Lucene search
+L

800 matches found

vulnersOsv
vulnersOsv
•added 2023/03/24 3:15 p.m.•2 views

farm (>=0.4.5, <=0.6.1), farm-haystack (>=0.3.0, <=0.6.0) +2 more potentially affected by CVE-2023-1177 via mlflow (1.0.0)

mlflow PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - farm =0.4.5, =0.3.0, =0.0.1a1.dev14, =0.0.1a1.dev15 - mlflow-faculty 0.3.1 Source cves: CVE-2023-1177 Source advisory: OSV:PYSEC-2023-29...

9.8CVSS0.6968EPSS
SaveExploits2
vulnersOsv
vulnersOsv
•added 2023/03/24 3:15 p.m.•1 views

faculty-models (>=0.1.0, <=0.1.1), mlflow-faculty (>=0.4.0, <=0.4.3) potentially affected by CVE-2023-1177 via mlflow (1.2.0)

mlflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - faculty-models =0.1.0, =0.4.0, =0.4.3 Source cves: CVE-2023-1177 Source advisory: OSV:PYSEC-2023-29...

9.8CVSS0.6968EPSS
SaveExploits2
vulnersOsv
vulnersOsv
•added 2023/03/24 3:15 p.m.•1 views

faculty-models (0.2.0), mlflow-faculty (0.5.0) potentially affected by CVE-2023-1176 via mlflow (1.7.2)

mlflow PYPI version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - faculty-models 0.2.0 - mlflow-faculty 0.5.0 Source cves: CVE-2023-1176 Source advisory: OSV:PYSEC-2023-28...

5.3CVSS0.00583EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2023/03/24 3:15 p.m.•4 views

faculty-models (>=0.1.0, <=0.1.1), mlflow-faculty (>=0.4.0, <=0.4.3) potentially affected by CVE-2023-1176 via mlflow (1.2.0)

mlflow PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - faculty-models =0.1.0, =0.4.0, =0.4.3 Source cves: CVE-2023-1176 Source advisory: OSV:PYSEC-2023-28...

5.3CVSS0.00583EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2023/03/24 3:15 p.m.•4 views

farm (>=0.4.5, <=0.6.1), farm-haystack (>=0.3.0, <=0.6.0) +2 more potentially affected by CVE-2023-1176 via mlflow (1.0.0)

mlflow PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - farm =0.4.5, =0.3.0, =0.0.1a1.dev14, =0.0.1a1.dev15 - mlflow-faculty 0.3.1 Source cves: CVE-2023-1176 Source advisory: OSV:PYSEC-2023-28...

5.3CVSS0.00583EPSS
SaveExploits1
Rapid7 Blog
Rapid7 Blog
•added 2023/02/13 5:31 p.m.•24 views

Rapid7 and USF: Building a diverse cybersecurity workforce is not optional

By Raj Samani and Peter Kaes Today marks an important day for Rapid7, for the state of Florida, and if we may be so bold, for the future of our industry. The announcement of a joint research lab between Rapid7 and the University of South Florida USF reaffirms our commitment to driving a deeper...

7AI score
SaveExploits0
CNVD
CNVD
•added 2022/11/21 12:00 a.m.•52 views

College Management System SQL Injection Vulnerability (CNVD-2022-81235)

College Management System is a simple project organized by Code Projects. It is used to keep track of students, teachers, subjects, schedules and all things related to college. College Management System v1.0 suffers from a SQL injection vulnerability that can be exploited to insert SQL commands...

9.8CVSS10AI score0.00642EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/08/08 1:15 p.m.•22 views

CVE-2022-2707

A vulnerability classified as critical was found in SourceCodester Online Class and Exam Scheduling System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/facultysched.php. The manipulation of the argument faculty with the input ' OR SELECT 2078 FROMSELECT...

9.8CVSS5.7AI score0.00754EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/08/08 12:00 a.m.•50 views

Online Class and Exam Scheduling System SQL Injection Vulnerability

Online Class and Exam Scheduling System is an online class and exam scheduling system. Online Class and Exam Scheduling System 1.0 suffers from a SQL injection vulnerability that originates from an unknown function in the file /pages/facultysched.php being affected. The operation parameter facult...

9.8CVSS8.2AI score0.00754EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/08/08 12:00 a.m.•19 views

PT-2022-18203 · Unknown · Sourcecodester Online Class/Exam Scheduling System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Class and Exam Scheduling System version 1.0 Description: A critical vulnerability was found in the SourceCodester Online Class and Exam Scheduling System, affecting an unknown functionality of the file /pages/faculty...

9.8CVSS7.6AI score0.00754EPSS
SaveExploits1References6
GithubExploit
GithubExploit
•added 2022/05/12 1:23 p.m.•512 views

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 Essay 🕸️ Description 🖼️ This repository co...

7.5CVSS8.4AI score0.99992EPSS
SaveExploits178
osv_cve
osv_cve
•added 2022/01/24 3:15 p.m.•22 views

CVE-2021-40596

SQL injection vulnerability in Login.php in sourcecodester Online Learning System v2 by oretnom23, allows attackers to execute arbitrary SQL commands via the facultyid parameter...

9.8CVSS6.1AI score0.01254EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/01/24 12:00 a.m.•19 views

Elearning System SQL Injection Vulnerability

Elearning System is an e-learning system by Carlo Montero personal developer. It is used as an online platform to help a school provide a learning system. Elearning System suffers from a SQL injection vulnerability that originates from allowing arbitrary SQL commands to be executed via the...

9.8CVSS8.7AI score0.01254EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/01/24 12:00 a.m.•21 views

PT-2022-11272 · Unknown · Sourcecodester Online Learning System

Name of the Vulnerable Software and Affected Versions: sourcecodester Online Learning System version v2 Description: The issue allows attackers to execute arbitrary SQL commands via the faculty id parameter in the Login.php file. This enables attackers to manipulate the database, potentially...

9.8CVSS8.3AI score0.01254EPSS
SaveExploits1References4
CNVD
CNVD
•added 2021/11/08 12:00 a.m.•101 views

Sourcecodester Online Event Booking and Reservation System Cross-Site Scripting Vulnerability

Sourcecodester Online Event Booking and Reservation System is developed using PHP, MySQL database, HTML, CSS, Javascript, Bootstrap and AdminLTE. The system can be accessed by 3 types of users, namely system administrators, students and faculty. sourcecodester Online Event Booking and Reservation...

5.4CVSS0.9AI score0.01674EPSS
SaveExploits5References1
zdt
zdt
•added 2021/10/13 12:00 a.m.•433 views

Online Learning System 2.0 - (Multiple) SQL injection Authentication Bypass Vulnerability

Exploit Title: Online Learning System 2.0 - 'Multiple' SQLi Authentication Bypass Exploit Author: Oguzhan Kara Vendor Homepage: https://www.sourcecodester.com/php/14929/online-learning-system-v2-using-php-free-source-code.html Software Link:...

0.4AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2021/09/06 12:00 a.m.•171 views

Online Learning System 2 SQL Injection

Exploit Title0: eLearning V2by: oretnom23 is vulnerable from remote SQL-Injection-Bypass-Authentication in three accounts. Author: nu11secur1ty Testing and Debugging: nu11secur1ty Date: 09.06.2021 Vendor: https://www.sourcecodester.com/user/257130/activity Link:...

0.2AI score
SaveExploits0
NVD
NVD
•added 2021/05/24 1:15 p.m.•23 views

CVE-2020-25408

A Cross-Site Request Forgery CSRF vulnerability exists in ProjectWorlds College Management System Php 1.0 that allows a remote attacker to modify, delete, or make a new entry of the student, faculty, teacher, subject, scores, location, and article data...

6.5CVSS0.00781EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2021/05/24 1:15 p.m.•16 views

CVE-2020-25408

A Cross-Site Request Forgery CSRF vulnerability exists in ProjectWorlds College Management System Php 1.0 that allows a remote attacker to modify, delete, or make a new entry of the student, faculty, teacher, subject, scores, location, and article data...

6.5CVSS6.7AI score0.00781EPSS
SaveExploits0References2
Prion
Prion
•added 2021/05/24 1:15 p.m.•29 views

Cross site request forgery (csrf)

A Cross-Site Request Forgery CSRF vulnerability exists in ProjectWorlds College Management System Php 1.0 that allows a remote attacker to modify, delete, or make a new entry of the student, faculty, teacher, subject, scores, location, and article data...

4.3CVSS6.5AI score0.00781EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder