Lucene search
+L

631 matches found

CNNVD
CNNVD
added 2026/03/31 12:0 a.m.15 views

SourceCodester Leave Application System 代码注入漏洞

SourceCodester Leave Application System is an open-source vacation application system developed by SourceCodester. Version 1.0 of SourceCodester Leave Application System contains a code injection vulnerability. This vulnerability stems from unknown functional issues with the user management...

4.8CVSS5.6AI score0.00253EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/03/31 12:0 a.m.10 views

SourceCodester Leave Application System 安全漏洞

SourceCodester Leave Application System is an open-source vacation application system developed by SourceCodester. Version 1.0 of the SourceCodester Leave Application System contains security vulnerabilities, which stem from improper handling of parameters and may lead to file inclusion attacks...

7.5CVSS7.1AI score0.00292EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/03/31 12:0 a.m.14 views

PT-2026-29327

Name of the Vulnerable Software and Affected Versions SourceCodester Leave Application System version 1.0 Description A file inclusion issue exists in SourceCodester Leave Application System. Exploitation involves manipulating the page argument, potentially allowing for remote code execution. The...

7.5CVSS7.3AI score0.00292EPSS
SaveExploits0References10
Packet Storm News
Packet Storm News
added 2026/03/19 12:0 a.m.5 views

A Novel Solution for Zero-Day Attack Detection in IDS Using Self-Attention and Jensen-Shannon Divergence in WGAN-GP

The increasing sophistication of cyber threats, especially zero-day attacks, poses a significant challenge to cybersecurity. Zero-day attacks exploit unknown vulnerabilities, making them difficult to detect and defend against. Existing approaches patch flaws and deploy an Intrusion Detection Syst...

5.8AI score
SaveExploits0
OSV
OSV
added 2026/03/18 12:33 p.m.14 views

MAL-2026-1636 Malicious code in @sommos/create-leaverule-or-terminationrule-form-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffecf69e9e45ed2cf80ce9647acae31ac3007ffd073c8bd2759fea9f84ecc83 The package @sommos/create-leaverule-or-terminationrule-form-data was found to contain malicious code...

5.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/02/10 1:23 a.m.9 views

CVE-2026-2201

A security vulnerability has been detected in ZeroWdd studentmanager up to 2151560fc0a50ec00426785ec1e01a3763b380d9. This impacts the function addLeave of the file src/main/java/com/wdd/studentmanager/controller/LeaveController.java. The manipulation of the argument Reason for Leave leads to cros...

5.4CVSS3.8AI score0.00213EPSS
SaveExploits1References1
NVD
NVD
added 2026/02/09 2:16 a.m.11 views

CVE-2026-2201

A security vulnerability has been detected in ZeroWdd studentmanager up to 2151560fc0a50ec00426785ec1e01a3763b380d9. This impacts the function addLeave of the file src/main/java/com/wdd/studentmanager/controller/LeaveController.java. The manipulation of the argument Reason for Leave leads to cros...

5.4CVSS0.00213EPSS
SaveExploits1References4
OSV
OSV
added 2026/02/09 2:16 a.m.8 views

CVE-2026-2201

A security vulnerability has been detected in ZeroWdd studentmanager up to 2151560fc0a50ec00426785ec1e01a3763b380d9. This impacts the function addLeave of the file src/main/java/com/wdd/studentmanager/controller/LeaveController.java. The manipulation of the argument Reason for Leave leads to cros...

5.4CVSS4AI score0.00213EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2026/02/09 1:2 a.m.9 views

CVE-2026-2201

A security vulnerability has been detected in ZeroWdd studentmanager up to 2151560fc0a50ec00426785ec1e01a3763b380d9. This impacts the function addLeave of the file src/main/java/com/wdd/studentmanager/controller/LeaveController.java. The manipulation of the argument Reason for Leave leads to cros...

4.8CVSS3.8AI score0.00213EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2026/02/09 1:2 a.m.4 views

CVE-2026-2201 ZeroWdd studentmanager LeaveController.java addLeave cross site scripting

A security vulnerability has been detected in ZeroWdd studentmanager up to 2151560fc0a50ec00426785ec1e01a3763b380d9. This impacts the function addLeave of the file src/main/java/com/wdd/studentmanager/controller/LeaveController.java. The manipulation of the argument Reason for Leave leads to cros...

4.8CVSS3.8AI score0.00213EPSS
SaveExploits1References4
CVE
CVE
added 2026/02/09 1:2 a.m.24 views

CVE-2026-2201

CVE-2026-2201 affects ZeroWdd studentmanager. The flaw is in LeaveController.addLeave where manipulating the Reason for Leave parameter triggers cross-site scripting. Attack may be remote; exploit disclosed publicly. No specific affected version information is provided; project has not been activ...

5.4CVSS3.4AI score0.00213EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2026/02/09 12:0 a.m.10 views

StudentManager 代码注入漏洞

StudentManager is a student management system developed by huanfenz’s individual developer. StudentManager has a code injection vulnerability, which stems from incorrect handling of the parameter Reason for Leave in the file src/main/java/com/wdd/studentmanager/controller/LeaveController.java. Th...

5.4CVSS5.6AI score0.00213EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/02/09 12:0 a.m.19 views

PT-2026-7045

A security vulnerability has been detected in ZeroWdd studentmanager up to 2151560fc0a50ec00426785ec1e01a3763b380d9. This impacts the function addLeave of the file src/main/java/com/wdd/studentmanager/controller/LeaveController.java. The manipulation of the argument Reason for Leave leads to cros...

4.8CVSS3.8AI score0.00213EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2026/02/04 9:7 a.m.5 views

kernel: mac80211: fix potential double free on mesh join

In the Linux kernel, the following vulnerability has been resolved: mac80211: fix potential double free on mesh join While commit 6a01afcf8468 "mac80211: mesh: Free ie data when leaving mesh" fixed a memory leak on mesh leave / teardown it introduced a potential memory corruption caused by a doub...

7.8CVSS6.7AI score0.00254EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/02/03 9:19 p.m.9 views

CVE-2026-24471

continuwuity is a Matrix homeserver written in Rust. This vulnerability allows an attacker with a malicious remote server to cause the local server to sign an arbitrary event upon user interaction. Upon a user account leaving a room rejecting an invite, joining a room or knocking on a room, the...

9.3CVSS5.7AI score0.00312EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/02 11:16 p.m.15 views

CVE-2026-24471

continuwuity is a Matrix homeserver written in Rust. This vulnerability allows an attacker with a malicious remote server to cause the local server to sign an arbitrary event upon user interaction. Upon a user account leaving a room rejecting an invite, joining a room or knocking on a room, the...

9.3CVSS0.00312EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/02/02 6:56 p.m.4 views

CVE-2026-24471 Improper Validation in Conduit-derived homeservers resulting in Unintended Proxy or Intermediary ('Confused Deputy')

continuwuity is a Matrix homeserver written in Rust. This vulnerability allows an attacker with a malicious remote server to cause the local server to sign an arbitrary event upon user interaction. Upon a user account leaving a room rejecting an invite, joining a room or knocking on a room, the...

9.3CVSS5.7AI score0.00312EPSS
SaveExploits0References2
CVE
CVE
added 2026/02/02 6:56 p.m.15 views

CVE-2026-24471

The CVE-2026-24471 issue affects Continuwuity and Conduit-derived servers (Continuwuity, Conduit, Grapevine, Tuwunel). A malicious remote server can induce the victim to sign an arbitrary event during user interactions such as leaving a room, joining a room, or knocking on a room, by requesting a...

9.3CVSS5.7AI score0.00312EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/02/02 6:56 p.m.30 views

CVE-2026-24471 Improper Validation in Conduit-derived homeservers resulting in Unintended Proxy or Intermediary ('Confused Deputy')

continuwuity is a Matrix homeserver written in Rust. This vulnerability allows an attacker with a malicious remote server to cause the local server to sign an arbitrary event upon user interaction. Upon a user account leaving a room rejecting an invite, joining a room or knocking on a room, the...

9.3CVSS0.00312EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/02/02 6:56 p.m.6 views

CVE-2026-24471

continuwuity is a Matrix homeserver written in Rust. This vulnerability allows an attacker with a malicious remote server to cause the local server to sign an arbitrary event upon user interaction. Upon a user account leaving a room rejecting an invite, joining a room or knocking on a room, the...

9.3CVSS5.7AI score0.00312EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder