Lucene search
+L

44 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:22 p.m.•22 views

CVE-2026-7247

A vulnerability has been found in D-Link DI-8100 16.07.26A1. Affected by this issue is the function fileextenasp of the file fileexten.asp of the component File Extension Handler. The manipulation of the argument Name leads to buffer overflow. Remote exploitation of the attack is possible. The...

8.6CVSS7.3AI score0.01241EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/05/25 9:15 a.m.•23 views

CVE-2026-9445

A flaw has been found in SourceCodester Simple POS and Inventory System 1.0. Impacted is an unknown function of the file /admin/addproduct.php of the component File Extension Handler. This manipulation of the argument image causes unrestricted upload. Remote exploitation of the attack is possible...

6.5CVSS6.2AI score0.00347EPSS
SaveExploits0References5Affected Software1
CVE
CVE
•added 2026/05/25 9:15 a.m.•42 views

CVE-2026-9445

CVE-2026-9445 affects SourceCodester Simple POS and Inventory System 1.0. The vulnerability is in an unrestricted upload through the /admin/addproduct.php file (File Extension Handler); manipulating the image argument enables remote code upload. Impact and exploitation details indicate remote exp...

6.5CVSS6.2AI score0.00347EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/25 12:00 a.m.•1 views

CVE-2026-9445: Unrestricted Upload of File with Dangerous Type

A flaw has been found in SourceCodester Simple POS and Inventory System 1.0. Impacted is an unknown function of the file /admin/addproduct.php of the component File Extension Handler. This manipulation of the argument image causes unrestricted upload. Remote exploitation of the attack is possible...

6.5CVSS5.3AI score0.00347EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/25 12:00 a.m.•29 views

SourceCodester Simple POS and Inventory System 代码问题漏洞

SourceCodester Simple POS and Inventory System is SourceCodester open source a simple POS and inventory system . SourceCodester Simple POS and Inventory System 1.0 version of the code problem vulnerability , the vulnerability stems from the File Extension Handler component /admin/addproduct.php...

6.5CVSS6.7AI score0.00347EPSS
SaveExploits0References6
NVD
NVD
•added 2026/04/29 5:16 p.m.•17 views

CVE-2026-7393

A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0. Affected is the function savemenu of the file /admin/adminclassnovo.php of the component File Extension Handler. Performing a manipulation of the argument img results in unrestricted upload. The attack is possible to be...

5.8CVSS0.00376EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/04/29 5:00 p.m.•8 views

CVE-2026-7393 SourceCodester Pizzafy Ecommerce System File Extension admin_class_novo.php save_menu unrestricted upload

A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0. Affected is the function savemenu of the file /admin/adminclassnovo.php of the component File Extension Handler. Performing a manipulation of the argument img results in unrestricted upload. The attack is possible to be...

5.8CVSS4.8AI score0.00376EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/04/29 5:00 p.m.•51 views

CVE-2026-7393 SourceCodester Pizzafy Ecommerce System File Extension admin_class_novo.php save_menu unrestricted upload

A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0. Affected is the function savemenu of the file /admin/adminclassnovo.php of the component File Extension Handler. Performing a manipulation of the argument img results in unrestricted upload. The attack is possible to be...

5.8CVSS0.00376EPSS
SaveExploits1References5
CVE
CVE
•added 2026/04/29 5:00 p.m.•37 views

CVE-2026-7393

SourceCodester Pizzafy Ecommerce System 1.0 is affected in the admin_class_novo.php save_menu() function where the img upload parameter allows unrestricted uploads. The file path involved is Pizzafy/assets/img/, and an attacker with admin authentication could upload a crafted file (no validation ...

5.8CVSS5AI score0.00376EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/04/29 12:00 a.m.•18 views

PT-2026-35959

A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0. Affected is the function save menu of the file /admin/admin class novo.php of the component File Extension Handler. Performing a manipulation of the argument img results in unrestricted upload. The attack is possible to be...

5.8CVSS4.8AI score0.00376EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/29 12:00 a.m.•0 views

CVE-2026-7393: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0. Affected is the function savemenu of the file /admin/adminclassnovo.php of the component File Extension Handler. Performing a manipulation of the argument img results in unrestricted upload. The attack is possible to be...

5.8CVSS5.3AI score0.00376EPSS
SaveExploits1References3
NVD
NVD
•added 2026/04/28 9:16 a.m.•17 views

CVE-2026-7247

A vulnerability has been found in D-Link DI-8100 16.07.26A1. Affected by this issue is the function fileextenasp of the file fileexten.asp of the component File Extension Handler. The manipulation of the argument Name leads to buffer overflow. Remote exploitation of the attack is possible. The...

8.6CVSS0.01241EPSS
SaveExploits1References5
CVE
CVE
•added 2026/04/28 8:30 a.m.•43 views

CVE-2026-7247

CVE-2026-7247 affects D-Link DI-8100 firmware 16.07.26A1. The vulnerability is in the File Extension Handler’s file_exten.asp, specifically the function file_exten_asp, where manipulation of the Name argument causes a buffer overflow. This enables remote exploitation, with the exploit disclosed p...

8.6CVSS7.4AI score0.01241EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
•added 2026/04/28 8:30 a.m.•25 views

EUVD-2026-26018

A vulnerability has been found in D-Link DI-8100 16.07.26A1. Affected by this issue is the function fileextenasp of the file fileexten.asp of the component File Extension Handler. The manipulation of the argument Name leads to buffer overflow. Remote exploitation of the attack is possible. The...

8.6CVSS5.6AI score0.01241EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/04/28 8:30 a.m.•10 views

CVE-2026-7247

A vulnerability has been found in D-Link DI-8100 16.07.26A1. Affected by this issue is the function fileextenasp of the file fileexten.asp of the component File Extension Handler. The manipulation of the argument Name leads to buffer overflow. Remote exploitation of the attack is possible. The...

8.6CVSS5.6AI score0.01241EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2026/04/28 8:30 a.m.•51 views

CVE-2026-7247 D-Link DI-8100 File Extension file_exten.asp file_exten_asp buffer overflow

A vulnerability has been found in D-Link DI-8100 16.07.26A1. Affected by this issue is the function fileextenasp of the file fileexten.asp of the component File Extension Handler. The manipulation of the argument Name leads to buffer overflow. Remote exploitation of the attack is possible. The...

8.6CVSS0.01241EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/04/28 8:30 a.m.•8 views

CVE-2026-7247 D-Link DI-8100 File Extension file_exten.asp file_exten_asp buffer overflow

A vulnerability has been found in D-Link DI-8100 16.07.26A1. Affected by this issue is the function fileextenasp of the file fileexten.asp of the component File Extension Handler. The manipulation of the argument Name leads to buffer overflow. Remote exploitation of the attack is possible. The...

8.6CVSS7.3AI score0.01241EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/28 12:00 a.m.•1 views

CVE-2026-7247: Buffer Copy without Checking Size of Input

A vulnerability has been found in D-Link DI-8100 16.07.26A1. Affected by this issue is the function fileextenasp of the file fileexten.asp of the component File Extension Handler. The manipulation of the argument Name leads to buffer overflow. Remote exploitation of the attack is possible. The...

8.6CVSS5.8AI score0.01241EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2026/04/28 12:00 a.m.•26 views

D-Link DI-8100 缓冲区错误漏洞

The D-Link DI-8100 is a wireless broadband router designed for small and medium-sized network environments by D-Link Corporation. The D-Link DI-8100 version 16.07.26A1 contains a buffer overflow vulnerability. This vulnerability stems from the fileexten.asp function in the File Extension Handler...

8.6CVSS7.5AI score0.01241EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/04/28 12:00 a.m.•22 views

PT-2026-35694

A vulnerability has been found in D-Link DI-8100 16.07.26A1. Affected by this issue is the function file exten asp of the file file exten.asp of the component File Extension Handler. The manipulation of the argument Name leads to buffer overflow. Remote exploitation of the attack is possible. The...

8.6CVSS7.3AI score0.01241EPSS
SaveExploits1References6
Rows per page
Query Builder