Lucene search
K

69 matches found

Nuclei
Nuclei
added 6 days ago34 views

Login with Phone Number - Cross-Site Scripting

Login with Phone Number, versions 1.4.2, is affected by an reflected XSS vulnerability in the login-with-phonenumber.php' file in the 'lwpforgotpassword' function. id: CVE-2023-23492 info: name: Login with Phone Number - Cross-Site Scripting author: r3Y3r53 severity: high description: | Login wit...

8.8CVSS7.3AI score0.85243EPSS
Exploits2References5
EUVD
EUVD
added 2026/04/21 6:31 p.m.0 views

EUVD-2025-209544

SQL injection vulnerability in Zeon Academy Pro by Zeon Global Tech. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a POST request using the parameter 'phonenumber' in '/private/continue-upload.php'...

9.3CVSS5.8AI score0.00043EPSS
Exploits0References2
NVD
NVD
added 2026/04/21 4:16 p.m.1 views

CVE-2025-41029

SQL injection vulnerability in Zeon Academy Pro by Zeon Global Tech. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a POST request using the parameter 'phonenumber' in '/private/continue-upload.php'...

9.3CVSS0.00043EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/21 2:59 p.m.1 views

CVE-2025-41029 SQL injection in Zeon Academy Pro by Zeon Global Tech

SQL injection vulnerability in Zeon Academy Pro by Zeon Global Tech. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a POST request using the parameter 'phonenumber' in '/private/continue-upload.php'...

9.3CVSS5.8AI score0.00043EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/21 2:59 p.m.2 views

CVE-2025-41029

SQL injection vulnerability in Zeon Academy Pro by Zeon Global Tech. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a POST request using the parameter 'phonenumber' in '/private/continue-upload.php'...

9.3CVSS5.8AI score0.00043EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/04/21 2:59 p.m.25 views

CVE-2025-41029 SQL injection in Zeon Academy Pro by Zeon Global Tech

SQL injection vulnerability in Zeon Academy Pro by Zeon Global Tech. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a POST request using the parameter 'phonenumber' in '/private/continue-upload.php'...

9.3CVSS0.00043EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/21 12:0 a.m.3 views

PT-2026-33991

SQL injection vulnerability in Zeon Academy Pro by Zeon Global Tech. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a POST request using the parameter 'phonenumber' in '/private/continue-upload.php'...

9.3CVSS5.8AI score0.00043EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/04/21 12:0 a.m.2 views

Zeon Academy Pro SQL注入漏洞

Zeon Academy Pro is an online learning and training management platform developed by the Indian company Zeon. Zeon Academy Pro has a SQL injection vulnerability. This vulnerability stems from the parameter “phonenumber” in the file /private/continue-upload.php, which allows attackers to retrieve,...

9.3CVSS5.8AI score0.00043EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:32 a.m.4 views

CVE-2024-39697

phonenumber is a library for parsing, formatting and validating international phone numbers. Since 0.3.4, the phonenumber parsing code may panic due to a panic-guarded out-of-bounds access on the phonenumber string. In a typical deployment of rust-phonenumber, this may get triggered by feeding a...

8.6CVSS6.9AI score0.00149EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-2608

Malicious code in bioql PyPI...

8.6CVSS7.4AI score0.00552EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2024-34538

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00247EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-26226

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00066EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/09/27 12:0 a.m.2 views

phonenumber 安全漏洞

phonenumber is a Whisperfish open source library for parsing, formatting and validating international phone numbers. A security vulnerability exists in phonenumber versions prior to 1.2.2 that stems from the phonenumbers.Parse function not properly validating input syntax, which could lead to an...

7.5CVSS6.3AI score0.00138EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/08/31 5:14 p.m.3 views

CVE-2025-9660

A vulnerability was found in SourceCodester Bakeshop Online Ordering System 1.0. The impacted element is an unknown function of the file /passwordrecover.php. Performing manipulation of the argument phonenumber results in sql injection. The attack is possible to be carried out remotely. The explo...

9.8CVSS7.2AI score0.00066EPSS
Exploits1References1
OSV
OSV
added 2025/08/29 5:15 p.m.1 views

CVE-2025-9660

A vulnerability was found in SourceCodester Bakeshop Online Ordering System 1.0. The impacted element is an unknown function of the file /passwordrecover.php. Performing manipulation of the argument phonenumber results in sql injection. The attack is possible to be carried out remotely. The explo...

9.8CVSS5.7AI score
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/08/29 4:32 p.m.3 views

CVE-2025-9660 SourceCodester Bakeshop Online Ordering System passwordrecover.php sql injection

A vulnerability was found in SourceCodester Bakeshop Online Ordering System 1.0. The impacted element is an unknown function of the file /passwordrecover.php. Performing manipulation of the argument phonenumber results in sql injection. The attack is possible to be carried out remotely. The explo...

7.5CVSS6.8AI score0.00066EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/08/29 4:32 p.m.8 views

CVE-2025-9660 SourceCodester Bakeshop Online Ordering System passwordrecover.php sql injection

A vulnerability was found in SourceCodester Bakeshop Online Ordering System 1.0. The impacted element is an unknown function of the file /passwordrecover.php. Performing manipulation of the argument phonenumber results in sql injection. The attack is possible to be carried out remotely. The explo...

7.5CVSS0.00066EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/08/29 12:0 a.m.3 views

SourceCodester Bakeshop Online Ordering System 安全漏洞

SourceCodester Bakeshop Online Ordering System is a SourceCodester open source online ordering system. A security vulnerability exists in SourceCodester Bakeshop Online Ordering System version 1.0, which results from SQL injection due to incorrect manipulation of the parameter phonenumber in the...

9.8CVSS7.7AI score0.00066EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2025/08/29 12:0 a.m.3 views

PT-2025-35251

Name of the Vulnerable Software and Affected Versions: SourceCodester Bakeshop Online Ordering System version 1.0 Description: A SQL injection issue exists in the /passwordrecover.php file due to manipulation of the phonenumber argument. This issue is remotely exploitable. The exploit has been ma...

7.5CVSS7.4AI score0.00066EPSS
Exploits1References7
RedhatCVE
RedhatCVE
added 2025/05/23 4:19 a.m.4 views

CVE-2023-42444

phonenumber is a library for parsing, formatting and validating international phone numbers. Prior to versions 0.3.3+8.13.9 and 0.2.5+8.11.3, the phonenumber parsing code may panic due to a panic-guarded out-of-bounds access on the phonenumber string. In a typical deployment of rust-phonenumber,...

8.6CVSS6.9AI score0.00552EPSS
Exploits0
Rows per page
Query Builder