Lucene search
+L

43212 matches found

NVD
NVD
•added 2026/04/28 6:16 a.m.•16 views

CVE-2026-7227

A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the function Login of the file /admin/ajax.php?action=login. The manipulation of the argument e-mail results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

7.5CVSS0.00411EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/04/28 5:00 a.m.•19 views

EUVD-2026-25991

A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the function Login of the file /admin/ajax.php?action=login. The manipulation of the argument e-mail results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

7.5CVSS5.3AI score0.00411EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/04/28 5:00 a.m.•9 views

CVE-2026-7227

A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the function Login of the file /admin/ajax.php?action=login. The manipulation of the argument e-mail results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

7.5CVSS5.3AI score0.00411EPSS
SaveExploits0References5Affected Software1
CVE
CVE
•added 2026/04/28 5:00 a.m.•54 views

CVE-2026-7227

SourceCodester Pizzafy Ecommerce System 1.0 contains an SQL injection in the Login function (admin/ajax.php?action=login) via manipulation of the e-mail parameter. Exploitation is possible remotely and the exploit is public, indicating practical risk. The CVE notes CVSS metrics (e.g., up to 7.3–7...

7.5CVSS7AI score0.00411EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/04/28 5:00 a.m.•54 views

CVE-2026-7227 SourceCodester Pizzafy Ecommerce System ajax.php login sql injection

A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the function Login of the file /admin/ajax.php?action=login. The manipulation of the argument e-mail results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

7.5CVSS0.00411EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/04/28 5:00 a.m.•12 views

CVE-2026-7227 SourceCodester Pizzafy Ecommerce System ajax.php login sql injection

A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the function Login of the file /admin/ajax.php?action=login. The manipulation of the argument e-mail results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

7.5CVSS7AI score0.00411EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/04/28 4:45 a.m.•54 views

CVE-2026-7226 SourceCodester Pizzafy Ecommerce System ajax.php login2 sql injection

A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. This issue affects the function login2 of the file /admin/ajax.php?action=login2. The manipulation of the argument e-mail leads to sql injection. Remote exploitation of the attack is possible. The exploit h...

7.5CVSS0.00411EPSS
SaveExploits0References5
CVE
CVE
•added 2026/04/28 4:45 a.m.•59 views

CVE-2026-7226

SourceCodester Pizzafy Ecommerce System 1.0 contains a SQL injection in the /admin/ajax.php?action=login2 function (parameter e-mail). Remote exploitation is possible and the exploit has been publicly disclosed. This CVE entry documents a critical vulnerability scenario affecting login handling; ...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References5
Fedora
Fedora
•added 2026/04/28 1:00 a.m.•24 views

[SECURITY] Fedora 43 Update: openssh-10.0p1-9.fc43

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

8.1CVSS6.7AI score0.00633EPSS
SaveExploits2
CNNVD
CNNVD
•added 2026/04/28 12:00 a.m.•24 views

ERCOM Cryptobox 安全漏洞

ERCOM Cryptobox is a file encryption and security storage tool developed by the French company ERCOM. ERCOM Cryptobox has a security vulnerability that stems from issues with the account locking mechanism. This vulnerability could allow legitimate users to prevent other users from logging in by...

7.1CVSS5.8AI score0.00396EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/28 12:00 a.m.•34 views

PT-2026-35721

Name of the Vulnerable Software and Affected Versions mpGabinet versions prior to 23.12.20 Description mpGabinet performs client-side authentication, which is a process where the verification of user credentials happens on the user's device rather than the server. An attacker with access to any...

8.4CVSS5.9AI score0.00192EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2026/04/28 12:00 a.m.•13 views

Cisco IOS XE Software Remote Code Execution Vulnerability (regreSSHion) (cisco cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco IOS XE Software due to a signal handler race condition found in sshd, where a client does not authenticate within LoginGraceTime seconds, after whi...

8.1CVSS7.4AI score0.99506EPSS
SaveExploits71References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/28 12:00 a.m.•5 views

CVE-2026-7227: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the function Login of the file /admin/ajax.php?action=login. The manipulation of the argument e-mail results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

7.5CVSS7.1AI score0.00411EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/04/28 12:00 a.m.•29 views

BinSoft mpGabinet 安全漏洞

BinSoft mpGabinet is a medical clinic management system developed by the Polish company BinSoft. Versions of BinSoft mpGabinet prior to December 23, 2019, contained security vulnerabilities. These vulnerabilities stemmed from the execution of client-side authentication processes, which could allo...

8.4CVSS6AI score0.00192EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/28 12:00 a.m.•27 views

PT-2026-35664

A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is the function Login of the file /admin/ajax.php?action=login. The manipulation of the argument e-mail results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

7.5CVSS7.3AI score0.00411EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/04/28 12:00 a.m.•24 views

PT-2026-35749

A vulnerability affecting the detailed versions of Cryptobox allows a legitimate user to prevent another to login by triggering an account lockout via sending a specially crafted request...

7.1CVSS5.3AI score0.00396EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/28 12:00 a.m.•8 views

CVE-2026-40551: Use of Client-Side Authentication

Multiple BinSoft products perform client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process by manipulating the application binary and authenticate as an arbitrary user. The described issue affects all...

8.4CVSS6AI score0.00192EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/04/28 12:00 a.m.•13 views

Cisco NX-OS Software Remote Code Execution Vulnerability (regreSSHion) (cisco cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco NX-OS Software due to a signal handler race condition found in sshd, where a client does not authenticate within LoginGraceTime seconds, after which...

8.1CVSS7.4AI score0.99506EPSS
SaveExploits71References3
CNNVD
CNNVD
•added 2026/04/28 12:00 a.m.•29 views

SourceCodester Pizzafy Ecommerce System 注入漏洞

SourceCodester Pizzafy Ecommerce System is an open-source e-commerce system developed by SourceCodester. Version 1.0 of the SourceCodester Pizzafy Ecommerce System has a SQL injection vulnerability. This vulnerability stems from the e-mail parameter in the login2 function of the...

7.5CVSS7.2AI score0.00411EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/28 12:00 a.m.•24 views

SourceCodester Pizzafy Ecommerce System 注入漏洞

SourceCodester Pizzafy Ecommerce System is an open-source e-commerce system developed by SourceCodester. Version 1.0 of the SourceCodester Pizzafy Ecommerce System has a SQL injection vulnerability. This vulnerability stems from the e-mail parameter in the Login function of the...

7.5CVSS7.2AI score0.00411EPSS
SaveExploits0References1
Rows per page
Query Builder