Lucene search
+L

151815 matches found

Nuclei
Nuclei
added 2026/08/21 2:28 a.m.59 views

Barco Control Room Management Suite <=2.9 Build 0275 - Local File Inclusion

Barco Control Room Management through Suite 2.9 Build 0275 is vulnerable to local file inclusion that could allow attackers to access sensitive information and components. Requests must begin with the "GET /...." substring. id: CVE-2022-26233 info: name: Barco Control Room Management Suite =2.9...

7.5CVSS8.4AI score0.15028EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.68 views

WordPress KiviCare <2.3.9 - SQL Injection

WordPress KiviCare plugin before 2.3.9 contains a SQL injection vulnerability. The plugin does not sanitize and escape some parameters before using them in SQL statements via the ajaxpost AJAX action with the getdoctordetails route. An attacker can possibly obtain sensitive information, modify...

9.8CVSS9.2AI score0.1343EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.62 views

Garage Management System 1.0 - SQL Injection

Garage Management System 1.0 contains a SQL injection vulnerability in /login.php via manipulation of the argument username with input [email protected]' AND SELECT 6427 FROM SELECTSLEEP5LwLu AND 'hsvT'='hsvT. An attacker can possibly obtain sensitive information from a database, modify data, and/or execut...

9.8CVSS9AI score0.04493EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.54 views

u5cms v8.3.5 - Open Redirect

u5cms version 8.3.5 contains a URL redirection vulnerability that can cause a user's browser to be redirected to another site via /loginsave.php. id: CVE-2022-32444 info: name: u5cms v8.3.5 - Open Redirect author: 0xAkoko severity: medium description: | u5cms version 8.3.5 contains a URL...

6.1CVSS5.9AI score0.02396EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.67 views

WordPress RSVP and Event Management <2.7.8 - Missing Authorization

WordPress RSVP and Event Management plugin before 2.7.8 is susceptible to missing authorization. The plugin does not have any authorization checks when exporting its entries, and the export function is hooked to the init action. An attacker can potentially retrieve sensitive information such as...

5.3CVSS5.6AI score0.04213EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/21 2:28 a.m.101 views

Car Rental Management System 1.0 - Local File Inclusion

Car Rental Management System 1.0 allows an unauthenticated user to perform a file inclusion attack against the /index.php file with a partial filename in the "page" parameter, leading to code execution. id: CVE-2020-29227 info: name: Car Rental Management System 1.0 - Local File Inclusion author:...

9.8CVSS9.1AI score0.16822EPSS
SaveExploits1References5
NVD
NVD
added 2026/08/21 2:16 a.m.8 views

CVE-2026-76156

OS command injection in the api endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an authenticated administrator to execute arbitrary operating system commands as root...

9.4CVSS
SaveExploits0References1
NVD
NVD
added 2026/08/21 2:16 a.m.8 views

CVE-2026-76157

Missing authentication for a critical function in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an unauthenticated remote attacker to upload arbitrary files to the server's configured upload directory...

8.8CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/21 2:02 a.m.11 views

CVE-2026-76158 Datiphy Data Management Center - External Control of File Name or Path

External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to write files to arbitrary locations outside the intended upload directory via relative or absolute path sequences...

9.3CVSS
SaveExploits0References1
CVE
CVE
added 2026/08/21 2:02 a.m.16 views

CVE-2026-76158

External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to write files to arbitrary locations outside the intended upload directory via relative or absolute path sequences...

9.3CVSS5.6AI score
SaveExploits0References1
EUVD
EUVD
added 2026/08/21 2:02 a.m.8 views

EUVD-2026-63797

External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to write files to arbitrary locations outside the intended upload directory via relative or absolute path sequences...

9.3CVSS5.6AI score
SaveExploits0References1
EUVD
EUVD
added 2026/08/21 1:47 a.m.10 views

EUVD-2026-63792

Missing authentication for a critical function in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an unauthenticated remote attacker to upload arbitrary files to the server's configured upload directory...

8.8CVSS5.7AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/21 1:47 a.m.9 views

CVE-2026-76157 Datiphy Data Management Center - Missing Authentication for Critical Function

Missing authentication for a critical function in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an unauthenticated remote attacker to upload arbitrary files to the server's configured upload directory...

8.8CVSS
SaveExploits0References1
CVE
CVE
added 2026/08/21 1:47 a.m.11 views

CVE-2026-76157

Datiphy Data Management Center v8.3.0 through v8.5.1 has an unauthenticated upload API endpoint allowing remote attackers to upload arbitrary files, scoring CVSS 8.8 (HIGH) for integrity and availability impact. No exploitation evidence or patch details are provided; monitor the advisory at https...

8.8CVSS5.7AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/21 1:44 a.m.9 views

CVE-2026-76156 Datiphy Data Management Center - Improper Neutralization of Special Elements used in an OS Command

OS command injection in the api endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an authenticated administrator to execute arbitrary operating system commands as root...

9.4CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/21 1:44 a.m.7 views

EUVD-2026-63794

OS command injection in the api endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an authenticated administrator to execute arbitrary operating system commands as root...

9.4CVSS5.9AI score
SaveExploits0References1
CVE
CVE
added 2026/08/21 1:44 a.m.14 views

CVE-2026-76156

Datiphy Data Management Center v8.3.0 through v8.5.1 has an OS command injection flaw (CWE-78) in its API endpoint, allowing authenticated administrators to execute arbitrary OS commands as root. No patch version or workaround is mentioned in the provided documents. Exploitation details are not p...

9.4CVSS5.9AI score
SaveExploits0References1
CVE
CVE
added 2026/08/21 1:40 a.m.17 views

CVE-2026-76155

Datiphy Data Management Center versions v8.3.0 through v8.5.1 ship with default administrator credentials, enabling unauthenticated remote attackers to gain full administrative access. CVSS 9.3 CRITICAL; no patch or exploitation evidence provided in documents. Upgrade to a patched version or chan...

9.3CVSS5.5AI score
SaveExploits0References1
EUVD
EUVD
added 2026/08/21 1:40 a.m.7 views

EUVD-2026-63795

Use of default credentials in Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to gain administrative access to the management platform by logging in with default administrator credentials...

9.3CVSS5.5AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/21 1:40 a.m.9 views

CVE-2026-76155 Datiphy Data Management Center - Use of Default Credentials

Use of default credentials in Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to gain administrative access to the management platform by logging in with default administrator credentials...

9.3CVSS
SaveExploits0References1
Rows per page
Query Builder