226 matches found
CVE-2026-29861
CVE-2026-29861 🛡️ CVE 開示: CVE-2026-29861 — PHP-MYSQL-User-Login-System における SQL インジェクション 開示日: 2026年4月10日 CVE ID: CVE-2026-29861 深刻度: CRITICAL CVSS 9.8 🧩 概要 PHP-MYSQL-User-Login-System v1.0 の login.php エンドポイントに、重大な SQL インジェクションの脆弱性が存在します。このアプリケーションは、サニタイズされていないユーザー入力を SQL...
PHP Login System 2.0.1 - Cross-Site Scripting
msaad1999's PHP-Login-System 2.0.1 contains a reflected cross-site scripting caused by unsanitized input in 'validator' parameter in /reset-password, letting remote attackers execute arbitrary JavaScript in a user's browser, exploit requires attacker to craft malicious URL id: CVE-2023-38875 info...
CVE-2024-24139
CVE-2024-24139: Login System with Email Verification SQL Injection Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24139.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-24139/blob/main/CVE-2024-24139.md...
Daxin Resurfaces in Taiwan Alongside Stupig Pre-Login SYSTEM Backdoor
An advanced malware previously attributed to a China-linked threat actor has resurfaced after more than four years within a Taiwan manufacturing firm, along with a previously unreported backdoor dubbed Stupig. Daxin "srt64.sys", as the kernel-mode rootkit is referred to, was first documented by...
CVE-2026-10208
A flaw has been found in code-projects Online Hospital Management System 1.php. This impacts the function loginuser of the file login1.php. Executing a manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be...
CVE-2026-29861
PHP-MYSQL-User-Login-System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at login.php...
CVE-2026-29861: Improper Neutralization of Special Elements used in an SQL Command
PHP-MYSQL-User-Login-System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at login.php...
PHP MySQL User Signup Login System 安全漏洞
PHP MySQL User Signup Login System is a MySQL registration and login system developed by Keerti Vishwkarma. Version 1.0 of the PHP MySQL User Signup Login System has a security vulnerability. This vulnerability stems from a flaw in the username parameter used in the login.php file, which may lead...
CVE-2020-36945: Improper Neutralization of Special Elements used in an SQL Command
WebDamn User Registration Login System contains a SQL injection vulnerability that allows unauthenticated attackers to bypass login authentication by manipulating email credentials. Attackers can inject the payload ' ' OR '1'='1' in both username and password fields to gain unauthorized access to...
CVE-2025-14668
A vulnerability was detected in campcodes Advanced Online Examination System 1.0. This affects an unknown function of the file /query/loginExe.php. Performing a manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit is now publi...
EUVD-2020-22930
Malware in sbrugna...
EUVD-2020-21607
Malware in sbrugna...
EUVD-2007-5757
Malware in sbrugna...
EUVD-2024-27220
Malicious code in bioql PyPI...
EUVD-2024-17436
Malicious code in bioql PyPI...
EUVD-2025-6304
Malicious code in bioql PyPI...
EUVD-2024-51317
Malicious code in bioql PyPI...
EUVD-2023-42644
Malicious code in bioql PyPI...