Lucene search
+L

108108 matches found

Cvelist
Cvelist
added 4 days ago29 views

CVE-2026-19211 SourceCodester Photo Share Website ajax.php signup sql injection

A vulnerability was found in SourceCodester Photo Share Website 1.0. This affects an unknown function of the file /social/ajax.php?action=signup. Performing a manipulation of the argument email results in sql injection. Remote exploitation of the attack is possible. The exploit has been made publ...

7.5CVSS0.00263EPSS
SaveExploits0References6
EUVD
EUVD
added 4 days ago8 views

EUVD-2026-54509

A flaw has been found in SourceCodester Photo Share Website 1.0. The affected element is an unknown function of the file /social/index.php?page=home. This manipulation of the argument Comment causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may...

5.1CVSS3.6AI score0.00199EPSS
SaveExploits0References6
CVE
CVE
added 4 days ago35 views

CVE-2026-19209

SourceCodester Photo Share Website 1.0 contains a cross-site scripting (XSS) flaw in the unknown function handling the Comment argument of /social/index.php?page=home. The flaw can be triggered remotely, and an exploit has been published. The connected sources confirm the vulnerability, its locat...

5.1CVSS3.6AI score0.00199EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 4 days ago9 views

CVE-2026-19209

A flaw has been found in SourceCodester Photo Share Website 1.0. The affected element is an unknown function of the file /social/index.php?page=home. This manipulation of the argument Comment causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may...

5.1CVSS3.6AI score0.00199EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 4 days ago10 views

CVE-2026-19207

A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0. This issue affects some unknown processing of the file /manage-newvisitors.php. The manipulation of the argument fullname leads to cross site scripting. The attack can be initiated remotely. The exploi...

4.8CVSS0.0021EPSS
SaveExploits0References6
CVE
CVE
added 4 days ago37 views

CVE-2026-19207

Summary: PHPGurukul Company Visitor Management System 1.0 is affected by an input handling flaw in /manage-newvisitors.php where manipulating the fullname parameter enables cross-site scripting. The vulnerability can be triggered remotely and the exploit has been publicly disclosed. The documents...

4.8CVSS3.3AI score0.0021EPSS
SaveExploits0References6
Cvelist
Cvelist
added 4 days ago33 views

CVE-2026-19207 PHPGurukul Company Visitor Management System manage-newvisitors.php cross site scripting

A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0. This issue affects some unknown processing of the file /manage-newvisitors.php. The manipulation of the argument fullname leads to cross site scripting. The attack can be initiated remotely. The exploi...

4.8CVSS0.0021EPSS
SaveExploits0References6
EUVD
EUVD
added 4 days ago11 views

EUVD-2026-54496

A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0. This issue affects some unknown processing of the file /manage-newvisitors.php. The manipulation of the argument fullname leads to cross site scripting. The attack can be initiated remotely. The exploi...

4.8CVSS3.2AI score0.0021EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 4 days ago9 views

CVE-2026-50629

A flaw was found in apache-cxf. The 'clientId' parameter from incoming HTTP requests is directly concatenated into OAuth2 server log warning messages without proper sanitization. A remote attacker could exploit this by injecting arbitrary content, including fake log entries, into the server's log...

5.3CVSS5.5AI score0.0047EPSS
SaveExploits0References5
NVD
NVD
added 4 days ago12 views

CVE-2026-54214

Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to HTTP header injection through the “cType” URL parameter, which allows arbitrary modification of the Content-Type header in HTTP responses. Because the parameter does not properly restrict control characters such as URL-encoded...

5.3CVSS0.00335EPSS
SaveExploits0References2
NVD
NVD
added 4 days ago9 views

CVE-2026-54215

Tobit Laboratories AG TeamDavid's Webbox contains an open redirect vulnerability via the “replyUrl” parameter. An attacker can exploit this vulnerability to craft a URL within the application that, when visited, redirects the user’s browser to an arbitrary third-party site. This can be abused for...

5.3CVSS0.00271EPSS
SaveExploits0References2
NVD
NVD
added 4 days ago11 views

CVE-2026-54204

Tobit Laboratories AG TeamDavid's Webbox 's search functionality accepts a “pathnameroot” parameter, which can be set to network locations using UNC paths e.g., “\Server\Share”. The server processes these paths without validation, resulting in outbound connection attempts to attacker-controlled...

7.7CVSS0.00325EPSS
SaveExploits0References2
Cvelist
Cvelist
added 4 days ago35 views

CVE-2026-54205 TeamDavid: Server-Side Request Forgery (SSRF) via 'pathname' parameter in link storing functionality

Tobit Laboratories AG TeamDavid's Webbox 's link storing functionality //ServerClientcelink.htm accepts a “pathname” parameter, which can be set to network locations using UNC paths e.g., “\Server\Share”. The server processes these paths without validation, resulting in outbound connection...

6.3CVSS0.0028EPSS
SaveExploits0References2
CVE
CVE
added 4 days ago37 views

CVE-2026-54205

The vulnerability CVE-2026-54205 affects Tobit Laboratories AG TeamDavid’s Webbox link-storing functionality. The server-side code accepts a pathname parameter that can be a UNC network location (e.g., \Server\Share) without validation, causing outbound connections to attacker-controlled SMB endp...

6.3CVSS5.6AI score0.0028EPSS
SaveExploits0References2
CVE
CVE
added 4 days ago43 views

CVE-2026-54216

CVE-2026-54216 affects Tobit Laboratories AG TeamDavid’s Webbox. The vulnerability is a reflected cross-site scripting (XSS) flaw in the application triggered by crafting a link with an arbitrary path and an XSS payload via the EntryInfo parameter, using the templateName=!templateName=entryMail, ...

5.3CVSS4.9AI score0.00283EPSS
SaveExploits0References2
EUVD
EUVD
added 4 days ago9 views

EUVD-2026-54447

Tobit Laboratories AG TeamDavid's Webbox application contains a reflected cross-site scripting XSS vulnerability. By sending a specially crafted link including an arbitrary path, an XSS payload or the parameter “EntryInfo”, and the parameter “!templateName=entryMail”, an attacker can cause the...

5.3CVSS4.9AI score0.00283EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 4 days ago8 views

CVE-2026-54216

Tobit Laboratories AG TeamDavid's Webbox application contains a reflected cross-site scripting XSS vulnerability. By sending a specially crafted link including an arbitrary path, an XSS payload or the parameter “EntryInfo”, and the parameter “!templateName=entryMail”, an attacker can cause the...

5.3CVSS4.9AI score0.00283EPSS
SaveExploits0References3
Cvelist
Cvelist
added 4 days ago34 views

CVE-2026-54216 TeamDavid: Reflected Cross Site Scripting (XSS) via the 'EntryInfo' parameter

Tobit Laboratories AG TeamDavid's Webbox application contains a reflected cross-site scripting XSS vulnerability. By sending a specially crafted link including an arbitrary path, an XSS payload or the parameter “EntryInfo”, and the parameter “!templateName=entryMail”, an attacker can cause the...

5.3CVSS0.00283EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 4 days ago8 views

CVE-2026-54215

Tobit Laboratories AG TeamDavid's Webbox contains an open redirect vulnerability via the “replyUrl” parameter. An attacker can exploit this vulnerability to craft a URL within the application that, when visited, redirects the user’s browser to an arbitrary third-party site. This can be abused for...

5.3CVSS5.5AI score0.00271EPSS
SaveExploits0References3
CVE
CVE
added 4 days ago47 views

CVE-2026-54215

CVE-2026-54215 affects Tobit Laboratories AG TeamDavid’s Webbox (through Rollout 524). The vulnerability is an open redirect triggered by the replyUrl parameter, enabling an attacker to craft a URL that redirects users’ browsers to an arbitrary third-party site. This can be abused for phishing by...

5.3CVSS5.5AI score0.00271EPSS
SaveExploits0References2
Rows per page
Query Builder