228 matches found
CVE-2026-29861
CVE-2026-29861 🛡️ CVE Disclosure: CVE-2026-29861 — SQL Injection in PHP-MYSQL-User-Login-System Disclosure Date: 10 April 2026 CVE ID: CVE-2026-29861 Severity: CRITICAL CVSS 9.8 🧩 Summary A critical SQL Injection vulnerability exists in PHP-MYSQL-User-Login-System v1.0, specifically within the...
CVE-2024-24139
CVE-2024-24139: Login System with Email Verification SQL Injection Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24139.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-24139/blob/main/CVE-2024-24139.md...
PHP Login System 2.0.1 - Cross-Site Scripting
msaad1999's PHP-Login-System 2.0.1 contains a reflected cross-site scripting caused by unsanitized input in 'validator' parameter in /reset-password, letting remote attackers execute arbitrary JavaScript in a user's browser, exploit requires attacker to craft malicious URL id: CVE-2023-38875 info...
Indonasia Toko CMS - SQL Injection Detection
Indonesia Toko CMS is susceptible to SQL Injection in its login system, enabling attackers to exploit vulnerabilities and bypass authentication by injecting malicious SQL code. !/usr/bin/env python3 -- coding: utf-8 -- """Indonesia Toko CMS is susceptible to SQL Injection in its login system,...
PHP Login System 2.0.1 - Cross-Site Scripting Detection
msaad1999's PHP-Login-System 2.0.1 contains a reflected cross-site scripting caused by unsanitized input in 'validator' parameter in /reset-password, letting remote attackers execute arbitrary JavaScript in a user's browser, exploit requires attacker to craft malicious URL !/usr/bin/env python3 -...
Daxin Resurfaces in Taiwan Alongside Stupig Pre-Login SYSTEM Backdoor
An advanced malware previously attributed to a China-linked threat actor has resurfaced after more than four years within a Taiwan manufacturing firm, along with a previously unreported backdoor dubbed Stupig. Daxin "srt64.sys", as the kernel-mode rootkit is referred to, was first documented by...
CVE-2026-10208
A flaw has been found in code-projects Online Hospital Management System 1.php. This impacts the function loginuser of the file login1.php. Executing a manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be...
CVE-2026-29861
PHP-MYSQL-User-Login-System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at login.php...
PHP MySQL User Signup Login System Security Vulnerabilities
PHP MySQL User Signup Login System is a MySQL registration and login system developed by Keerti Vishwkarma. Version 1.0 of the PHP MySQL User Signup Login System has a security vulnerability. This vulnerability stems from a flaw in the username parameter used in the login.php file, which may lead...
CVE-2026-29861: Improper Neutralization of Special Elements used in an SQL Command
PHP-MYSQL-User-Login-System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at login.php...
CVE-2020-36945: Improper Neutralization of Special Elements used in an SQL Command
WebDamn User Registration Login System contains a SQL injection vulnerability that allows unauthenticated attackers to bypass login authentication by manipulating email credentials. Attackers can inject the payload ' ' OR '1'='1' in both username and password fields to gain unauthorized access to...
CVE-2025-14668
A vulnerability was detected in campcodes Advanced Online Examination System 1.0. This affects an unknown function of the file /query/loginExe.php. Performing a manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit is now publi...
EUVD-2020-21607
Malware in sbrugna...
EUVD-2007-5757
Malware in sbrugna...
EUVD-2020-22930
Malware in sbrugna...
EUVD-2025-6304
Malicious code in bioql PyPI...
EUVD-2024-17434
Malicious code in bioql PyPI...
EUVD-2024-27219
Malicious code in bioql PyPI...