Lucene search
+L

56826 matches found

Positive Technologies
Positive Technologies
added 2026/07/05 12:0 a.m.9 views

PT-2026-55830

Name of the Vulnerable Software and Affected Versions itsourcecode Hospital Management System version 1.0 Description A remote SQL injection exists in the /payment.php endpoint. The issue occurs when the patientid argument is manipulated, allowing an attacker to execute arbitrary SQL commands on...

6.5CVSS7AI score0.00204EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/07/05 12:0 a.m.13 views

PT-2026-55822

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description An issue exists in the /edit room.php file where manipulating the ID argument allows for SQL injection, a technique used to interfere with the queries that an application...

7.5CVSS7.1AI score0.00269EPSS
SaveExploits0References10
Circl
Circl
added 2026/07/04 10:1 p.m.13 views

CVE-2026-58294

creationtimestamp| type| source ---|---|--- 2026-07-04 22:01:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpu2qurvte26 2026-07-06 07:50:17+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706 2026-07-07 13:03:26+00:00|...

7.5CVSS6.1AI score0.0034EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/07/04 9:30 p.m.37 views

CVE-2026-14656 code-projects Assessment Management remove-user.php cross site scripting

A security vulnerability has been detected in code-projects Assessment Management 1.0. This affects an unknown part of the file /admin/remove-user.php. The manipulation of the argument ID leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed...

5.3CVSS0.00443EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/04 9:17 p.m.10 views

CVE-2026-14654

A vulnerability was identified in SourceCodester Simple and Nice Shopping Cart Script 1.0. Affected is an unknown function of the file /admin/girlsproductdeletequery.php. Such manipulation of the argument userid leads to sql injection. The attack can be executed remotely. The exploit is publicly...

7.5CVSS0.00412EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/04 9:0 p.m.11 views

CVE-2026-14654

A vulnerability was identified in SourceCodester Simple and Nice Shopping Cart Script 1.0. Affected is an unknown function of the file /admin/girlsproductdeletequery.php. Such manipulation of the argument userid leads to sql injection. The attack can be executed remotely. The exploit is publicly...

7.5CVSS5.9AI score0.00412EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2026/07/04 9:0 p.m.34 views

CVE-2026-14654 SourceCodester Simple and Nice Shopping Cart Script girlsproductdeletequery.php sql injection

A vulnerability was identified in SourceCodester Simple and Nice Shopping Cart Script 1.0. Affected is an unknown function of the file /admin/girlsproductdeletequery.php. Such manipulation of the argument userid leads to sql injection. The attack can be executed remotely. The exploit is publicly...

7.5CVSS0.00412EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/04 9:0 p.m.26 views

CVE-2026-14654

CVE-2026-14654 concerns an SQL injection in SourceCodester Simple and Nice Shopping Cart Script 1.0. The flaw affects an unknown function in the file /admin/girlsproductdeletequery.php where manipulating the user_id argument enables injection. The vulnerability can be exploited remotely and the e...

7.5CVSS6.9AI score0.00412EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/04 8:45 p.m.9 views

CVE-2026-14653

A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /admin/mensproductdeletequery.php. This manipulation of the argument userid causes sql injection. Remote exploitation of the attack is possible. The exploit has...

7.5CVSS5.8AI score0.00412EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2026/07/04 8:45 p.m.26 views

CVE-2026-14653

SourceCodester Simple and Nice Shopping Cart Script 1.0 contains an SQL injection in /admin/mensproductdeletequery.php exposed by manipulating the user_id argument. The vulnerability is remotely exploitable (attack vector: NETWORK) with LOW to MEDIUM impacts per CVSS data: Confidentiality, Integr...

7.5CVSS6.8AI score0.00412EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/04 8:45 p.m.32 views

CVE-2026-14653 SourceCodester Simple and Nice Shopping Cart Script mensproductdeletequery.php sql injection

A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /admin/mensproductdeletequery.php. This manipulation of the argument userid causes sql injection. Remote exploitation of the attack is possible. The exploit has...

7.5CVSS0.00412EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/04 7:45 p.m.11 views

EUVD-2026-41693

A vulnerability was detected in code-projects Online Voting System 1.0. Impacted is the function testinput of the file /saveVote.php. Performing a manipulation of the argument voterName/voterEmail/voterID/selectedCandidate results in sql injection. The attack can be initiated remotely...

7.5CVSS7AI score0.00269EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/04 4:15 p.m.11 views

EUVD-2026-41680

A vulnerability was identified in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 213babdbaa949e94557246414db0130e01394517. This vulnerability affects the function checkForPostRequests of the file application/core/MYController.php of the component Subscribed Emails Admin Page. Such manipulation...

5.3CVSS4.1AI score0.00288EPSS
SaveExploits0References7
CVE
CVE
added 2026/07/04 2:0 p.m.28 views

CVE-2026-14630

ForceInjection AI-fundermentals 2.0/3.0 contains a vulnerability in the Memory Recall Handler: get_conversation_history (08_agentic_system/memory/langchain/code/smart_customer_service.py). The issue involves use of a weak hash, with remote exploitation possible but described as high complexity. E...

3.1CVSS4.9AI score0.0016EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/04 10:15 a.m.5 views

CVE-2026-14624 omec-project amf NGSetupRequest handler.go denial of service

A vulnerability was identified in omec-project amf up to 2.0.2/2.1.1. Impacted is an unknown function of the file /go/src/amf/ngap/handler.go of the component NGSetupRequest Handler. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit is public...

5.3CVSS5.3AI score0.00317EPSS
SaveExploits0References10
ATTACKERKB
ATTACKERKB
added 2026/07/04 8:15 a.m.10 views

CVE-2026-14621

A vulnerability has been found in FederatedAI FATE up to 2.2.0. This affects the function QueuePushReqStreamObserver.initEggroll of the file java/osx/osx-broker/src/main/java/org/fedai/osx/broker/grpc/QueuePushReqStreamObserver.java of the component OSX Broker. Such manipulation of the argument...

3.1CVSS5.1AI score0.00299EPSS
SaveExploits0References7Affected Software1
Positive Technologies
Positive Technologies
added 2026/07/04 12:0 a.m.16 views

PT-2026-55733

Name of the Vulnerable Software and Affected Versions SourceCodester Simple and Nice Shopping Cart Script version 1.0 Description An issue exists in the /admin/mensproductdeletequery.php file where improper handling of the user id variable allows for SQL injection. This allows a remote attacker t...

7.5CVSS7.2AI score0.00412EPSS
SaveExploits0References9
Circl
Circl
added 2026/07/03 9:36 p.m.15 views

CVE-2026-8924

creationtimestamp| type| source ---|---|--- 2026-07-03 21:36:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprivwaz5n23...

9.1CVSS5.9AI score0.00649EPSS
SaveExploits1References1
Circl
Circl
added 2026/07/03 9:31 p.m.14 views

CVE-2026-8927

creationtimestamp| type| source ---|---|--- 2026-07-03 21:31:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprimuqvxg23 2026-07-07 08:03:43+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mq25e2xcpa2b...

9.1CVSS5.9AI score0.00752EPSS
SaveExploits1References2
NVD
NVD
added 2026/07/03 9:16 p.m.8 views

CVE-2026-25782

Gitea versions before 1.25.5 look up tracked-time entries by time ID without scoping the lookup to the issue in the request URL, allowing deletion attempts to target entries from another issue...

5.3CVSS0.00286EPSS
SaveExploits0References4
Rows per page
Query Builder