Lucene search
+L

471 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•2 views

CVE-2026-5811: Undefined Security Weakness

A vulnerability was identified in SourceCodester Online Food Ordering System 1.0. Affected by this issue is the function saveproduct of the file /Actions.php of the component POST Parameter Handler. Such manipulation of the argument price leads to business logic errors. The attack may be performe...

5.5CVSS5.6AI score0.00415EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•16 views

PT-2026-31549

Name of the Vulnerable Software and Affected Versions SourceCodester Online Food Ordering System version 1.0 Description A vulnerability exists in the function save product of the file /Actions.php within the POST Parameter Handler component. Manipulation of the price argument can lead to busines...

5.5CVSS6AI score0.00415EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•18 views

PT-2026-31550

Name of the Vulnerable Software and Affected Versions SourceCodester Pharmacy Product Management System version 1.0 Description A security flaw exists in SourceCodester Pharmacy Product Management System 1.0. The issue is located in an unknown part of the add-sales.php file within the POST...

5.5CVSS5.9AI score0.00415EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•3 views

CVE-2026-5812: Undefined Security Weakness

A security flaw has been discovered in SourceCodester Pharmacy Product Management System 1.0. This affects an unknown part of the file add-sales.php of the component POST Parameter Handler. Performing a manipulation of the argument txtqty results in business logic errors. It is possible to initia...

5.5CVSS5.6AI score0.00415EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/22 12:00 a.m.•2 views

CVE-2026-4547: Undefined Security Weakness

A security vulnerability has been detected in mickasmt next-saas-stripe-starter 1.0.0. Affected is the function generateUserStripe of the file actions/generate-user-stripe.ts of the component Checkout Handler. The manipulation of the argument priceId leads to business logic errors. The attack may...

5.3CVSS5.2AI score0.00355EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/22 12:00 a.m.•15 views

PT-2026-27009

A security vulnerability has been detected in mickasmt next-saas-stripe-starter 1.0.0. Affected is the function generateUserStripe of the file actions/generate-user-stripe.ts of the component Checkout Handler. The manipulation of the argument priceId leads to business logic errors. The attack may...

5.3CVSS5.5AI score0.00355EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/03/02 12:00 a.m.•22 views

Google Android 安全漏洞

Google Android is an open-source operating system based on Linux, developed by the American company Google. There are security vulnerabilities in Google Android, which stem from code logic errors and may lead to an increase in local privileges...

7.7CVSS5.9AI score0.00103EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/02 12:00 a.m.•18 views

Google Android 安全漏洞

Google Android is an open-source operating system based on Linux, developed by the American company Google. There are security vulnerabilities in Google Android, which stem from code logic errors and may lead to the disclosure of local information...

6.2CVSS5.8AI score0.00114EPSS
SaveExploits1References1
OSV
OSV
•added 2026/02/03 8:44 a.m.•8 views

BIT-MASTODON-2026-23961 Mastodon may allow a remote suspension bypass

Mastodon is a free, open-source social network server based on ActivityPub. Mastodon allows server administrators to suspend remote users to prevent interactions. However, some logic errors allow already-known posts from such suspended users to appear in timelines if boosted. Furthermore, under...

5.3CVSS5.8AI score0.00447EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/02/03 12:00 a.m.•34 views

PT-2026-6339

Mastodon is a free, open-source social network server based on ActivityPub. Mastodon allows server administrators to suspend remote users to prevent interactions. However, some logic errors allow already-known posts from such suspended users to appear in timelines if boosted. Furthermore, under...

5.3CVSS5.6AI score0.00447EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/01/30 9:23 p.m.•31 views

CVE-2026-1600

A vulnerability was identified in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. The impacted element is an unknown function of the file /hungry/addtocart of the component Add-to-Cart Submission Endpoint. The manipulation of the argument price/allprice leads to business log...

5.3CVSS5.5AI score0.00287EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/30 9:23 p.m.•16 views

CVE-2026-1599

A vulnerability was determined in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. The affected element is an unknown function of the file /hungry/placeorder of the component Checkout. Executing a manipulation of the argument orggrandTotal/vat/servicecharge/grandtotal can lea...

5.3CVSS5.5AI score0.00325EPSS
SaveExploits1References1
OSV
OSV
•added 2026/01/29 6:16 p.m.•14 views

CVE-2026-1599

A vulnerability was determined in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. The affected element is an unknown function of the file /hungry/placeorder of the component Checkout. Executing a manipulation of the argument orggrandTotal/vat/servicecharge/grandtotal can lea...

4.3CVSS5.4AI score0.00325EPSS
SaveExploits1References5
NVD
NVD
•added 2026/01/29 6:16 p.m.•16 views

CVE-2026-1599

A vulnerability was determined in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. The affected element is an unknown function of the file /hungry/placeorder of the component Checkout. Executing a manipulation of the argument orggrandTotal/vat/servicecharge/grandtotal can lea...

5.3CVSS0.00325EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/01/29 6:02 p.m.•9 views

CVE-2026-1600

A vulnerability was identified in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. The impacted element is an unknown function of the file /hungry/addtocart of the component Add-to-Cart Submission Endpoint. The manipulation of the argument price/allprice leads to business log...

5.3CVSS5.5AI score0.00287EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/01/29 6:02 p.m.•9 views

CVE-2026-1600 Bdtask Bhojon All-In-One Restaurant Management System Add-to-Cart Submission Endpoint addtocart logic error

A vulnerability was identified in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. The impacted element is an unknown function of the file /hungry/addtocart of the component Add-to-Cart Submission Endpoint. The manipulation of the argument price/allprice leads to business log...

5.3CVSS5.1AI score0.00287EPSS
SaveExploits1References5
EUVD
EUVD
•added 2026/01/29 6:02 p.m.•25 views

EUVD-2026-4965

A vulnerability was identified in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. The impacted element is an unknown function of the file /hungry/addtocart of the component Add-to-Cart Submission Endpoint. The manipulation of the argument price/allprice leads to business log...

5.3CVSS5.5AI score0.00287EPSS
SaveExploits1References5
CVE
CVE
•added 2026/01/29 5:32 p.m.•58 views

CVE-2026-1599

Bdtask Bhojon All-In-One Restaurant Management System (up to 20260116) is affected by CVE-2026-1599 in the Checkout/placeorder flow. The vulnerability involves an unknown function in /hungry/placeorder where manipulating arguments such as orggrandTotal, vat, service_charge, or grandtotal can trig...

5.3CVSS5AI score0.00325EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2026/01/29 12:00 a.m.•20 views

PT-2026-5325

Name of the Vulnerable Software and Affected Versions Bdtask Bhojon All-In-One Restaurant Management System versions prior to 20260117 Description A business logic error exists in the Add-to-Cart Submission Endpoint. The backend accepts user-controlled pricing values without validating them again...

5.3CVSS5.1AI score0.00287EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/29 12:00 a.m.•1 views

CVE-2026-1600: Undefined Security Weakness

A vulnerability was identified in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. The impacted element is an unknown function of the file /hungry/addtocart of the component Add-to-Cart Submission Endpoint. The manipulation of the argument price/allprice leads to business log...

5.3CVSS5AI score0.00287EPSS
SaveExploits1References1
Rows per page
Query Builder