Lucene search
+L

25454 matches found

CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•18 views

itsourcecode Online Voting System SQL注入漏洞

Online Voting System is an online voting system. Online Voting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter id/category in the file /index.php. An attacker can exploit this vulnerability to...

8.8CVSS7AI score0.00332EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•19 views

CodeAstro Simple Inventory System SQL注入漏洞

CodeAstro Simple Inventory System is a simple inventory system from CodeAstro. CodeAstro Simple Inventory System version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter Username in the file /index.php of the component Login, which could lead ...

9.8CVSS7.8AI score0.00384EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•22 views

PT-2025-47138

Name of the Vulnerable Software and Affected Versions g33kyrash Online-Banking-System affected versions not specified Description A SQL injection issue exists due to the manipulation of the Username argument. The issue affects unknown code within the /index.php file and is remotely exploitable. T...

7.5CVSS7.5AI score0.00302EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•26 views

g33kyrash Online Banking System SQL注入漏洞

g33kyrash Online Banking System is an online banking system developed using PHP and MySQL by the individual developer of g33kyrash. A SQL injection vulnerability exists in g33kyrash Online Banking System, which stems from an incorrect manipulation of the parameter Username in the file /index.php,...

7.5CVSS7.8AI score0.00302EPSS
SaveExploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/16 9:33 p.m.•23 views

Malicious code in perfviewer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ea912a2de677fa6d9ea6dbf9a792dace4d927efd46a5cb615ba8548fec4930e8 During installation, code downloads and starts an executable and a DLL library. After starting them, files are removed from the disk. The executable has been...

7.3AI score
SaveExploits0References3
EUVD
EUVD
•added 2025/11/16 9:30 a.m.•15 views

EUVD-2025-197722

A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

7.5CVSS7.2AI score0.00435EPSS
SaveExploits1References6
OSV
OSV
•added 2025/11/16 7:15 a.m.•15 views

CVE-2025-13241

A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

9.8CVSS5.8AI score0.00435EPSS
SaveExploits1References5
NVD
NVD
•added 2025/11/16 7:15 a.m.•16 views

CVE-2025-13241

A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

9.8CVSS0.00435EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/11/16 7:02 a.m.•6 views

CVE-2025-13241 code-projects Student Information System index.php sql injection

A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

7.5CVSS7AI score0.00435EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/11/16 3:30 a.m.•19 views

EUVD-2025-197713

A vulnerability has been found in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /index.php?q=single-item. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to...

7.5CVSS6.4AI score0.00387EPSS
SaveExploits1References6
NVD
NVD
•added 2025/11/16 3:15 a.m.•19 views

CVE-2025-13234

A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function of the file /index.php?q=product. Performing manipulation of the argument PROID results in sql injection. It is possible to initiate the attack remotely. The exploit has been mad...

9.8CVSS0.00323EPSS
SaveExploits1References5
OSV
OSV
•added 2025/11/16 3:15 a.m.•17 views

CVE-2025-13233

A vulnerability has been found in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /index.php?q=single-item. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to...

9.8CVSS5.7AI score0.00387EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/16 3:02 a.m.•41 views

CVE-2025-13234

The CVE-2025-13234 affects itsourcecode Inventory Management System 1.0, with a SQL injection flaw in the PROID parameter of /index.php?q=product. Multiple sources confirm remote exploitation and a publicly released exploit. Remediation is not detailed in the initial document beyond recommending ...

9.8CVSS6.4AI score0.00323EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/11/16 2:32 a.m.•11 views

CVE-2025-13233 itsourcecode Inventory Management System index.php sql injection

A vulnerability has been found in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /index.php?q=single-item. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to...

7.5CVSS6.9AI score0.00387EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/16 2:32 a.m.•41 views

CVE-2025-13233

CVE-2025-13233 affects itsourcecode Inventory Management System 1.0. The vulnerable element is the file /index.php?q=single-item where manipulation of the ID parameter enables SQL injection. The issue can be exploited remotely and the exploit has been disclosed publicly. Available details indicat...

9.8CVSS6.9AI score0.00387EPSS
SaveExploits1References5Affected Software1
Microsoft CVE
Microsoft CVE
•added 2025/11/16 1:05 a.m.•24 views

net: mctp: Don't access ifa_index when missing

...

5.5CVSS6.5AI score0.0019EPSS
SaveExploits0
CNNVD
CNNVD
•added 2025/11/16 12:00 a.m.•22 views

itsourcecode Inventory Management System SQL注入漏洞

itsourcecode Inventory Management System is an inventory management system of itsourcecode open source. A SQL injection vulnerability exists in itsourcecode Inventory Management System version 1.0, which originates from a misuse of the parameter ID in file /index.php?q=single-item, which may lead...

9.8CVSS7.8AI score0.00387EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/11/16 12:00 a.m.•20 views

Code-Projects Student Information System SQL注入漏洞

Student Information System is a student information system. Student Information System is vulnerable to a SQL injection vulnerability that originates from a lack of security filtering of the Username parameter in the /index.php file. No details of the vulnerability are available at this time...

9.8CVSS7.6AI score0.00435EPSS
SaveExploits1References5
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/15 5:51 p.m.•16 views

Malicious code in hexadecpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e553647ff67ec6e0339b5de8038f9522494a1200e0437156eee7674d5a29ef21 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

6.9AI score
SaveExploits0References2
OSV
OSV
•added 2025/11/14 5:22 p.m.•12 views

MAL-2025-191791 Malicious code in minemeld-core (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dfe7b8c00b3748b3fe38ffdf3bd69558abb58091ee3347d47003929976ceb457 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

7.2AI score
SaveExploits0References1
Rows per page
Query Builder