Lucene search
+L

153767 matches found

Kitploit
Kitploit
added 2026/09/06 2:00 p.m.9 views

CVE-2025-57529

CPAS-bug CPAS audit management information system has SQL injection vulnerability Beijing YouDataSum Technology Co., Ltd. domain: http://youdatasum.com info root@kitploit: CVE-ID: CVE-2025-57529 affected version: findArchiveReportByDah@RequestParamvalue = "pageNum", defaultValue = "0" int pageNum...

9.8CVSS6AI score0.00565EPSS
SaveExploits3
NVD
NVD
added 2026/09/06 1:17 p.m.7 views

CVE-2026-86213

A vulnerability was found in Mstfakts College-Management-System. This issue affects the function mysqliquery of the file Front-end/university.php of the component Search Handler. The manipulation of the argument bookname/bookauthor results in sql injection. The attack may be performed from remote...

7.5CVSS0.00269EPSS
SaveExploits0References6
NVD
NVD
added 2026/09/06 1:17 p.m.9 views

CVE-2026-86214

A vulnerability was determined in Mstfakts College-Management-System. Impacted is an unknown function of the file Front-end/login.php. This manipulation of the argument email causes improper authentication. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

7.5CVSS0.00391EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/06 1:15 p.m.8 views

EUVD-2026-72133

A vulnerability was identified in Mstfakts College-Management-System. The affected element is an unknown function of the file Front-end/server.php of the component Logout Handler. Such manipulation of the argument logout leads to session expiration. It is possible to launch the attack remotely. T...

5.3CVSS0.00206EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/06 1:15 p.m.42 views

CVE-2026-86215 Mstfakts College-Management-System Logout server.php session expiration

A vulnerability was identified in Mstfakts College-Management-System. The affected element is an unknown function of the file Front-end/server.php of the component Logout Handler. Such manipulation of the argument logout leads to session expiration. It is possible to launch the attack remotely. T...

5.3CVSS0.00206EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/06 1:15 p.m.13 views

CVE-2026-86215

A session expiration vulnerability exists in the Logout Handler component (file Front-end/server.php) of Mstfakts College-Management-System , a self-hosted college management application on GitHub. Manipulation of the log_out argument allows a low-privileged remote attacker to force session expir...

5.3CVSS5.2AI score0.00206EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/06 1:00 p.m.9 views

EUVD-2026-72128

A vulnerability was determined in Mstfakts College-Management-System. Impacted is an unknown function of the file Front-end/login.php. This manipulation of the argument email causes improper authentication. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

7.5CVSS5.4AI score0.00391EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/06 1:00 p.m.15 views

CVE-2026-86214

Mstfakts College-Management-System is affected by an improper authentication vulnerability in the file Front-end/login.php . The root cause is manipulation of the email argument, allowing a remote attacker with no privileges and low complexity to bypass authentication. Impact is rated MEDIUM (CVS...

7.5CVSS6.8AI score0.00391EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/06 1:00 p.m.41 views

CVE-2026-86214 Mstfakts College-Management-System login.php improper authentication

A vulnerability was determined in Mstfakts College-Management-System. Impacted is an unknown function of the file Front-end/login.php. This manipulation of the argument email causes improper authentication. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

7.5CVSS0.00391EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/06 12:54 p.m.6 views

CVE-2022-43110

CVE-2022-43110 Further Information Voltronic Viewpower/Pro and rebrands/derivatives The UPS management software is supposed to only allow a properly Authenticated and Authorized admin user using a web interface to configure the system. Due to CWE-425: Direct Request 'Forced Browsing' an...

9.8CVSS5.9AI score0.0066EPSS
SaveExploits0
EUVD
EUVD
added 2026/09/06 12:45 p.m.9 views

EUVD-2026-72127

A vulnerability was found in Mstfakts College-Management-System. This issue affects the function mysqliquery of the file Front-end/university.php of the component Search Handler. The manipulation of the argument bookname/bookauthor results in sql injection. The attack may be performed from remote...

7.5CVSS5.6AI score0.00269EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/06 12:45 p.m.17 views

CVE-2026-86213

CVE-2026-86213 is a remote SQL injection in Mstfakts College-Management-System , specifically in the mysqli_query function within Front-end/university.php (Search Handler component). Manipulating the book_name or book_author arguments allows unauthenticated attackers to execute arbitrary SQL quer...

7.5CVSS6.9AI score0.00269EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/06 12:00 p.m.9 views

EUVD-2026-72110

wger versions through master contain an incomplete authorization bypass in wger/core/views/user.py where three views retain the original gym-scope check using raw integer comparison instead of the issamegym helper, allowing gym staff with gym=None to delete, deactivate, or activate any other user...

6.8CVSS5.7AI score0.00218EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/06 11:18 a.m.9 views

CVE-2026-86211

A flaw has been found in rabindralamsal inventory-management-system 1.0.0. This affects an unknown part of the file index.php of the component Login. Executing a manipulation of the argument username/password can lead to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS0.00254EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/06 11:10 a.m.4 views

CVE-2022-44136-poc

CVE-2022-44136-poc Zenar CMS 9.3 suffers from an ​​unrestricted file upload vulnerability​​ in its file management module, allowing authenticated attackers with minimal privileges to upload arbitrary files, including malicious PHP scripts, to the web server. Due to insufficient file extension...

9.8CVSS8.1AI score0.01114EPSS
SaveExploits1
Cvelist
Cvelist
added 2026/09/06 10:15 a.m.39 views

CVE-2026-86211 rabindralamsal inventory-management-system Login index.php sql injection

A flaw has been found in rabindralamsal inventory-management-system 1.0.0. This affects an unknown part of the file index.php of the component Login. Executing a manipulation of the argument username/password can lead to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS0.00254EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/06 10:15 a.m.6 views

EUVD-2026-72101

A flaw has been found in rabindralamsal inventory-management-system 1.0.0. This affects an unknown part of the file index.php of the component Login. Executing a manipulation of the argument username/password can lead to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS7AI score0.00254EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/06 10:15 a.m.12 views

CVE-2026-86211

CVE-2026-86211 affects rabindralamsal inventory-management-system version 1.0.0 , specifically the Login component in index.php . A SQL injection vulnerability exists through manipulation of the username/password arguments, allowing a remote attacker to execute crafted queries. The CVSS 3.1 base ...

7.5CVSS7AI score0.00254EPSS
SaveExploits0References5
NVD
NVD
added 2026/09/06 9:17 a.m.6 views

CVE-2026-86181

A vulnerability was found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/UpdateUserProfile.php of the component User Profile Update. The manipulation of the argument lname results in cross site scripting. The attack can be...

5.1CVSS0.00208EPSS
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/06 9:01 a.m.4 views

Vehicle-Service-Management-System-Multiple-Cookie-Stealing-Leads-to-Full-Account-Takeover

CVE-2021-46067 Exploit Title: Vehicle Service Management System - 'Multiple' Cookie Stealing Leads to Full Account Takeover Exploit Author: SANU P.L CVE: CVE-2021-46067 CVSS: 9.8 CRITICAL References:...

9.8CVSS8.1AI score0.0514EPSS
SaveExploits1
Rows per page
Query Builder