an unknown function of the file uploadfiles.php. Performing a manipulation results in unrestricted upload. The attack may be initiated remotely. The exploit has been...

6.5CVSS6.3AI score0.00366EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/05 12:00 a.m.•3 views

CVE-2026-14776: Unrestricted Upload of File with Dangerous Type

A security flaw has been discovered in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this vulnerability is the function pathinfo of the file /uploadfiles.php of the component Filename Extension. Performing a manipulation results in unrestricted upload. Remote...

6.5CVSS6.2AI score0.00366EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/05 12:00 a.m.•4 views

CVE-2026-14775: Unrestricted Upload of File with Dangerous Type

A vulnerability was identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected is an unknown function of the file /processlesson.php. Such manipulation of the argument userid leads to unrestricted upload. The attack may be launched remotely. The exploit is publicly...

6.5CVSS6.4AI score0.00366EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/05 12:00 a.m.•8 views

CVE-2026-14719: Improper Privilege Management

A flaw has been found in SourceCodester Onlne Examination & Learning Management System 1.0. The impacted element is an unknown function of the file register.php of the component Registration Endpoint. Executing a manipulation of the argument role can lead to improper privilege management. The...

7.5CVSS6.8AI score0.00495EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/05 12:00 a.m.•5 views

CVE-2026-14705: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in code-projects Online Examination 1.0. Affected by this issue is some unknown functionality of the file head.php. Executing a manipulation of the argument uname/password can lead to sql injection. It is possible to launch the attack remotely. The exploit has been...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/05 12:00 a.m.•4 views

CVE-2026-14706: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in code-projects Online Examination 1.0. This affects an unknown part of the file /update.php?q=addquiz of the component Quiz Creation Feature. The manipulation of the argument name/total/right/wrong/time/tag/desc leads to sql injection. The attack can be initiated...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/05 12:00 a.m.•51 views

PT-2026-55766

Name of the Vulnerable Software and Affected Versions code-projects Online Examination version 1.0 Description An issue exists in the head.php file where manipulating the uname and password arguments can lead to SQL injection, a technique used to interfere with the queries that an application mak...

7.5CVSS7.2AI score0.00431EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2026/07/05 12:00 a.m.•46 views

PT-2026-55835

Name of the Vulnerable Software and Affected Versions SourceCodester Onlne Examination & Learning Management System version 1.0 Description Improper authorization occurs in the Enrollment Management component within the /ajax enroll.php endpoint. A remote attacker can manipulate the student id,...

7.5CVSS7.1AI score0.00495EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/07/05 12:00 a.m.•29 views

PT-2026-55834

A weakness has been identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this issue is some unknown functionality of the file /announcements.php. Executing a manipulation can lead to unrestricted upload. The attack can be executed remotely. The exploit has...

6.5CVSS6.4AI score0.00366EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/07/05 12:00 a.m.•41 views

PT-2026-55833

Name of the Vulnerable Software and Affected Versions SourceCodester Onlne Examination & Learning Management System version 1.0 Description An unrestricted upload flaw exists within the Filename Extension component. The issue resides in the pathinfo function of the /upload files.php endpoint, whe...

6.5CVSS6.8AI score0.00366EPSS
SaveExploits0References9
The Hacker News
The Hacker News
•added 2026/06/26 8:49 a.m.•28 views

Russia Used Cellebrite on Jailed Activist's iPhone Months After Sales Cutoff

Russian authorities used Cellebrite's UFED forensic tools to break into the iPhone of detained opposition activist Andrey Pivovarov in June 2021, three months after Cellebrite said it would stop selling its tools and services to Russia and Belarus. The finding, published June 25 by the Citizen La...

5.9AI score
SaveExploits0
NVD
NVD
•added 2026/06/08 6:16 p.m.•23 views

CVE-2026-11552

A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System and Syllabus-aligned Learning Management and Examination System 1.0. Affected by this issue is some unknown functionality of the file importusers.php. The manipulation of the argument rawpassword with...

6.9CVSS0.00286EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/06/08 5:00 p.m.•28 views

EUVD-2026-35174

A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System and Syllabus-aligned Learning Management and Examination System 1.0. Affected by this issue is some unknown functionality of the file importusers.php. The manipulation of the argument rawpassword with...

6.9CVSS5.2AI score0.00286EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/06/08 5:00 p.m.•34 views

CVE-2026-11552 SourceCodester Onlne Examination & Learning Management System import_users.php hard-coded password

A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System and Syllabus-aligned Learning Management and Examination System 1.0. Affected by this issue is some unknown functionality of the file importusers.php. The manipulation of the argument rawpassword with...

6.9CVSS5.6AI score0.00286EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/08 12:00 a.m.•5 views

CVE-2026-11552: Use of Hard-coded Password

A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System and Syllabus-aligned Learning Management and Examination System 1.0. Affected by this issue is some unknown functionality of the file importusers.php. The manipulation of the argument rawpassword with...

6.9CVSS5.5AI score0.00286EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/04/19 12:00 a.m.•21 views

PHPEMS 安全漏洞

PHPEMS is an open-source PHP online simulation exam system. Version PHPEMS 11.0 contains a security vulnerability, which stems from the operation of the uploadfile parameter in the file /app/exam/controller/exams.master.php. This operation leads to server-side request forgeing, potentially allowi...

6.5CVSS6.6AI score0.00347EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/04/06 12:00 a.m.•28 views

Red Hat Enterprise Linux 10 代码问题漏洞

Red Hat Enterprise Linux 10 is a Linux operating system designed for enterprise users by the American company Red Hat. Red Hat Enterprise Linux 10 has code-related vulnerabilities, which stem from specially crafted malicious archive files. These vulnerabilities may lead to hidden file injections...

5.5CVSS5.9AI score0.00401EPSS
SaveExploits1References3
Rows per page
Query Builder