csaf

Translation / Traduction Philibert Gentil：@Philibert-Gentil Vous pouvez me contacter en cas d'erreur de traduction / d'interprétation. DAMN VULNERABLE WEB APPLICATION / BORDEL D'APPLICATION WEB VULNÉRABLE Bordel d'application web vulnérable BAWV, traduit DVWA est une application web PHP/MySQL...

defenselessV1

defenselessV1 Defenseless est une application web vulnérable écrite en PHP/MySQL. Il s'agit de la première version de cette application. Son but est de sensibiliser les développeurs et les novices en sécurité des applications aux problématiques de sécurité. Elle sera bientôt mise à jour avec...

CVE-2026-29861

CVE-2026-29861 🛡️ Раскрытие CVE: CVE-2026-29861 — SQL-инъекция в PHP-MYSQL-User-Login-System Дата раскрытия: 10 апреля 2026 г. Идентификатор CVE: CVE-2026-29861 Критичность: КРИТИЧЕСКАЯ CVSS 9.8 🧩 Краткое описание Критическая уязвимость SQL-инъекции существует в PHP-MYSQL-User-Login-System v1.0, а...

CVE-2026-7028-SQLI

CodeAstro-Online-Job-Portal-SQLi-Delete-All Детали Вендор: CodeAstro Продукт: Online Job Portal Project in PHP MySQL Версия: 1.0 Тип уязвимости: SQL-инъекция CWE: CWE-89 Затронутая конечная точка: /admin/jobs-admins/delete-jobs.php Параметр: id GET Воздействие: Позволяет удалить все записи о...

CVE-2026-6201-IDOR

Нарушенный контроль доступа в CodeAstro Online Job Portal позволяет произвольное удаление вакансий Детали Вендор: CodeAstro Продукт: Online Job Portal Project in PHP MySQL Версия: 1.0 Тип уязвимости: Нарушенный контроль доступа IDOR CWE: CWE-639 Затронутый файл: /jobs/job-delete.php Параметр: id...

CentOS Linux 7 [TuxCare] Security Update: php-common / php-enchant / php-fpm / php-intl / php-mysql / etc Multiple Vulnerabilities (CENTOS7:CLSA-2025:1747740986)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1747740986 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

Zero-Day-Legacy

🎓 Projet de fin d'études — Université nationale d'Ajloun ANU Faculté d'IT · Cybersécurité et Cloud Computing · Année académique 2026 🏆 Note la plus élevée de l'université : 97 % 📖 Présentation Zero-Day Legacy est une machine de laboratoire CTF Capture The Flag de type Boot-to-Root , réaliste et...

CVE-2024-34225

Система управления компьютерной лабораторией на PHP и MySQL 1.0 Отправитель: Kha Do Уязвимость Межсайтовый скриптинг XSS Описание Уязвимость межсайтового скриптинга в php-lms/admin/?page=systeminfo в Системе управления компьютерной лабораторией на PHP и MySQL 1.0 позволяет удалённым злоумышленник...

CVE-2026-14622 jairiidriss restaurant-website-php-mysql AJAX Endpoint ajax_files missing authentication

A vulnerability was found in jairiidriss restaurant-website-php-mysql up to 521428b5b612449df0cf4a5d15ee40cba67f3d35. This vulnerability affects unknown code of the file /admin/ajaxfiles of the component AJAX Endpoint. Performing a manipulation results in missing authentication. The attack is...

CVE-2026-14622

CVE-2026-14622 affects the restaurant-website-php-mysql project (up to commit 521428b5b612449df0cf4a5d15ee40cba67f3d35). The vulnerability is in the /admin/ajax_files component of the AJAX Endpoint, whereby input manipulation leads to missing authentication. It is exploitable remotely, with a pub...

CVE-2026-14622: Missing Authentication for Critical Function

A vulnerability was found in jairiidriss restaurant-website-php-mysql up to 521428b5b612449df0cf4a5d15ee40cba67f3d35. This vulnerability affects unknown code of the file /admin/ajaxfiles of the component AJAX Endpoint. Performing a manipulation results in missing authentication. The attack is...

emlog 跨站请求伪造漏洞

Emlog is an open-source CMS website building system based on PHP and MySQL. Versions of Emlog prior to 2.6.11 contained a cross-site request forgeing vulnerability. This vulnerability stemmed from the lack of CSRF protection in critical management functions, which could allow attackers to trick...

CVE-2026-29861

PHP-MYSQL-User-Login-System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at login.php...

CVE-2026-29861: Improper Neutralization of Special Elements used in an SQL Command

PHP-MYSQL-User-Login-System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at login.php...

CVE-2026-29861

PHP-MYSQL-User-Login-System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at login.php...

CVE-2025-68614: Improper Neutralization of Input During Web Page Generation

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.12.0, the Alert Rule API is vulnerable to stored cross-site scripting. Alert rules can be created or updated via LibreNMS API. The alert rule name is not properly sanitized, and can be used to inject...

CVE-2025-63442: Improper Neutralization of Input During Web Page Generation

Simple User Management System with PHP-MySQL v1.0 is vulnerable to Cross-Site Scripting XSS via the Profile Section. The system fails to properly sanitize user input, allowing attackers to inject and execute arbitrary JavaScript when the input is displayed in the browser...

CVE-2025-63442

Simple User Management System with PHP-MySQL v1.0 is vulnerable to Cross-Site Scripting XSS via the Profile Section. The system fails to properly sanitize user input, allowing attackers to inject and execute arbitrary JavaScript when the input is displayed in the browser...

PT-2025-44771

Name of the Vulnerable Software and Affected Versions Simple User Management System with PHP-MySQL version 1.0 Description The Simple User Management System with PHP-MySQL fails to properly sanitize user input in the Profile Section, allowing attackers to inject and execute arbitrary JavaScript...

EUVD-2025-36057

A security flaw has been discovered in ajayrandhawa User-Management-PHP-MYSQL web up to fedcf58797bf2791591606f7b61fdad99ad8bff1. This vulnerability affects unknown code. Performing manipulation results in cross-site request forgery. The attack can be initiated remotely. The exploit has been...